ransomlook.io - robtex.com

ransomlook.io

DNSSEC🔒 Signed (DS record present)
A85.10.200.30🇩🇪 Hetzner85.10.192.0/18 HETZNER-RZ-NBG-BLK3
PTRransomlook.io
NSdns108.ovh.net
A2001:41d0:d01:200::2🇫🇷 OVH2001:41d0::/32 IPv6
PTRdns108.ovh.net
A5.196.41.157🇫🇷 OVH5.196.0.0/16
PTRdns108.ovh.net
NSns108.ovh.net
A2001:41d0:b00:fc00::2🇫🇷 OVH2001:41d0::/32 IPv6
PTRns108.ovh.net
A5.135.66.229🇫🇷 OVH5.135.0.0/16
PTRns108.ovh.net
MXmx1.mail.ovh.net
A188.165.36.237🇫🇷 OVH188.165.0.0/16 ISP Paris, France
PTRmx1.mail.ovh.net
MXmx2.mail.ovh.net(5)
A87.98.160.167🇫🇷 OVH87.98.128.0/17 ISP Paris, France
PTRmx2.mail.ovh.net
MXmx3.mail.ovh.net(100)
TXTv=spf1 include:mx.ovh.com ~all
TXT1|www.ransomlook.io
SOAdns108.ovh.nettech@ovh.net serial=2084284305

io

DNSSEC🔒 Signed (DS record present)
NSa0.nic.io
NSa2.nic.io
NSb0.nic.io
NSc0.nic.io
SOAa0.nic.iohostmaster@donuts.email serial=1786082464
rank #773774 globally
rank #6402 in the tld
📈 Tranco rank: #970,036

PTR for

Same first word

Similar names

DNS History

6 records (6 active, 0 former)

NSdns108.ovh.netns108.ovh.netMXmx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.netA85.10.200.30
NSdns108.ovh.net2026-03-21 → 2026-08-07 · 2 obs
● 2026-03-21 16:12:18
● 2026-08-07 06:08:20
NSns108.ovh.net2026-03-21 → 2026-08-07 · 2 obs
● 2026-03-21 16:12:18
● 2026-08-07 06:08:20
MXmx1.mail.ovh.net2026-03-21 → 2026-08-07 · 2 obs
● 2026-03-21 16:12:18
● 2026-08-07 06:08:20
MXmx2.mail.ovh.net2026-03-21 → 2026-08-07 · 2 obs
● 2026-03-21 16:12:18
● 2026-08-07 06:08:20
MXmx3.mail.ovh.net2026-03-21 → 2026-08-07 · 2 obs
● 2026-03-21 16:12:18
● 2026-08-07 06:08:20
A85.10.200.302026-03-21 → 2026-08-07 · 2 obs
● 2026-03-21 16:12:18
● 2026-08-07 06:08:20

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
ioa0.nic.io, a2.nic.io, b0.nic.io, c0.nic.io-
ransomlook.ions108.ovh.net, dns108.ovh.net-

✅ Authoritative Response

Server:5.135.66.229

NS records: ns108.ovh.net, dns108.ovh.net

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 686ms | Queries: -

📄 Records

TypeCountSample Data
A185.10.200.30
NS2dns108.ovh.net, ns108.ovh.net
MX3mx3.mail.ovh.net (pri: 100), mx2.mail.ovh.net (pri: 5)...
TXT21|www.ransomlook.io, v=spf1 include:mx.ovh.com ~all
SOA1dns108.ovh.net tech.ovh.net

Analysis

IP Addresses

ransomlook.io has exactly one IP address — 85.10.200.30.

Name Servers

ransomlook.io is delegated to two name servers: dns108.ovh.net and ns108.ovh.net.

The name server configuration of ransomlook.io is shared with other domains, for instance lonvia.com, ribafrecha.com, grintafilms.com and two others.

dns108.ovh.net and ns108.ovh.net each resolve to two IP addresses: dns108.ovh.net points to 5.196.41.157 and 2001:41d0:d01:200::2, while ns108.ovh.net points to 5.135.66.229 and 2001:41d0:b00:fc00::2.

Mail Servers

The MX records for ransomlook.io list three mail servers: mx1.mail.ovh.net, mx2.mail.ovh.net and mx3.mail.ovh.net.

At least some of the mail servers used by ransomlook.io are shared with other domains: annuaire-controle-technique.fr, hbcpa.fr, tegninger.ovh and two others among them.

It is common to find these mail servers used together with the mail servers mx4.mail.ovh.net and mx0.mail.ovh.net.

Each of mx1.mail.ovh.net and mx2.mail.ovh.net has one IP address: mx1.mail.ovh.net uses 188.165.36.237 and mx2.mail.ovh.net uses 87.98.160.167.