ransomware.live - robtex.com

ransomware.live

DNSSEC🔒 Signed (DS record present)
A2001:41d0:367:e7c::1🇫🇷 OVH2001:41d0::/32 IPv6
PTRmonitor-6.ransomware.live
A213.32.71.46🇫🇷 OVH213.32.0.0/17
NSns1.gandi.net ⭐
A2001:4b98:aaaa::2🇫🇷 GANDI-LIVEDNS2001:4b98:aaaa::/48 GANDI is an ICANN accredited registrar and Cloud services provider
PTRns-1-a.gandi.net
A173.246.100.2🇺🇸 GANDI-LIVEDNS173.246.100.0/24 Gandi LiveDNS A
PTRns-1-a.gandi.net
NSns-15-b.gandi.net
A2001:4b98:aaab::10🇫🇷 GANDI-LIVEDNS2001:4b98:aaab::/48 GANDI is an ICANN accredited registrar GANDI is a virtual server provider for more information: Web: http://www.gandi.net
PTRns-15-b.gandi.net
A213.167.230.16🇫🇷 GANDI-LIVEDNS213.167.230.0/24 GANDI is an ICANN accredited registrar and Cloud services provider
PTRns-15-b.gandi.net
NSns-237-a.gandi.net
A2001:4b98:aaaa::ee🇫🇷 GANDI-LIVEDNS2001:4b98:aaaa::/48 GANDI is an ICANN accredited registrar and Cloud services provider
PTRns-237-a.gandi.net
A173.246.100.238🇺🇸 GANDI-LIVEDNS173.246.100.0/24 Gandi LiveDNS A
PTRns-237-a.gandi.net
NSns-8-c.gandi.net
A2604:3400:aaac::9🇺🇸 GANDI-LIVEDNS2604:3400:aaac::/48 Gandi US Inc.
PTRns-8-c.gandi.net
A217.70.187.9🇫🇷 GANDI-LIVEDNS217.70.187.0/24 GANDI is an ICANN accredited registrar and Cloud services provider
PTRns-8-c.gandi.net
MXmail.ransomware.live ⭐
A2001:41d0:305:2100::1:1e4a🇫🇷 OVH2001:41d0::/32 IPv6
PTRmail.ransomware.live
A51.255.203.161🇫🇷 OVH51.254.0.0/15
PTRmail.ransomware.live
TXTkeybase-site-verification=Y95VpSWz8nVnG-GIPnw92_T7da1SMI3I7k-CqpaEL9U
TXTahrefs-site-verification_50427289daf5ba20bb2c9c48e01dea7b3a199ab0204e532cc7a9...
TXTgoogle-site-verification=OoSDY8je1T30faCwMkM2jL18Q1tLlfylSM1xdJ5UQp0
TXTv=spf1 mx a -all
TXTyandex-verification: 43f8eaa14d952193
SOAns1.gandi.nethostmaster@gandi.net serial=1785369600

live

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.live ⭐
NSv0n1.nic.live
NSv0n2.nic.live
NSv0n3.nic.live
NSv2n0.nic.live
NSv2n1.nic.live
SOAv0n0.nic.livehostmaster@donuts.email serial=1785768762
rank #191819 globally
rank #58 in the tld
📈 Tranco rank: #228,628

Subdomains

mail.ransomware.live
images.ransomware.live
monitor-6.ransomware.live
monitor-4.ransomware.live
www.ransomware.live
cti.ransomware.live

Same first word

ransomware.info
ransomware.cc
ransomware.live
ransomware.co.il
ransomware.website
ransomware.co
ransomware.download
ransomware.org
ransomware.ca
ransomware.site
ransomware.it

Similar names

anwarmorse.com

DNS History

11 records (7 active, 4 former)

NSns-15-b.gandi.netns-237-a.gandi.netns-8-c.gandi.netns1.gandi.netMXmail.ransomware.livemail.protonmail.chmailsec.protonmail.chA2001:41d0:367:e7c::1213.32.71.46149.202.86.1892001:41d0:1004:bd::1
●NSns-15-b.gandi.net2026-03-26 → 2026-08-03 · 2 obs
● 2026-03-26 08:42:32
● 2026-08-03 15:01:02
●NSns-237-a.gandi.net2026-03-26 → 2026-08-03 · 2 obs
● 2026-03-26 08:42:32
● 2026-08-03 15:01:02
●NSns-8-c.gandi.net2026-03-26 → 2026-08-03 · 2 obs
● 2026-03-26 08:42:32
● 2026-08-03 15:01:02
●NSns1.gandi.net2026-03-26 → 2026-08-03 · 2 obs
● 2026-03-26 08:42:32
● 2026-08-03 15:01:02
○MXmail.protonmail.ch2026-03-26 → 2026-04-13 · 4 obs
● 2026-03-26 08:42:32
● 2026-04-13 01:16:34
○ 2026-05-28 20:11:38
○ 2026-08-03 15:01:02
●MXmail.ransomware.live2026-05-28 → 2026-08-03 · 3 obs
○ 2026-04-13 01:16:34
● 2026-05-28 20:11:38
● 2026-08-03 15:01:02
○MXmailsec.protonmail.ch2026-03-26 → 2026-04-13 · 4 obs
● 2026-03-26 08:42:32
● 2026-04-13 01:16:34
○ 2026-05-28 20:11:38
○ 2026-08-03 15:01:02
○A149.202.86.1892026-03-26 → 2026-06-16 · 4 obs
● 2026-03-26 08:42:32
● 2026-06-16 10:07:12
○ 2026-07-21 13:16:48
○ 2026-08-03 15:01:02
○A2001:41d0:1004:bd::12026-03-26 → 2026-06-16 · 4 obs
● 2026-03-26 08:42:32
● 2026-06-16 10:07:12
○ 2026-07-21 13:16:48
○ 2026-08-03 15:01:02
●A2001:41d0:367:e7c::12026-07-21 → 2026-08-03 · 3 obs
○ 2026-06-16 10:07:12
● 2026-07-21 13:16:48
● 2026-08-03 15:01:02
●A213.32.71.462026-07-21 → 2026-08-03 · 3 obs
○ 2026-06-16 10:07:12
● 2026-07-21 13:16:48
● 2026-08-03 15:01:02

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
livev0n0.nic.live, v0n1.nic.live, v0n2.nic.live, v0n3.nic.live...12 records
ransomware.livens-15-b.gandi.net, ns-8-c.gandi.net, ns-237-a.gandi.net-

✅ Authoritative Response

Server:173.246.100.238

NS records: ns-15-b.gandi.net, ns-8-c.gandi.net, ns-237-a.gandi.net

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 690ms | Queries: -

📄 Records

TypeCountSample Data
A1213.32.71.46
AAAA12001:41d0:367:e7c::1
NS3ns-237-a.gandi.net, ns-8-c.gandi.net...
MX1mail.ransomware.live (pri: 10)
TXT5keybase-site-verification=Y95VpSWz8nVnG-, ahrefs-site-verification_50427289daf5ba2...
SOA1ns1.gandi.net hostmaster.gandi.net

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.live, v0n1.nic.live, v0n2.nic.live...)

Analysis

Hierarchy

mail.ransomware.live, images.ransomware.live, monitor-6.ransomware.live, monitor-4.ransomware.live, www.ransomware.live and a few other host names are all children of ransomware.live.

IP Addresses

ransomware.live has two IP addresses: 213.32.71.46 and 2001:41d0:367:e7c::1

Host names such as monitor-6.ransomware.live, monitor-4.ransomware.live and 46.ip-213-32-71.eu share their IP numbers with ransomware.live.

Name Servers

The authoritative name servers for ransomware.live are ns-15-b.gandi.net, ns-237-a.gandi.net, ns-8-c.gandi.net and ns1.gandi.net.

The name servers of ransomware.live overlap at least partially with those of other domains — among them groupegrimaud.fr, degarabylevacher.fr, proxyconf.com and two more.

These name servers commonly appear in delegations together with ns-22-c.gandi.net, ns-140-a.gandi.net, ns-149-a.gandi.net and 7 other.

Each of the four hosts ns-15-b.gandi.net, ns-237-a.gandi.net, ns-8-c.gandi.net and ns1.gandi.net has two IP addresses. ns-15-b.gandi.net points to 213.167.230.16 and 2001:4b98:aaab::10. ns-237-a.gandi.net points to 173.246.100.238 and 2001:4b98:aaaa::ee. ns-8-c.gandi.net points to 217.70.187.9 and 2604:3400:aaac::9. ns1.gandi.net points to 173.246.100.2 and 2001:4b98:aaaa::2.

Mail Servers

Mail for ransomware.live is handled by a single mail server, mail.ransomware.live.

mail.ransomware.live resolves to two IP numbers — 51.255.203.161 and 2001:41d0:305:2100::1:1e4a.