`ransomfarms.com`

DNSSEC	⚠️ Not signed
A	162.159.140.166^{Cloudflare162.159.128.0/19 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
NS	`ns37.domaincontrol.com` ⭐
		A	2603:5:21c1::13^{🇺🇸 GODADDY-DNS2603:5:21c0::/44}
			PTR	`ns37.domaincontrol.com`
		A	97.74.108.19^{🇺🇸 GODADDY-DNS97.74.108.0/23}
			PTR	`ns37.domaincontrol.com`
NS	`ns38.domaincontrol.com`
		A	2603:5:22c1::13^{🇺🇸 GODADDY-DNS2603:5:22c0::/44}
			PTR	`ns38.domaincontrol.com`
		A	173.201.76.19^{🇺🇸 GODADDY-DNS173.201.76.0/23}
			PTR	`ns38.domaincontrol.com`
MX	`smtp.google.com` ⭐
		A	2607:f8b0:4004:c1b::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`wv-in-f26.1e100.net`
		A	2607:f8b0:4004:c1b::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`wv-in-f27.1e100.net`
		A	2607:f8b0:4004:c29::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`yuiadum-in-f26.1e100.net`
		A	2607:f8b0:4004:c29::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`yuiadum-in-f27.1e100.net`
		A	142.251.163.26^{🇺🇸 Google142.251.163.0/24}
			PTR	`wv-in-f26.1e100.net`
		A	142.251.163.27^{🇺🇸 Google142.251.163.0/24}
			PTR	`wv-in-f27.1e100.net`
		A	142.251.167.27^{🇺🇸 Google142.251.167.0/24}
			PTR	`ww-in-f27.1e100.net`
		A	173.194.45.26^{🇺🇸 Google173.194.0.0/16}
			PTR	`yuiadum-in-f26.1e100.net`
		A	173.194.45.27^{🇺🇸 Google173.194.0.0/16}
			PTR	`yuiadum-in-f27.1e100.net`
TXT	`google-site-verification=MPeLZu-g6pcg03HyMgGburMVfbMkdCV4B27rUasfPcU`
TXT	`google-site-verification=P6oVABQgnNwFWBVPJbtYG7TD6fyqkzXEGucnlw9a9Us`
SOA	`ns37.domaincontrol.com`dns@jomax.net 2024-10-07 #0

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785965829

Same first word

ransomfarms.com

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	g.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net, f.gtld-servers.net...	-
ransomfarms.com	ns37.domaincontrol.com, ns38.domaincontrol.com	4 records

✅ Authoritative Response

Server:173.201.76.19

NS records: ns37.domaincontrol.com, ns38.domaincontrol.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ransomfarms.com (unsigned zone)

⏱️ Timing

Total: 217ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`162.159.140.166`
NS	2	`ns37.domaincontrol.com, ns38.domaincontrol.com`
MX	1	`smtp.google.com (pri: 0)`
TXT	2	`google-site-verification=MPeLZu-g6pcg03H, google-site-verification=P6oVABQgnNwFWBV`
SOA	1	`ns37.domaincontrol.com dns.jomax.net`

📌 Glue Records Collected

Total: 4

Out-of-bailiwick: 4 (ns37.domaincontrol.com, ns37.domaincontrol.com, ns38.domaincontrol.com...)

Analysis

IP Addresses

ransomfarms.com points to a single IP number: 162.159.140.166.

Additional host names — ecifoamsystems.com, gcsites.com, americanhomespec.com and two others — share IP numbers with ransomfarms.com.

Name Servers

Two name servers handle the delegation for ransomfarms.com: ns37.domaincontrol.com and ns38.domaincontrol.com.

ransomfarms.com shares its name server setup with other domains, including betnimo.com, adeaseonline.com, crosfixe.com and two others.

ns37.domaincontrol.com and ns38.domaincontrol.com both carry two IP addresses. The A records for ns37.domaincontrol.com are 97.74.108.19 and 2603:5:21c1::13; the A records for ns38.domaincontrol.com are 173.201.76.19 and 2603:5:22c1::13.

Mail Servers

ransomfarms.com has one mail server: smtp.google.com.

ransomfarms.com shares the same mail server setup as other domains, including yellowjelly.co, biosash.com, msa-cp.com and two others.

ransomfarms.com shares mail servers — at least in part — with other domains, including buscandoyviajando.com, quantumtechnologyequipment.net, hanoisalutehotel.com and two others.

These mail servers tend to appear together with the mail servers alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and aspmx.l.google.com.

smtp.google.com points to 9 IP numbers: 142.251.163.26, 142.251.163.27, 142.251.167.27 and 6 other.

ransomfarms.com - robtex.com

ransomfarms.com

com