$TTL 86400 @ IN SOA malicious. admin.malicious. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 86400 ) ; Negative Cache TTL @ IN NS ns ns IN A 10.53.0.4 target IN CNAME subdomain.rebind.