trojanconstruction.group - robtex.com

trojanconstruction.group

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:5927🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3033::ac43:9c55🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.89.39Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.156.85🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSara.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a43🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRara.ns.cloudflare.com
A2803:f800:50::6ca2:c043🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRara.ns.cloudflare.com
A2a06:98c1:50::ac40:2043🇺🇸 Cloudflare2a06:98c1:50::/45
PTRara.ns.cloudflare.com
A108.162.192.67🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRara.ns.cloudflare.com
A172.64.32.67🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRara.ns.cloudflare.com
A173.245.58.67🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRara.ns.cloudflare.com
NScory.ns.cloudflare.com
A2606:4700:58::adf5:3b5d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcory.ns.cloudflare.com
A2803:f800:50::6ca2:c15d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcory.ns.cloudflare.com
A2a06:98c1:50::ac40:215d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRcory.ns.cloudflare.com
A108.162.193.93🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcory.ns.cloudflare.com
A172.64.33.93🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcory.ns.cloudflare.com
A173.245.59.93🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcory.ns.cloudflare.com
MXtrojanconstruction-group.mail.protection.outlook.com ⭐
A2a01:111:f403:cc2f::🇦🇪 Microsoft2a01:111:f000::/36
PTRmail-au1p273cu00100.inbound.protection.outlook.com
A2a01:111:f403:cc30::🇦🇪 Microsoft2a01:111:f000::/36
PTRmail-dx1p273cu00300.inbound.protection.outlook.com
A2a01:111:f403:cc30::1🇦🇪 Microsoft2a01:111:f000::/36
PTRmail-dx3p273cu00101.inbound.protection.outlook.com
A2a01:111:f403:cc30::3🇦🇪 Microsoft2a01:111:f000::/36
PTRmail-dx2p273cu00203.inbound.protection.outlook.com
A52.101.147.1🇦🇪 Microsoft52.96.0.0/12 MICROSOFT
PTRmail-au1p273cu00101.inbound.protection.outlook.com
A52.101.148.1🇦🇪 Microsoft52.96.0.0/12 MICROSOFT
PTRmail-dx1p273cu00301.inbound.protection.outlook.com
A52.101.148.3🇦🇪 Microsoft52.96.0.0/12 MICROSOFT
PTRmail-dx3p273cu00103.inbound.protection.outlook.com
A52.101.148.13🇦🇪 Microsoft52.96.0.0/12 MICROSOFT
PTRmail-dx2p273cu00205.inbound.protection.outlook.com
TXT5nn7htsnlvgm5j94gt3al7nofr
TXT8tkv2creirr9h8vhpeiovum7rk
TXT9isss68gpmdd35qmb20652u6n6
TXTMS=ms30150786
TXTMS=ms46802523
TXTv=spf1 include:spf.protection.outlook.com include:spf-uae.emailsignatures365....
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.89.39, 172.67.156.85
IPv6 hints2606:4700:3030::6815:5927, 2606:4700:3033::ac43:9c55
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=182, name=cloudflare-ech.com
SOAara.ns.cloudflare.comdns@cloudflare.com serial=2410784391

group

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.group ⭐
NSv0n1.nic.group
NSv0n2.nic.group
NSv0n3.nic.group
NSv2n0.nic.group
NSv2n1.nic.group
SOAv0n0.nic.grouphostmaster@donuts.email serial=1785367130

Same first word

trojanconstruction.group

DNS History

14 records (7 active, 7 former)

NSara.ns.cloudflare.comcory.ns.cloudflare.comMXtrojanconstruction-group.mail.protection.outlook.comA104.21.89.39172.67.156.852606:4700:3030::6815:59272606:4700:3033::ac43:9c55135.181.5.207188.114.96.0188.114.97.02606:4700:3031::ac43:9c552606:4700:3035::6815:59272a06:98c1:3120::2a06:98c1:3121::
●NSara.ns.cloudflare.com2026-03-29 → 2026-07-30 · 2 obs
● 2026-03-29 07:34:34
● 2026-07-30 00:04:52
●NScory.ns.cloudflare.com2026-03-29 → 2026-07-30 · 2 obs
● 2026-03-29 07:34:34
● 2026-07-30 00:04:52
●MXtrojanconstruction-group.mail.protection.outlook.com2026-03-29 → 2026-07-30 · 2 obs
● 2026-03-29 07:34:34
● 2026-07-30 00:04:52
●A104.21.89.392026-04-30 → 2026-07-30 · 5 obs
○ 2026-04-24 17:40:30
● 2026-04-30 04:54:30
● 2026-05-31 07:26:56
○ 2026-06-17 10:36:52
● 2026-07-30 00:04:52
○A135.181.5.2072026-03-29 → 2026-04-24 · 4 obs
● 2026-03-29 07:34:34
● 2026-04-24 17:40:30
○ 2026-04-30 04:54:30
○ 2026-07-30 00:04:52
●A172.67.156.852026-04-30 → 2026-07-30 · 5 obs
○ 2026-04-24 17:40:30
● 2026-04-30 04:54:30
● 2026-05-31 07:26:56
○ 2026-06-17 10:36:52
● 2026-07-30 00:04:52
○A188.114.96.02026-06-17 → 2026-06-17 · 3 obs
○ 2026-05-31 07:26:56
● 2026-06-17 10:36:52
○ 2026-07-30 00:04:52
○A188.114.97.02026-06-17 → 2026-06-17 · 3 obs
○ 2026-05-31 07:26:56
● 2026-06-17 10:36:52
○ 2026-07-30 00:04:52
●A2606:4700:3030::6815:59272026-07-30 → 2026-07-30 · 2 obs
○ 2026-06-17 10:36:52
● 2026-07-30 00:04:52
○A2606:4700:3031::ac43:9c552026-04-30 → 2026-05-31 · 5 obs
○ 2026-04-24 17:40:30
● 2026-04-30 04:54:30
● 2026-05-31 07:26:56
○ 2026-06-17 10:36:52
○ 2026-07-30 00:04:52
●A2606:4700:3033::ac43:9c552026-07-30 → 2026-07-30 · 2 obs
○ 2026-06-17 10:36:52
● 2026-07-30 00:04:52
○A2606:4700:3035::6815:59272026-04-30 → 2026-05-31 · 5 obs
○ 2026-04-24 17:40:30
● 2026-04-30 04:54:30
● 2026-05-31 07:26:56
○ 2026-06-17 10:36:52
○ 2026-07-30 00:04:52
○A2a06:98c1:3120::2026-06-17 → 2026-06-17 · 3 obs
○ 2026-05-31 07:26:56
● 2026-06-17 10:36:52
○ 2026-07-30 00:04:52
○A2a06:98c1:3121::2026-06-17 → 2026-06-17 · 3 obs
○ 2026-05-31 07:26:56
● 2026-06-17 10:36:52
○ 2026-07-30 00:04:52

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
groupv0n0.nic.group, v0n1.nic.group, v0n2.nic.group, v0n3.nic.group...12 records
trojanconstruction.groupara.ns.cloudflare.com, cory.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.193.93

NS records: ara.ns.cloudflare.com, cory.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for trojanconstruction.group (unsigned zone)

⏱️ Timing

Total: 644ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.89.39, 172.67.156.85
AAAA22606:4700:3030::6815:5927, 2606:4700:3033::ac43:9c55
NS2ara.ns.cloudflare.com, cory.ns.cloudflare.com
MX1trojanconstruction-group.mail.protection
TXT65nn7htsnlvgm5j94gt3al7nofr, 8tkv2creirr9h8vhpeiovum7rk...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1ara.ns.cloudflare.com dns.cloudflare.com

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.group, v0n0.nic.group, v0n1.nic.group...)

Analysis

IP Addresses

trojanconstruction.group resolves to four IP addresses: 104.21.89.39, 172.67.156.85, 2606:4700:3030::6815:5927 and 2606:4700:3033::ac43:9c55.

neredebahis341.com, cmsgroup.holdings, 1005.gu1gu1.ccwu.cc and two other host names share IP numbers with trojanconstruction.group.

Name Servers

The NS records for trojanconstruction.group delegate to ara.ns.cloudflare.com and cory.ns.cloudflare.com.

trojanconstruction.group uses the same name servers as several other domains — among them trojan.ae, geekout.org, aid.cz and two more.

trojanconstruction.group has at least partial name server overlap with other domains, such as mangkon88.world, cosenio.digital, feiniaoyunplus.com and two others.

These name servers tend to appear together with the name servers raquel.ns.cloudflare.com, sri.ns.cloudflare.com and cameron.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

ara.ns.cloudflare.com maps to 108.162.192.67, 172.64.32.67, 173.245.58.67 and 3 additional IP addresses.

cory.ns.cloudflare.com maps to 108.162.193.93, 172.64.33.93, 173.245.59.93 and 3 additional IP addresses.

Mail Servers

Mail for trojanconstruction.group is handled by a single mail server, trojanconstruction-group.mail.protection.outlook.com.

trojanconstruction-group.mail.protection.outlook.com resolves to 8 IP addresses — 52.101.147.1, 52.101.148.1, 52.101.148.3 and 5 others.