evilcastle.com - dns.ninja

`evilcastle.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:bc1^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:9638^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.11.193^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.150.56^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`sid.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b8f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sid.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c18f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sid.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:218f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sid.ns.cloudflare.com`
		A	108.162.193.143^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sid.ns.cloudflare.com`
		A	172.64.33.143^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sid.ns.cloudflare.com`
		A	173.245.59.143^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sid.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`route1.mx.cloudflare.net` ⭐
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
MX	`route3.mx.cloudflare.net`⁽⁴²⁾
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
MX	`route2.mx.cloudflare.net`⁽⁵³⁾
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
TXT	`v=spf1 include:spf.protection.outlook.com include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.11.193, 172.67.150.56
		IPv6 hints	2606:4700:3032::6815:bc1, 2606:4700:3035::ac43:9638
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=76, name=cloudflare-ech.com
SOA	`sid.ns.cloudflare.com`dns@cloudflare.com serial=2411000901

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786534794

Same first word

evilcastle.com

Similar names

DNS History

19 records (9 active, 10 former)

○NSns1.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

○NSns2.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

○NSns3.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

○NSns4.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

●NSsid.ns.cloudflare.com2026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

●NSullis.ns.cloudflare.com2026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

●MXroute1.mx.cloudflare.net2026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

●MXroute2.mx.cloudflare.net2026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

●MXroute3.mx.cloudflare.net2026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

○MXus2.mx1.mailhostbox.com2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

○MXus2.mx2.mailhostbox.com2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

○MXus2.mx3.mailhostbox.com2015-06-18 → 2016-04-06 · 4 obs

● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

●A104.21.11.1932026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

●A172.67.150.562026-03-26 → 2026-08-12 · 3 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-08-12 12:09:54

○A2606:4700:3030::ac43:96382026-03-26 → 2026-06-01 · 5 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-06-01 06:59:02
○ 2026-07-12 00:21:16
○ 2026-08-12 12:09:54

●A2606:4700:3032::6815:bc12026-07-12 → 2026-08-12 · 3 obs

○ 2026-06-01 06:59:02
● 2026-07-12 00:21:16
● 2026-08-12 12:09:54

●A2606:4700:3035::ac43:96382026-07-12 → 2026-08-12 · 3 obs

○ 2026-06-01 06:59:02
● 2026-07-12 00:21:16
● 2026-08-12 12:09:54

○A2606:4700:3037::6815:bc12026-03-26 → 2026-06-01 · 5 obs

○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-06-01 06:59:02
○ 2026-07-12 00:21:16
○ 2026-08-12 12:09:54

○A95.131.64.1492015-10-27 → 2016-04-06 · 4 obs

● 2015-10-27 08:46:20
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-08-12 12:09:54

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	g.gtld-servers.net, b.gtld-servers.net, l.gtld-servers.net, f.gtld-servers.net...	-
evilcastle.com	sid.ns.cloudflare.com, ullis.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.143

NS records: sid.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evilcastle.com (unsigned zone)

⏱️ Timing

Total: 202ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.150.56, 104.21.11.193`
AAAA	2	`2606:4700:3032::6815:bc1, 2606:4700:3035::ac43:9638`
NS	2	`sid.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	3	`route1.mx.cloudflare.net (pri: 20), route3.mx.cloudflare.net (pri: 42)...`
TXT	1	`v=spf1 include:spf.protection.outlook.co`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`sid.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (sid.ns.cloudflare.com, sid.ns.cloudflare.com, sid.ns.cloudflare.com...)

Analysis

IP Addresses

evilcastle.com points to the four IP addresses 104.21.11.193, 172.67.150.56, 2606:4700:3032::6815:bc1 and 2606:4700:3035::ac43:9638.

Among the host names that share IP numbers with evilcastle.com are www.ycsmg.com, mosesremodeling.mobi, dkmp2024.org and two others.

Name Servers

evilcastle.com is served by two delegated name servers, sid.ns.cloudflare.com and ullis.ns.cloudflare.com.

evilcastle.com has the same name server delegation as a number of other domains, such as amazingsoftbd.com, cloudsited.com, daveysheds.co.uk and two more.

There is at least partial name server overlap between evilcastle.com and other domains — 0797hjxx.com, fipa.es, mlbshops.com.co and two more among them.

Host names resolving to 6 IP numbers:

sid.ns.cloudflare.com carries IP addresses 108.162.193.143, 172.64.33.143 and 173.245.59.143, with 3 other addresses beyond those.

ullis.ns.cloudflare.com carries IP addresses 108.162.194.127, 162.159.38.127 and 172.64.34.127, with 3 other addresses beyond those.

Mail Servers

Incoming mail for evilcastle.com is delivered via three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

evilcastle.com shares at least some of its mail servers with other domains — for example securelylogout.com, legalassociates.services, temovision.com and two more.

Host names resolving to 6 IP numbers:

route1.mx.cloudflare.net carries IP addresses 162.159.205.11, 162.159.205.12 and 162.159.205.13, with 3 other addresses beyond those.

route2.mx.cloudflare.net carries IP addresses 162.159.205.17, 162.159.205.18 and 162.159.205.19, with 3 other addresses beyond those.

route3.mx.cloudflare.net carries IP addresses 162.159.205.23, 162.159.205.24 and 162.159.205.25, with 3 other addresses beyond those.