ruby.icu - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

ruby.icu

DNSSECπŸ”’ Signed (DS record present)
A2602:f70f::1AS153292602:f70f::/48 Deno
PTRdeno.net
A69.67.170.170πŸ‡¨πŸ‡¦ AS1532969.67.170.0/24 Deno
NSannabel.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26cfπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
A2803:f800:50::6ca2:c2cfπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRannabel.ns.cloudflare.com
A2a06:98c1:50::ac40:22cfπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRannabel.ns.cloudflare.com
A108.162.194.207πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
A162.159.38.207Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
A172.64.34.207πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
NSvick.ns.cloudflare.com
A2606:4700:58::adf5:3bf4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvick.ns.cloudflare.com
A2803:f800:50::6ca2:c1f4πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRvick.ns.cloudflare.com
A2a06:98c1:50::ac40:21f4πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRvick.ns.cloudflare.com
A108.162.193.244πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvick.ns.cloudflare.com
A172.64.33.244πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvick.ns.cloudflare.com
A173.245.59.244πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvick.ns.cloudflare.com
MXhzmx01.mxmail.netease.com ⭐
A47.251.71.119πŸ‡ΊπŸ‡Έ Alibaba-Cloud47.251.0.0/17 Proxy-registered route object
A47.251.84.126πŸ‡ΊπŸ‡Έ Alibaba-Cloud47.251.0.0/17 Proxy-registered route object
MXhzmx02.mxmail.netease.com(10)
TXTv=spf1 include:spf.163.com -all
SOAannabel.ns.cloudflare.comdns@cloudflare.com serial=2413042489

icu

DNSSECπŸ”’ Signed (DS record present)
NSns0.centralnic.net ⭐
NSa.nic.icu
NSb.nic.icu
NSc.nic.icu
NSd.nic.icu
SOAns0.centralnic.nethostmaster@centralnic.net serial=1788153853
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSannabel.ns.cloudflare.comvick.ns.cloudflare.comMXhzmx01.mxmail.netease.comhzmx02.mxmail.netease.comA2602:f70f::169.67.170.170
●NSannabel.ns.cloudflare.com2026-08-30 β†’ 2026-08-31 Β· 2 obs
● 2026-08-30 09:09:02
● 2026-08-31 05:49:54
●NSvick.ns.cloudflare.com2026-08-30 β†’ 2026-08-31 Β· 2 obs
● 2026-08-30 09:09:02
● 2026-08-31 05:49:54
●MXhzmx01.mxmail.netease.com2026-08-30 β†’ 2026-08-31 Β· 2 obs
● 2026-08-30 09:09:02
● 2026-08-31 05:49:54
●MXhzmx02.mxmail.netease.com2026-08-30 β†’ 2026-08-31 Β· 2 obs
● 2026-08-30 09:09:02
● 2026-08-31 05:49:54
●A2602:f70f::12026-08-30 β†’ 2026-08-31 Β· 2 obs
● 2026-08-30 09:09:02
● 2026-08-31 05:49:54
●A69.67.170.1702026-08-30 β†’ 2026-08-31 Β· 2 obs
● 2026-08-30 09:09:02
● 2026-08-31 05:49:54

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
icuc.nic.icu, a.nic.icu, b.nic.icu, d.nic.icu8 records
ruby.icuvick.ns.cloudflare.com, annabel.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.59.244

NS records: vick.ns.cloudflare.com, annabel.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 764ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A169.67.170.170
AAAA12602:f70f::1
NS2annabel.ns.cloudflare.com, vick.ns.cloudflare.com
MX2hzmx02.mxmail.netease.com (pri: 10), hzmx01.mxmail.netease.com (pri: 5)
TXT1v=spf1 include:spf.163.com -all
SOA1annabel.ns.cloudflare.com dns.cloudflare

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (c.nic.icu, c.nic.icu, a.nic.icu...)

Analysis

IP Addresses

ruby.icu has two IP addresses: 69.67.170.170 and 2602:f70f::1

soma3d.org, leaklocked.com, digi(0x626f6f62)oo.com plus two other host names have IP numbers in common with ruby.icu.

Name Servers

ruby.icu has two authoritative name servers β€” annabel.ns.cloudflare.com and vick.ns.cloudflare.com.

The name server configuration of ruby.icu is shared with other domains, for instance reread.today, noderr-landing.pages.dev, omid1-d6s.pages.dev and two others.

There is at least partial name server overlap between ruby.icu and other domains β€” cruzmanagementsolutions.net, unroll.ing, klaude.space and two more among them.

These name servers are routinely deployed together with the name servers hunts.ns.cloudflare.com.

Hosts with 6 IP addresses each:

annabel.ns.cloudflare.com points to 108.162.194.207, 162.159.38.207, 172.64.34.207 and 3 other IP addresses.

vick.ns.cloudflare.com points to 108.162.193.244, 172.64.33.244, 173.245.59.244 and 3 other IP addresses.

Mail Servers

ruby.icu uses two mail servers, hzmx01.mxmail.netease.com and hzmx02.mxmail.netease.com.

The mail server setup of ruby.icu matches that of other domains such as kansa.com.cn, sinoplast.com.cn, sycco.net and two others.

ruby.icu and a number of other domains β€” icdao.com, 51hitech.com, sanzhongai.com and thdm.edu.cn among them β€” share at least some of the same mail servers.

Host names pointing to two IP addresses:

hzmx01.mxmail.netease.com resolves to 47.251.71.119 and 47.251.84.126.