evil.ly - dns.ninja
evil.ly
| DNSSEC | ⚠️ Not signed | ||||||
| A | 2606:4700:3032::ac43:c406🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 2606:4700:3036::6815:151d🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 104.21.21.29Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 172.67.196.6🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| NS | amy.ns.cloudflare.com ⭐ | ||||||
| A | 2606:4700:50::adf5:3a65🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | amy.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c065🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | amy.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2065🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | amy.ns.cloudflare.com | ||||||
| A | 108.162.192.101🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | amy.ns.cloudflare.com | ||||||
| A | 172.64.32.101🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | amy.ns.cloudflare.com | ||||||
| A | 173.245.58.101🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | amy.ns.cloudflare.com | ||||||
| NS | todd.ns.cloudflare.com | ||||||
| A | 2606:4700:58::adf5:3b92🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | todd.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c192🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | todd.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2192🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | todd.ns.cloudflare.com | ||||||
| A | 108.162.193.146🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | todd.ns.cloudflare.com | ||||||
| A | 172.64.33.146🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | todd.ns.cloudflare.com | ||||||
| A | 173.245.59.146🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | todd.ns.cloudflare.com | ||||||
| MX | mail.protonmail.ch ⭐ | ||||||
| A | 176.119.200.128🇨🇭 Proton176.119.200.0/24 | ||||||
| PTR | mail.protonmail.ch | ||||||
| A | 185.70.42.128🇨🇭 Proton185.70.42.0/24 | ||||||
| PTR | mail.protonmail.ch | ||||||
| A | 185.205.70.128🇫🇷 Proton185.205.70.0/24 | ||||||
| PTR | mail.protonmail.ch | ||||||
| MX | mailsec.protonmail.ch(20) | ||||||
| A | 176.119.200.129🇨🇭 Proton176.119.200.0/24 | ||||||
| PTR | mailsec.protonmail.ch | ||||||
| A | 185.70.42.129🇨🇭 Proton185.70.42.0/24 | ||||||
| PTR | mailsec.protonmail.ch | ||||||
| A | 185.205.70.129🇫🇷 Proton185.205.70.0/24 | ||||||
| PTR | mailsec.protonmail.ch | ||||||
| TXT | google-site-verification=dXYQaMEPGDFXgCZeAS1hgOoAWEcQcaO4fhKRqhX2hLc | ||||||
| TXT | protonmail-verification=4bc7e5c1f05b33173e7b6064300a79d0b3237747 | ||||||
| TXT | v=spf1 include:_spf.protonmail.ch mx include:zohomail.com ~all | ||||||
| HTTPS | HTTP/3, HTTP/2 ✓ hints match | ||||||
| IPv4 hints | 104.21.21.29, 172.67.196.6 | ||||||
| IPv6 hints | 2606:4700:3032::ac43:c406, 2606:4700:3036::6815:151d | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=14, name=cloudflare-ech.com | ||||||
| SOA | amy.ns.cloudflare.comdns@cloudflare.com serial=2409743349 | ||||||
ly
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | dns1.lttnet.net ⭐ | ||||||
| NS | dns.lttnet.net | ||||||
| NS | ns-ly.afrinic.net | ||||||
| NS | pch.ltt.ly | ||||||
| NS | phloem.uoregon.edu | ||||||
| TXT | Generation Time ISO 8601: 2026-07-30 17:00:10 | ||||||
| TXT | Generation Time: 1785430810 | ||||||
| SOA | dns.lttnet.netkhaleds@lttnet.net 2026-07-30 #17 | ||||||
Same first word
Similar names
DNS History
10 records (8 active, 2 former)
●NSamy.ns.cloudflare.com2026-02-17 → 2026-07-30 · 2 obs
● 2026-07-30 18:09:06
●NStodd.ns.cloudflare.com2026-02-17 → 2026-07-30 · 2 obs
● 2026-07-30 18:09:06
●MXmail.protonmail.ch2026-02-17 → 2026-07-30 · 2 obs
● 2026-07-30 18:09:06
●MXmailsec.protonmail.ch2026-02-17 → 2026-07-30 · 2 obs
● 2026-07-30 18:09:06
●A104.21.21.292026-02-17 → 2026-07-30 · 2 obs
● 2026-07-30 18:09:06
●A172.67.196.62026-02-17 → 2026-07-30 · 2 obs
● 2026-07-30 18:09:06
●A2606:4700:3032::ac43:c4062026-06-24 → 2026-07-30 · 3 obs
● 2026-06-24 22:37:14
● 2026-07-30 18:09:06
○A2606:4700:3034::6815:151d2026-02-17 → 2026-06-10 · 4 obs
● 2026-06-10 02:42:52
○ 2026-06-24 22:37:14
○ 2026-07-30 18:09:06
●A2606:4700:3036::6815:151d2026-06-24 → 2026-07-30 · 3 obs
● 2026-06-24 22:37:14
● 2026-07-30 18:09:06
○A2606:4700:3037::ac43:c4062026-02-17 → 2026-06-10 · 4 obs
● 2026-06-10 02:42:52
○ 2026-06-24 22:37:14
○ 2026-07-30 18:09:06
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| ly | dns.lttnet.net, pch.ltt.ly, dns1.lttnet.net, ns-ly.afrinic.net... | 8 records |
| evil.ly | amy.ns.cloudflare.com, todd.ns.cloudflare.com | - |
✅ Authoritative Response
Server:108.162.192.101
NS records: amy.ns.cloudflare.com, todd.ns.cloudflare.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for evil.ly (unsigned zone)
⏱️ Timing
Total: 566ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.196.6, 104.21.21.29 |
| AAAA | 2 | 2606:4700:3032::ac43:c406, 2606:4700:3036::6815:151d |
| NS | 2 | amy.ns.cloudflare.com, todd.ns.cloudflare.com |
| MX | 2 | mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20) |
| TXT | 3 | google-site-verification=dXYQaMEPGDFXgCZ, protonmail-verification=4bc7e5c1f05b3317... |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | amy.ns.cloudflare.com dns.cloudflare.com |
📌 Glue Records Collected
Total: 8
In-bailiwick: 2 (pch.ltt.ly, pch.ltt.ly)
Out-of-bailiwick: 6 (dns.lttnet.net, dns1.lttnet.net, ns-ly.afrinic.net...)
Analysis
IP Addresses
evil.ly directs to four IP numbers, which are 104.21.21.29, 172.67.196.6, 2606:4700:3032::ac43:c406 and 2606:4700:3036::6815:151d.
Additional host names — vorenalithiqe.com, live-stamina-scope.click, www.cruitcast.com and two others — share IP numbers with evil.ly.
Name Servers
Two name servers handle the delegation for evil.ly: amy.ns.cloudflare.com and todd.ns.cloudflare.com.
evil.ly shares its name server setup with other domains, including km23.com.ua, baylisa.org, securelabs.io and two others.
There is at least partial name server overlap between evil.ly and other domains — katerchrisman.com, lemore.com, milotoken.io and two more among them.
These name servers frequently co-occur with the name servers byron.ns.cloudflare.com and kim.ns.cloudflare.com.
Host names with 6 IP numbers:
amy.ns.cloudflare.com resolves to 108.162.192.101, 172.64.32.101 and 173.245.58.101 among others, with 3 other IP addresses in total.
todd.ns.cloudflare.com resolves to 108.162.193.146, 172.64.33.146 and 173.245.59.146 among others, with 3 other IP addresses in total.
Mail Servers
evil.ly has two mail servers: mail.protonmail.ch and mailsec.protonmail.ch.
evil.ly shares the same mail server setup as other domains, including devproteam.com, caseyjr.org, gammacorvi.com and two others.
evil.ly shares mail servers — at least in part — with other domains, including diefco.com, intear.tech, denaultgroup.com and two others.
mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128. mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129. Both hosts resolve to three IP numbers.