🌐 https://ramzinex.com/;
URL
· host
ramzinex.com
· threat 0.50 (HIGH)
· Sanctions First seen 2026-08-06 13:09:12 · last seen 2026-08-24 01:06:24
🔄 Pivot:📁 Sanctions
Threat score
0.50
MEDIUM
Sightings
8
4 sources
Subdomains (local)
0
from indicators
Related IPs
2
A/AAAA records
DNS records (local)
9
5 types
Reporting sources
4
0 enrichments
📡 Reporting-source breakdown
4
4 total source links on this indicator.
🏷 Tag breakdown (domain family)
1
1
1
📈 DNS record-type counts
3
2
2
1
1
📅 First-seen timeline (family)
1
🏷 WHOIS / Registration (local cache)
No cached WHOIS for ramzinex.com. Resolve & cache.
📡 DNS Records
Stored (local dns_records) — 9
| Type | Value | TTL | Checked |
|---|---|---|---|
| A | 185.166.104.6 |
300 | 2026-08-13 |
| A | 185.166.104.7 |
300 | 2026-08-13 |
| MX | mx.postmaster.ramzinex.net |
300 | 2026-08-13 |
| NS | r.ns.sotoon53.com |
60 | 2026-08-13 |
| NS | ns.sotoon53.com |
60 | 2026-08-13 |
| SOA | r.ns.sotoon53.com |
60 | 2026-08-13 |
| TXT | 459580a885a14bc32b0d5fed6decc06726a4301433b9a4dc46a99c13913949c |
300 | 2026-08-13 |
| TXT | v=spf1 include:spf.postmaster.ramzinex.net ~all |
300 | 2026-08-13 |
| TXT | 4e9bf1b5ae7432cfe8d1d698bfddb916.cdn.edge.sotoon.ir |
300 | 2026-08-13 |
Live (DNS-over-HTTPS · optional augmentation)
| Type | Value | TTL |
|---|---|---|
| A | 185.166.104.6 |
300 |
| A | 185.166.104.7 |
300 |
| MX | 10 mx.postmaster.ramzinex.net. |
300 |
| NS | r.ns.sotoon53.com. |
60 |
| NS | ns.sotoon53.com. |
60 |
| TXT | 4e9bf1b5ae7432cfe8d1d698bfddb916.cdn.edge.sotoon.ir |
300 |
| TXT | v=spf1 include:spf.postmaster.ramzinex.net ~all |
300 |
🖥 Related IPs (2)
Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.
🌐 Subdomains — local intel (0)
No subdomains of ramzinex.com in local intel. Check crt.sh ↗
📡 Reporting Sources (4)
OFAC SDN List (CSV) | Sanctions |
OFAC SDN (crypto addresses) | Sanctions |
OFAC SDN (Treasury) | Sanctions |
OFAC SDN | Sanctions |
🌐 Same-ASN domains (0)
No ASN linkage in local intel.
🔍 OSINT pivots — external lookups
🔗 Internal pivots & actions
📁 Case Management
Every panel resolves local-first: threat, category, first-seen & sightings from
indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Audit DNS to build passive history
- Pivot resolved IPs to their dossiers
- Report phishing to registrar/host