evilweb.net - dns.ninja

evilweb.net

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:83e8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3034::6815:c1bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.12.27Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.131.232πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSbob.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b68πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbob.ns.cloudflare.com
A2803:f800:50::6ca2:c168πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbob.ns.cloudflare.com
A2a06:98c1:50::ac40:2168πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRbob.ns.cloudflare.com
A108.162.193.104πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbob.ns.cloudflare.com
A172.64.33.104πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbob.ns.cloudflare.com
A173.245.59.104πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbob.ns.cloudflare.com
NSnola.ns.cloudflare.com
A2606:4700:50::adf5:3ad4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnola.ns.cloudflare.com
A2803:f800:50::6ca2:c0d4πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnola.ns.cloudflare.com
A2a06:98c1:50::ac40:20d4πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRnola.ns.cloudflare.com
A108.162.192.212πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnola.ns.cloudflare.com
A172.64.32.212πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnola.ns.cloudflare.com
A173.245.58.212πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnola.ns.cloudflare.com
MXevilweb-net.mail.protection.outlook.com ⭐
A2a01:111:f403:cc31::πŸ‡¦πŸ‡Ί Microsoft2a01:111:f000::/36
PTRmail-sy2pr01cu00300.inbound.protection.outlook.com
A2a01:111:f403:cc31::1πŸ‡¦πŸ‡Ί Microsoft2a01:111:f000::/36
PTRmail-sy8pr01cu00101.inbound.protection.outlook.com
A2a01:111:f403:cc31::3πŸ‡¦πŸ‡Ί Microsoft2a01:111:f000::/36
PTRmail-sy2pr01cu00503.inbound.protection.outlook.com
A2a01:111:f403:cc33::πŸ‡¦πŸ‡Ί Microsoft2a01:111:f000::/36
PTRmail-meupr01cu00200.inbound.protection.outlook.com
A52.101.149.0πŸ‡¦πŸ‡Ί Microsoft52.96.0.0/12 MICROSOFT
PTRmail-sy2pr01cu00300.inbound.protection.outlook.com
A52.101.149.2πŸ‡¦πŸ‡Ί Microsoft52.96.0.0/12 MICROSOFT
PTRmail-sy5pr01cu00902.inbound.protection.outlook.com
A52.101.149.9πŸ‡¦πŸ‡Ί Microsoft52.96.0.0/12 MICROSOFT
PTRmail-sy2pr01cu00501.inbound.protection.outlook.com
A52.101.151.5πŸ‡¦πŸ‡Ί Microsoft52.96.0.0/12 MICROSOFT
PTRmail-meupr01cu00305.inbound.protection.outlook.com
TXTMS=ms45794198
TXTv=spf1 include:spf.protection.outlook.com -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.12.27, 172.67.131.232
IPv6 hints2606:4700:3031::ac43:83e8, 2606:4700:3034::6815:c1b
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=72, name=cloudflare-ech.com
SOAbob.ns.cloudflare.comdns@cloudflare.com serial=2406018999

net

Same first word

Similar names

DNS History

18 records (7 active, 11 former)

20162017201820192020202120222023202420252026NSbob.ns.cloudflare.comnola.ns.cloudflare.coma.dns.gandi.netb.dns.gandi.netc.dns.gandi.netMXevilweb-net.mail.protection.outlook.comfb.mail.gandi.netspool.mail.gandi.netA104.21.12.27172.67.131.2322606:4700:3031::ac43:83e82606:4700:3034::6815:c1b188.114.96.0188.114.97.0217.70.184.382606:4700:3036::6815:c1b2a06:98c1:3120::2a06:98c1:3121::
β—‹NSa.dns.gandi.net2015-08-18 β†’ 2016-09-24 Β· 4 obs
● 2015-08-18 04:54:10
● 2016-09-24 11:43:48
β—‹ 2026-02-15 18:20:58
β—‹ 2026-06-27 19:27:58
β—‹NSb.dns.gandi.net2015-08-18 β†’ 2016-09-24 Β· 4 obs
● 2015-08-18 04:54:10
● 2016-09-24 11:43:48
β—‹ 2026-02-15 18:20:58
β—‹ 2026-06-27 19:27:58
●NSbob.ns.cloudflare.com2026-02-15 β†’ 2026-06-27 Β· 3 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-06-27 19:27:58
β—‹NSc.dns.gandi.net2015-08-18 β†’ 2016-09-24 Β· 4 obs
● 2015-08-18 04:54:10
● 2016-09-24 11:43:48
β—‹ 2026-02-15 18:20:58
β—‹ 2026-06-27 19:27:58
●NSnola.ns.cloudflare.com2026-02-15 β†’ 2026-06-27 Β· 3 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-06-27 19:27:58
●MXevilweb-net.mail.protection.outlook.com2026-02-15 β†’ 2026-06-27 Β· 3 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-06-27 19:27:58
β—‹MXfb.mail.gandi.net2015-08-18 β†’ 2016-09-24 Β· 4 obs
● 2015-08-18 04:54:10
● 2016-09-24 11:43:48
β—‹ 2026-02-15 18:20:58
β—‹ 2026-06-27 19:27:58
β—‹MXspool.mail.gandi.net2015-08-18 β†’ 2016-09-24 Β· 4 obs
● 2015-08-18 04:54:10
● 2016-09-24 11:43:48
β—‹ 2026-02-15 18:20:58
β—‹ 2026-06-27 19:27:58
●A104.21.12.272026-02-15 β†’ 2026-06-27 Β· 8 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-02-27 15:24:24
β—‹ 2026-03-29 23:56:12
● 2026-04-29 18:05:48
β—‹ 2026-05-01 06:24:04
● 2026-06-01 07:35:36
● 2026-06-27 19:27:58
●A172.67.131.2322026-02-15 β†’ 2026-06-27 Β· 8 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-02-27 15:24:24
β—‹ 2026-03-29 23:56:12
● 2026-04-29 18:05:48
β—‹ 2026-05-01 06:24:04
● 2026-06-01 07:35:36
● 2026-06-27 19:27:58
β—‹A188.114.96.02026-03-29 β†’ 2026-05-01 Β· 6 obs
β—‹ 2026-02-27 15:24:24
● 2026-03-29 23:56:12
β—‹ 2026-04-29 18:05:48
● 2026-05-01 06:24:04
β—‹ 2026-06-01 07:35:36
β—‹ 2026-06-27 19:27:58
β—‹A188.114.97.02026-03-29 β†’ 2026-05-01 Β· 6 obs
β—‹ 2026-02-27 15:24:24
● 2026-03-29 23:56:12
β—‹ 2026-04-29 18:05:48
● 2026-05-01 06:24:04
β—‹ 2026-06-01 07:35:36
β—‹ 2026-06-27 19:27:58
β—‹A217.70.184.382015-08-18 β†’ 2016-09-24 Β· 4 obs
● 2015-08-18 04:54:10
● 2016-09-24 11:43:48
β—‹ 2026-02-15 18:20:58
β—‹ 2026-06-27 19:27:58
●A2606:4700:3031::ac43:83e82026-02-15 β†’ 2026-06-27 Β· 8 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-02-27 15:24:24
β—‹ 2026-03-29 23:56:12
● 2026-04-29 18:05:48
β—‹ 2026-05-01 06:24:04
● 2026-06-01 07:35:36
● 2026-06-27 19:27:58
●A2606:4700:3034::6815:c1b2026-06-22 β†’ 2026-06-27 Β· 3 obs
β—‹ 2026-06-06 21:59:32
● 2026-06-22 03:24:38
● 2026-06-27 19:27:58
β—‹A2606:4700:3036::6815:c1b2026-02-15 β†’ 2026-06-06 Β· 10 obs
β—‹ 2016-09-24 11:43:48
● 2026-02-15 18:20:58
● 2026-02-27 15:24:24
β—‹ 2026-03-29 23:56:12
● 2026-04-29 18:05:48
β—‹ 2026-05-01 06:24:04
● 2026-06-01 07:35:36
● 2026-06-06 21:59:32
β—‹ 2026-06-22 03:24:38
β—‹ 2026-06-27 19:27:58
β—‹A2a06:98c1:3120::2026-03-29 β†’ 2026-05-01 Β· 6 obs
β—‹ 2026-02-27 15:24:24
● 2026-03-29 23:56:12
β—‹ 2026-04-29 18:05:48
● 2026-05-01 06:24:04
β—‹ 2026-06-01 07:35:36
β—‹ 2026-06-27 19:27:58
β—‹A2a06:98c1:3121::2026-03-29 β†’ 2026-05-01 Β· 6 obs
β—‹ 2026-02-27 15:24:24
● 2026-03-29 23:56:12
β—‹ 2026-04-29 18:05:48
● 2026-05-01 06:24:04
β—‹ 2026-06-01 07:35:36
β—‹ 2026-06-27 19:27:58

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
neta.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
evilweb.netbob.ns.cloudflare.com, nola.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.32.212

NS records: bob.ns.cloudflare.com, nola.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evilweb.net (unsigned zone)

⏱️ Timing

Total: 563ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.12.27, 172.67.131.232
AAAA22606:4700:3034::6815:c1b, 2606:4700:3031::ac43:83e8
NS2bob.ns.cloudflare.com, nola.ns.cloudflare.com
MX1evilweb-net.mail.protection.outlook.com
TXT2MS=ms45794198, v=spf1 include:spf.protection.outlook.co
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1bob.ns.cloudflare.com dns.cloudflare.com

Analysis

IP Addresses

evilweb.net directs to four IP numbers, which are 104.21.12.27, 172.67.131.232, 2606:4700:3031::ac43:83e8 and 2606:4700:3034::6815:c1b.

Additional host names β€” seramo.ir, crown-catering.co.uk, lipsense.org and two others β€” share IP numbers with evilweb.net.

Name Servers

The NS records for evilweb.net delegate to bob.ns.cloudflare.com and nola.ns.cloudflare.com.

evilweb.net shares its name server setup with other domains, including hasbeens.se, localmedia.ch, hcis.com.mx and two others.

The name servers of evilweb.net overlap at least partially with those of other domains β€” among them dhmplumbing.com.au, themindanaojournal.com, 888rrr27.com and two more.

These name servers commonly appear alongside the name servers hayes.ns.cloudflare.com and gordon.ns.cloudflare.com.

Host names with 6 IP numbers:

bob.ns.cloudflare.com maps to 108.162.193.104, 172.64.33.104, 173.245.59.104 and 3 additional IP addresses.

nola.ns.cloudflare.com maps to 108.162.192.212, 172.64.32.212, 173.245.58.212 and 3 additional IP addresses.

Mail Servers

evilweb.net has one mail server: evilweb-net.mail.protection.outlook.com.

evilweb-net.mail.protection.outlook.com points to 8 IP numbers: 52.101.149.0, 52.101.149.2, 52.101.149.9 and 5 other.