`911victims.com`

DNSSEC	⚠️ Not signed
A	13.226.238.15^{🇺🇸 Amazon13.226.232.0/21 - Cloudfront}
		PTR	`server-13-226-238-15.iad61.r.cloudfront.net`
A	13.226.238.62^{🇺🇸 Amazon13.226.232.0/21 - Cloudfront}
A	13.226.238.83^{🇺🇸 Amazon13.226.232.0/21 - Cloudfront}
A	13.226.238.99^{🇺🇸 Amazon13.226.232.0/21 - Cloudfront}
NS	`ns0.dnsmadeeasy.com` ⭐
		A	2600:1800::1^{🇺🇸 Tiggee2600:1800::/48 DNS Made Easy anycast network}
			PTR	`ns0.dnsmadeeasy.com`
		A	208.94.148.2^{🇺🇸 Tiggee208.94.148.0/24 DNS Made Easy anycast network}
			PTR	`ns0.dnsmadeeasy.com`
NS	`ns1.dnsmadeeasy.com`
		A	2600:1801:1::1^{🇺🇸 Tiggee2600:1801:1::/48 DNS Made Easy anycast network}
			PTR	`ns1.dnsmadeeasy.com`
		A	208.80.124.2^{🇺🇸 Tiggee208.80.124.0/24 DNS Made Easy anycast network}
			PTR	`ns1.dnsmadeeasy.com`
NS	`ns2.dnsmadeeasy.com`
		A	2600:1802:2::1^{🇺🇸 Tiggee2600:1802:2::/48 DNS Made Easy anycast network}
			PTR	`ns2.dnsmadeeasy.com`
		A	208.80.126.2^{🇺🇸 Tiggee208.80.126.0/24 DNS Made Easy anycast network}
			PTR	`ns2.dnsmadeeasy.com`
NS	`ns3.dnsmadeeasy.com`
		A	2600:1801:3::1^{🇺🇸 Tiggee2600:1801:3::/48 DNS Made Easy anycast network}
			PTR	`ns3.dnsmadeeasy.com`
		A	208.80.125.2^{🇺🇸 Tiggee208.80.125.0/24 DNS Made Easy anycast network}
			PTR	`ns3.dnsmadeeasy.com`
NS	`ns4.dnsmadeeasy.com`
		A	2600:1802:4::1^{🇺🇸 Tiggee2600:1802:4::/48 DNS Made Easy anycast network}
			PTR	`ns4.dnsmadeeasy.com`
		A	208.80.127.2^{🇺🇸 Tiggee208.80.127.0/24 DNS Made Easy anycast network}
			PTR	`ns4.dnsmadeeasy.com`
MX	`mx1-us1.ppe-hosted.com` ⭐
		A	67.231.154.162^{🇺🇸 Proofpoint67.231.154.0/24 Inc.}
			PTR	`mx1-us1.ppe-hosted.com`
		A	148.163.129.50^{🇺🇸 AS13916148.163.129.0/24 Proofpoint Inc.}
			PTR	`mx1-us1.ppe-hosted.com`
MX	`mx2-us1.ppe-hosted.com`⁽²⁰⁾
		A	67.231.154.163^{🇺🇸 Proofpoint67.231.154.0/24 Inc.}
			PTR	`mx2-us1.ppe-hosted.com`
		A	148.163.129.51^{🇺🇸 AS13916148.163.129.0/24 Proofpoint Inc.}
			PTR	`mx2-us1.ppe-hosted.com`
TXT	`v=spf1 a:dispatch-us.ppe-hosted.com include:_spf.salesforce.com include:spf.p...`
TXT	`pardot991402=55ece084d39a382c9e235dc968784c65fa92bc9adfe492ed28349a7e2aec5039`
TXT	`MS=ms73230558`
TXT	`ppe-a95df41c6ad5cb7a2602`
SOA	`ns0.dnsmadeeasy.com`dns@dnsmadeeasy.com 2008-01-21 #59

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

Same first word

911victims.com

DNS History

20 records (11 active, 9 former)

●NSns0.dnsmadeeasy.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

○NSns09.domaincontrol.com2015-07-12 → 2017-10-17 · 5 obs

○ 2008-03-20 15:35:52
● 2015-07-12 16:00:40
● 2017-10-17 16:59:56
○ 2026-02-15 13:04:46
○ 2026-03-21 22:26:42

●NSns1.dnsmadeeasy.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

○NSns10.domaincontrol.com2015-07-12 → 2017-10-17 · 5 obs

○ 2008-03-20 15:35:52
● 2015-07-12 16:00:40
● 2017-10-17 16:59:56
○ 2026-02-15 13:04:46
○ 2026-03-21 22:26:42

●NSns2.dnsmadeeasy.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

●NSns3.dnsmadeeasy.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

●NSns4.dnsmadeeasy.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

○MXmailstore1.secureserver.net2015-07-12 → 2017-10-17 · 5 obs

○ 2008-03-20 15:35:52
● 2015-07-12 16:00:40
● 2017-10-17 16:59:56
○ 2026-02-15 13:04:46
○ 2026-03-21 22:26:42

●MXmx1-us1.ppe-hosted.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

●MXmx2-us1.ppe-hosted.com2026-02-15 → 2026-03-21 · 3 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-21 22:26:42

○MXsmtp.secureserver.net2015-07-12 → 2017-10-17 · 5 obs

○ 2008-03-20 15:35:52
● 2015-07-12 16:00:40
● 2017-10-17 16:59:56
○ 2026-02-15 13:04:46
○ 2026-03-21 22:26:42

●A13.226.238.152026-02-15 → 2026-03-21 · 6 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-17 18:36:52
○ 2026-03-18 15:10:48
● 2026-03-21 02:12:50
● 2026-03-21 22:26:42

●A13.226.238.622026-02-15 → 2026-03-21 · 6 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-17 18:36:52
○ 2026-03-18 15:10:48
● 2026-03-21 02:12:50
● 2026-03-21 22:26:42

●A13.226.238.832026-02-15 → 2026-03-21 · 6 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-17 18:36:52
○ 2026-03-18 15:10:48
● 2026-03-21 02:12:50
● 2026-03-21 22:26:42

●A13.226.238.992026-02-15 → 2026-03-21 · 6 obs

○ 2017-10-17 16:59:56
● 2026-02-15 13:04:46
● 2026-03-17 18:36:52
○ 2026-03-18 15:10:48
● 2026-03-21 02:12:50
● 2026-03-21 22:26:42

○A18.173.219.22026-03-18 → 2026-03-18 · 4 obs

○ 2026-03-17 18:36:52
● 2026-03-18 15:10:48
○ 2026-03-21 02:12:50
○ 2026-03-21 22:26:42

○A18.173.219.222026-03-18 → 2026-03-18 · 4 obs

○ 2026-03-17 18:36:52
● 2026-03-18 15:10:48
○ 2026-03-21 02:12:50
○ 2026-03-21 22:26:42

○A18.173.219.332026-03-18 → 2026-03-18 · 4 obs

○ 2026-03-17 18:36:52
● 2026-03-18 15:10:48
○ 2026-03-21 02:12:50
○ 2026-03-21 22:26:42

○A18.173.219.522026-03-18 → 2026-03-18 · 4 obs

○ 2026-03-17 18:36:52
● 2026-03-18 15:10:48
○ 2026-03-21 02:12:50
○ 2026-03-21 22:26:42

○A184.168.221.72015-07-12 → 2017-10-17 · 5 obs

○ 2008-03-20 15:35:52
● 2015-07-12 16:00:40
● 2017-10-17 16:59:56
○ 2026-02-15 13:04:46
○ 2026-03-21 22:26:42

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net...	-
911victims.com	ns1.dnsmadeeasy.com, ns4.dnsmadeeasy.com, ns3.dnsmadeeasy.com, ns0.dnsmadeeasy.com...	10 records

✅ Authoritative Response

Server: 208.80.127.2

NS records: ns1.dnsmadeeasy.com, ns4.dnsmadeeasy.com, ns3.dnsmadeeasy.com, ns0.dnsmadeeasy.com, ns2.dnsmadeeasy.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 911victims.com (unsigned zone)

⏱️ Timing

Total: 2192ms | Queries: -

📄 Records

Type	Count	Sample Data
A	4	`13.226.238.62, 13.226.238.15...`
NS	5	`ns2.dnsmadeeasy.com, ns0.dnsmadeeasy.com...`
MX	2	`mx2-us1.ppe-hosted.com (pri: 20), mx1-us1.ppe-hosted.com (pri: 10)`
TXT	4	`pardot991402=55ece084d39a382c9e235dc9687, MS=ms73230558...`
SOA	1	`ns0.dnsmadeeasy.com dns.dnsmadeeasy.com`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns1.dnsmadeeasy.com, ns1.dnsmadeeasy.com, ns4.dnsmadeeasy.com...)

Analysis

IP Addresses

911victims.com maps to four IP numbers: 13.226.238.15, 13.226.238.62, 13.226.238.83 and 13.226.238.99.

Other host names, for instance toyota-forklifts.wetransfer.com, phillip-dba.wetransfer.com, history-deutschland.wetransfer.com, lookasaudio.wetransfer.com and d.wetransfer.com share IP numbers with 911victims.com.

Name Servers

911victims.com delegates to five name servers: ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com, ns2.dnsmadeeasy.com, ns3.dnsmadeeasy.com and ns4.dnsmadeeasy.com.

911victims.com at least partially shares name servers with other domains such as hcgweb.net, kalship.com, lundapartments.se, highstakes.co.uk and 16.247.158.in-addr.arpa.

these name servers are commonly used with the name servers ns10.digicertdns.com.

Two IPs per host name:

ns0.dnsmadeeasy.com points to: 2600:1800::1 and 208.94.148.2

ns1.dnsmadeeasy.com points to: 2600:1801:1::1 and 208.80.124.2

ns2.dnsmadeeasy.com points to: 2600:1802:2::1 and 208.80.126.2

ns3.dnsmadeeasy.com points to: 2600:1801:3::1 and 208.80.125.2

ns4.dnsmadeeasy.com points to: 2600:1802:4::1 and 208.80.127.2

Pattern: left IDs ascend by 9 (12, 21, 30, 39, 48); each pair of targets ascend by 9 (15/18, 24/27, 33/36, 42/45, 51/54)

Mail Servers

Two mail servers handle 911victims.com: mx1-us1.ppe-hosted.com and mx2-us1.ppe-hosted.com.

911victims.com shares the same mail server setup as other domains, including cam-llc.com, sfbayit.com, matrix-am.com, smithsnz.co.nz and bhangulawoffice.com.

911victims.com shares mail servers with other domains at least in part, for instance oceanskyseafoods.com, insurancezipcode.com, elitebmw.com, verisourcesvc.com and premier-ci.com.

Host names with two IPs:

mx1-us1.ppe-hosted.com points to 67.231.154.162 and 148.163.129.50.

mx2-us1.ppe-hosted.com points to 67.231.154.163 and 148.163.129.51.

911victims.com - robtex.com

911victims.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`911victims.com`

`com`