`happynewyear2.com`

	CNAME	`exp.gs-cdn.com`
	DNSSEC	⚠️ Not signed
	A	172.65.190.172^{🇺🇸 Cloudflare172.65.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1774549637

⚠️ On DNS blocklist: tif

Subdomains

malware.happynewyear2.com

Same first word

happynewyear2.com

DNS History

16 records (3 active, 13 former)

○NSa.share-dns.com2026-03-26 → 2026-03-26 · 1 obs

○ 2026-03-26 18:44:02

○NSa11.share-dns.com2026-03-26 → 2026-03-26 · 1 obs

○ 2026-03-26 18:44:02

○NSb.share-dns.net2026-03-26 → 2026-03-26 · 1 obs

○ 2026-03-26 18:44:02

○NSb11.share-dns.net2026-03-26 → 2026-03-26 · 1 obs

○ 2026-03-26 18:44:02

●NSexpire1.gname-dns.com2026-03-26 → 2026-03-26 · 2 obs

○ 2017-10-09 19:11:02
● 2026-03-26 18:44:02

●NSexpire2.gname-dns.com2026-03-26 → 2026-03-26 · 2 obs

○ 2017-10-09 19:11:02
● 2026-03-26 18:44:02

○NSlocalhost2017-10-09 → 2017-10-09 · 3 obs

○ 2016-12-14 22:00:10
● 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○NSns1.mytrafficmanagement.com2017-10-09 → 2017-10-09 · 3 obs

○ 2016-12-14 22:00:10
● 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○NSns100.rookdns.com2016-12-14 → 2016-12-14 · 3 obs

● 2016-12-14 22:00:10
○ 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○NSns2.mytrafficmanagement.com2017-10-09 → 2017-10-09 · 3 obs

○ 2016-12-14 22:00:10
● 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○NSns99.rookdns.com2016-12-14 → 2016-12-14 · 3 obs

● 2016-12-14 22:00:10
○ 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○MXmail.mxproc.com2017-10-09 → 2017-10-09 · 2 obs

● 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○A141.8.224.2392016-12-14 → 2016-12-14 · 3 obs

● 2016-12-14 22:00:10
○ 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

○A45.33.9.2342017-10-09 → 2017-10-09 · 3 obs

○ 2016-12-14 22:00:10
● 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

●CNAMEexp.gs-cdn.com2026-03-26 → 2026-03-26 · 1 obs

● 2026-03-26 18:44:02

○PTRns99.rookdns.com2016-12-14 → 2016-12-14 · 3 obs

● 2016-12-14 22:00:10
○ 2017-10-09 19:11:02
○ 2026-03-26 18:44:02

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
happynewyear2.com	expire1.gname-dns.com, expire2.gname-dns.com	2 records

✅ Authoritative Response

Server:172.64.53.233

NS records: expire1.gname-dns.com, expire2.gname-dns.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for happynewyear2.com (unsigned zone)

⏱️ Timing

Total: 692ms | Queries: -

📄 Records

Type	Count	Sample Data
NS	2	`expire1.gname-dns.com, expire2.gname-dns.com`
CNAME	1	`exp.gs-cdn.com`

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (expire1.gname-dns.com, expire2.gname-dns.com)

Analysis

Hierarchy

The parent of malware.happynewyear2.com is happynewyear2.com.

IP Addresses

happynewyear2.com points to an IP address: 172.65.190.172.

Other host names, for instance exp.gs-cdn.com and 0syn.com, share IP numbers with happynewyear2.com.

happynewyear2.com - robtex.com