backdoors.ai - robtex.com

backdoors.ai

DNSSEC⚠️ Not signed
A216.150.1.1🇨🇦 Amazon216.150.1.0/24 EC2 Prefix
NSns1.digitalocean.com
A2606:4700:52::ac40:34d2🇺🇸 Cloudflare2606:4700:52::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns1.digitalocean.com
A172.64.52.210🇺🇸 Cloudflare172.64.52.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns1.digitalocean.com
NSns2.digitalocean.com
A2606:4700:5a::ac40:3515🇺🇸 Cloudflare2606:4700:5a::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns2.digitalocean.com
A172.64.53.21🇺🇸 Cloudflare172.64.53.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns2.digitalocean.com
NSns3.digitalocean.com
A2606:4700:52::ac40:31d1🇺🇸 Cloudflare2606:4700:52::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns3.digitalocean.com
A172.64.49.209🇺🇸 Cloudflare172.64.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns3.digitalocean.com
MXaspmx1.migadu.com
A2001:41d0:303:648a::1🇫🇷 OVH2001:41d0::/32 IPv6
A2001:41d0:700:19b4::1🇫🇷 OVH2001:41d0::/32 IPv6
A2001:41d0:700:1a57::1🇫🇷 OVH2001:41d0::/32 IPv6
A51.38.57.138🇫🇷 OVH51.38.0.0/16
PTRmizu0.migadu.com
A135.125.171.180🇫🇷 OVH135.125.128.0/17
PTRns3160119.ip-135-125-171.eu
A135.125.222.87🇫🇷 OVH135.125.128.0/17
PTRns3160230.ip-135-125-222.eu
MXaspmx2.migadu.com(20)
A2001:41d0:303:648a::1🇫🇷 OVH2001:41d0::/32 IPv6
A2001:41d0:700:19b4::1🇫🇷 OVH2001:41d0::/32 IPv6
A2001:41d0:700:1a57::1🇫🇷 OVH2001:41d0::/32 IPv6
A51.38.57.138🇫🇷 OVH51.38.0.0/16
PTRmizu0.migadu.com
A135.125.171.180🇫🇷 OVH135.125.128.0/17
PTRns3160119.ip-135-125-171.eu
A135.125.222.87🇫🇷 OVH135.125.128.0/17
PTRns3160230.ip-135-125-222.eu
TXThosted-email-verify=cszoal0k
TXTv=spf1 include:spf.migadu.com -all
TXTgoogle-site-verification=WHmx9GmtT-NNkQVURWlvZw7mxOfzFiH79hOLqv447Vs
SOAns1.digitalocean.comhostmaster@backdoors.ai serial=0

ai

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.ai
NSv0n1.nic.ai
NSv0n2.nic.ai
NSv0n3.nic.ai
NSv2n0.nic.ai
NSv2n1.nic.ai
SOAv0n0.nic.aihostmaster@donuts.email serial=1784012835

Same first word

Similar names

DNS History

6 records (6 active, 0 former)

NSns1.digitalocean.comns2.digitalocean.comns3.digitalocean.comMXaspmx1.migadu.comaspmx2.migadu.comA216.150.1.1
NSns1.digitalocean.com2026-07-10 → 2026-07-14 · 2 obs
● 2026-07-10 14:06:54
● 2026-07-14 07:45:20
NSns2.digitalocean.com2026-07-10 → 2026-07-14 · 2 obs
● 2026-07-10 14:06:54
● 2026-07-14 07:45:20
NSns3.digitalocean.com2026-07-10 → 2026-07-14 · 2 obs
● 2026-07-10 14:06:54
● 2026-07-14 07:45:20
MXaspmx1.migadu.com2026-07-10 → 2026-07-14 · 2 obs
● 2026-07-10 14:06:54
● 2026-07-14 07:45:20
MXaspmx2.migadu.com2026-07-10 → 2026-07-14 · 2 obs
● 2026-07-10 14:06:54
● 2026-07-14 07:45:20
A216.150.1.12026-07-10 → 2026-07-14 · 2 obs
● 2026-07-10 14:06:54
● 2026-07-14 07:45:20

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
aiv0n1.nic.ai, v0n3.nic.ai, v0n0.nic.ai, v2n0.nic.ai...-
backdoors.ains2.digitalocean.com, ns1.digitalocean.com, ns3.digitalocean.com-

✅ Authoritative Response

Server:172.64.49.209

NS records: ns2.digitalocean.com, ns1.digitalocean.com, ns3.digitalocean.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for backdoors.ai (unsigned zone)

⏱️ Timing

Total: 459ms | Queries: -

📄 Records

TypeCountSample Data
A1216.150.1.1
NS3ns3.digitalocean.com, ns1.digitalocean.com...
MX2aspmx2.migadu.com (pri: 20), aspmx1.migadu.com (pri: 10)
TXT3v=spf1 include:spf.migadu.com -all, google-site-verification=WHmx9GmtT-NNkQV...
SOA1ns1.digitalocean.com hostmaster.backdoor

Analysis

IP Addresses

backdoors.ai points to a single IP number: 216.150.1.1.

Additional host names — domainpal.com, biblesaysabout.com, primesource.no and two others — share IP numbers with backdoors.ai.

Name Servers

Three name servers are authoritative for backdoors.ai: ns1.digitalocean.com, ns2.digitalocean.com and ns3.digitalocean.com.

backdoors.ai has at least partial name server overlap with other domains, such as dialagile.com, burnweb.org, pythia.cc and two others.

ns1.digitalocean.com resolves to 172.64.52.210 and 2606:4700:52::ac40:34d2. ns2.digitalocean.com resolves to 172.64.53.21 and 2606:4700:5a::ac40:3515. ns3.digitalocean.com resolves to 172.64.49.209 and 2606:4700:52::ac40:31d1. All three hostnames point to two IP numbers each.

Mail Servers

backdoors.ai has two mail servers: aspmx1.migadu.com and aspmx2.migadu.com.

backdoors.ai shares the same mail server setup as other domains, including square-panel.io, bux.com.au, syberplex.com and two others.

At least some of backdoors.ai's mail servers are shared with other domains, among them boinc-australia.net, venombet.com, irtoto.com and fictivity.nl.

Host names with 6 IP numbers:

aspmx1.migadu.com carries IP addresses 51.38.57.138, 135.125.171.180 and 135.125.222.87, with 3 other addresses beyond those.

aspmx2.migadu.com carries IP addresses 51.38.57.138, 135.125.171.180 and 135.125.222.87, with 3 other addresses beyond those.

These two host names — aspmx1.migadu.com and aspmx2.migadu.com — each point to 2001:41d0:303:648a::1 IP addresses.

These two host names — aspmx1.migadu.com and aspmx2.migadu.com — each point to 2001:41d0:700:19b4::1 IP addresses.

These two host names — aspmx1.migadu.com and aspmx2.migadu.com — each point to 2001:41d0:700:1a57::1 IP addresses.

These two host names — aspmx1.migadu.com and aspmx2.migadu.com — each point to 51.38.57.138 IP addresses.

These two host names — aspmx1.migadu.com and aspmx2.migadu.com — each point to 135.125.171.180 IP addresses.

These two host names — aspmx1.migadu.com and aspmx2.migadu.com — each point to 135.125.222.87 IP addresses.