evil.ly - dns.ninja

evil.ly

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:c406🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:151d🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.21.29Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.196.6🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSamy.ns.cloudflare.com
A2606:4700:50::adf5:3a65🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
A2803:f800:50::6ca2:c065🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRamy.ns.cloudflare.com
A2a06:98c1:50::ac40:2065🇺🇸 Cloudflare2a06:98c1:50::/45
PTRamy.ns.cloudflare.com
A108.162.192.101🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
A172.64.32.101🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
A173.245.58.101🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamy.ns.cloudflare.com
NStodd.ns.cloudflare.com
A2606:4700:58::adf5:3b92🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtodd.ns.cloudflare.com
A2803:f800:50::6ca2:c192🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRtodd.ns.cloudflare.com
A2a06:98c1:50::ac40:2192🇺🇸 Cloudflare2a06:98c1:50::/45
PTRtodd.ns.cloudflare.com
A108.162.193.146🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtodd.ns.cloudflare.com
A172.64.33.146🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtodd.ns.cloudflare.com
A173.245.59.146🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRtodd.ns.cloudflare.com
MXmail.protonmail.ch
A176.119.200.128🇨🇭 Proton176.119.200.0/24
PTRmail.protonmail.ch
A185.70.42.128🇨🇭 Proton185.70.42.0/24
PTRmail.protonmail.ch
A185.205.70.128🇫🇷 Proton185.205.70.0/24
PTRmail.protonmail.ch
MXmailsec.protonmail.ch(20)
A176.119.200.129🇨🇭 Proton176.119.200.0/24
PTRmailsec.protonmail.ch
A185.70.42.129🇨🇭 Proton185.70.42.0/24
PTRmailsec.protonmail.ch
A185.205.70.129🇫🇷 Proton185.205.70.0/24
PTRmailsec.protonmail.ch
TXTgoogle-site-verification=dXYQaMEPGDFXgCZeAS1hgOoAWEcQcaO4fhKRqhX2hLc
TXTprotonmail-verification=4bc7e5c1f05b33173e7b6064300a79d0b3237747
TXTv=spf1 include:_spf.protonmail.ch mx include:zohomail.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.21.29, 172.67.196.6
IPv6 hints2606:4700:3032::ac43:c406, 2606:4700:3036::6815:151d
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=14, name=cloudflare-ech.com
SOAamy.ns.cloudflare.comdns@cloudflare.com serial=2409743349

ly

DNSSEC🔒 Signed (DS record present)
NSdns1.lttnet.net
NSdns.lttnet.net
NSns-ly.afrinic.net
NSpch.ltt.ly
NSphloem.uoregon.edu
TXTGeneration Time ISO 8601: 2026-07-30 17:00:10
TXTGeneration Time: 1785430810
SOAdns.lttnet.netkhaleds@lttnet.net 2026-07-30 #17

Same first word

Similar names

DNS History

10 records (8 active, 2 former)

NSamy.ns.cloudflare.comtodd.ns.cloudflare.comMXmail.protonmail.chmailsec.protonmail.chA104.21.21.29172.67.196.62606:4700:3032::ac43:c4062606:4700:3036::6815:151d2606:4700:3034::6815:151d2606:4700:3037::ac43:c406
NSamy.ns.cloudflare.com2026-02-17 → 2026-07-30 · 2 obs
● 2026-02-17 21:40:12
● 2026-07-30 18:09:06
NStodd.ns.cloudflare.com2026-02-17 → 2026-07-30 · 2 obs
● 2026-02-17 21:40:12
● 2026-07-30 18:09:06
MXmail.protonmail.ch2026-02-17 → 2026-07-30 · 2 obs
● 2026-02-17 21:40:12
● 2026-07-30 18:09:06
MXmailsec.protonmail.ch2026-02-17 → 2026-07-30 · 2 obs
● 2026-02-17 21:40:12
● 2026-07-30 18:09:06
A104.21.21.292026-02-17 → 2026-07-30 · 2 obs
● 2026-02-17 21:40:12
● 2026-07-30 18:09:06
A172.67.196.62026-02-17 → 2026-07-30 · 2 obs
● 2026-02-17 21:40:12
● 2026-07-30 18:09:06
A2606:4700:3032::ac43:c4062026-06-24 → 2026-07-30 · 3 obs
○ 2026-06-10 02:42:52
● 2026-06-24 22:37:14
● 2026-07-30 18:09:06
A2606:4700:3034::6815:151d2026-02-17 → 2026-06-10 · 4 obs
● 2026-02-17 21:40:12
● 2026-06-10 02:42:52
○ 2026-06-24 22:37:14
○ 2026-07-30 18:09:06
A2606:4700:3036::6815:151d2026-06-24 → 2026-07-30 · 3 obs
○ 2026-06-10 02:42:52
● 2026-06-24 22:37:14
● 2026-07-30 18:09:06
A2606:4700:3037::ac43:c4062026-02-17 → 2026-06-10 · 4 obs
● 2026-02-17 21:40:12
● 2026-06-10 02:42:52
○ 2026-06-24 22:37:14
○ 2026-07-30 18:09:06

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
lydns.lttnet.net, pch.ltt.ly, dns1.lttnet.net, ns-ly.afrinic.net...8 records
evil.lyamy.ns.cloudflare.com, todd.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.192.101

NS records: amy.ns.cloudflare.com, todd.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evil.ly (unsigned zone)

⏱️ Timing

Total: 566ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.196.6, 104.21.21.29
AAAA22606:4700:3032::ac43:c406, 2606:4700:3036::6815:151d
NS2amy.ns.cloudflare.com, todd.ns.cloudflare.com
MX2mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)
TXT3google-site-verification=dXYQaMEPGDFXgCZ, protonmail-verification=4bc7e5c1f05b3317...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1amy.ns.cloudflare.com dns.cloudflare.com

📌 Glue Records Collected

Total: 8

In-bailiwick: 2 (pch.ltt.ly, pch.ltt.ly)

Out-of-bailiwick: 6 (dns.lttnet.net, dns1.lttnet.net, ns-ly.afrinic.net...)

Analysis

IP Addresses

evil.ly directs to four IP numbers, which are 104.21.21.29, 172.67.196.6, 2606:4700:3032::ac43:c406 and 2606:4700:3036::6815:151d.

Additional host names — vorenalithiqe.com, live-stamina-scope.click, www.cruitcast.com and two others — share IP numbers with evil.ly.

Name Servers

Two name servers handle the delegation for evil.ly: amy.ns.cloudflare.com and todd.ns.cloudflare.com.

evil.ly shares its name server setup with other domains, including km23.com.ua, baylisa.org, securelabs.io and two others.

There is at least partial name server overlap between evil.ly and other domains — katerchrisman.com, lemore.com, milotoken.io and two more among them.

These name servers frequently co-occur with the name servers byron.ns.cloudflare.com and kim.ns.cloudflare.com.

Host names with 6 IP numbers:

amy.ns.cloudflare.com resolves to 108.162.192.101, 172.64.32.101 and 173.245.58.101 among others, with 3 other IP addresses in total.

todd.ns.cloudflare.com resolves to 108.162.193.146, 172.64.33.146 and 173.245.59.146 among others, with 3 other IP addresses in total.

Mail Servers

evil.ly has two mail servers: mail.protonmail.ch and mailsec.protonmail.ch.

evil.ly shares the same mail server setup as other domains, including devproteam.com, caseyjr.org, gammacorvi.com and two others.

evil.ly shares mail servers — at least in part — with other domains, including diefco.com, intear.tech, denaultgroup.com and two others.

mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128. mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129. Both hosts resolve to three IP numbers.