evil-sheep.com - robtex.com

evil-sheep.com

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:459d🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3030::ac43:d1a6🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.69.157Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.209.166🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSkayden.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c4a🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkayden.ns.cloudflare.com
A2803:f800:50::6ca2:c34a🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkayden.ns.cloudflare.com
A2a06:98c1:50::ac40:234a🇺🇸 Cloudflare2a06:98c1:50::/45
PTRkayden.ns.cloudflare.com
A108.162.195.74🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkayden.ns.cloudflare.com
A162.159.44.74Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkayden.ns.cloudflare.com
A172.64.35.74🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkayden.ns.cloudflare.com
NSphoenix.ns.cloudflare.com
A2606:4700:50::a29f:26c9🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
A2803:f800:50::6ca2:c2c9🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRphoenix.ns.cloudflare.com
A2a06:98c1:50::ac40:22c9🇺🇸 Cloudflare2a06:98c1:50::/45
PTRphoenix.ns.cloudflare.com
A108.162.194.201🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
A162.159.38.201Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
A172.64.34.201🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRphoenix.ns.cloudflare.com
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4104.21.69.157, 172.67.209.166
IPv62606:4700:3030::6815:459d, 2606:4700:3030::ac43:d1a6
SOAkayden.ns.cloudflare.comdns@cloudflare.com serial=2398992924

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1774542387

Same first word

evil-sheep.com

DNS History

11 records (6 active, 5 former)

201820192020202120222023202420252026NSkayden.ns.cloudflare.comphoenix.ns.cloudflare.comns77.domaincontrol.comns78.domaincontrol.comMXmailstore1.secureserver.netsmtp.secureserver.netA104.21.69.157172.67.209.1662606:4700:3030::6815:459d2606:4700:3030::ac43:d1a6184.168.221.55
●NSkayden.ns.cloudflare.com2026-03-08 → 2026-03-26 · 3 obs
○ 2017-12-13 17:46:12
● 2026-03-08 16:33:00
● 2026-03-26 16:33:08
○NSns77.domaincontrol.com2017-01-03 → 2017-12-13 · 4 obs
● 2017-01-03 02:49:02
● 2017-12-13 17:46:12
○ 2026-03-08 16:33:00
○ 2026-03-26 16:33:08
○NSns78.domaincontrol.com2017-01-03 → 2017-12-13 · 4 obs
● 2017-01-03 02:49:02
● 2017-12-13 17:46:12
○ 2026-03-08 16:33:00
○ 2026-03-26 16:33:08
●NSphoenix.ns.cloudflare.com2026-03-08 → 2026-03-26 · 3 obs
○ 2017-12-13 17:46:12
● 2026-03-08 16:33:00
● 2026-03-26 16:33:08
○MXmailstore1.secureserver.net2017-01-03 → 2017-12-13 · 4 obs
● 2017-01-03 02:49:02
● 2017-12-13 17:46:12
○ 2026-03-08 16:33:00
○ 2026-03-26 16:33:08
○MXsmtp.secureserver.net2017-01-03 → 2017-12-13 · 4 obs
● 2017-01-03 02:49:02
● 2017-12-13 17:46:12
○ 2026-03-08 16:33:00
○ 2026-03-26 16:33:08
●A104.21.69.1572026-03-08 → 2026-03-26 · 3 obs
○ 2017-12-13 17:46:12
● 2026-03-08 16:33:00
● 2026-03-26 16:33:08
●A172.67.209.1662026-03-08 → 2026-03-26 · 3 obs
○ 2017-12-13 17:46:12
● 2026-03-08 16:33:00
● 2026-03-26 16:33:08
○A184.168.221.552017-01-03 → 2017-12-13 · 4 obs
● 2017-01-03 02:49:02
● 2017-12-13 17:46:12
○ 2026-03-08 16:33:00
○ 2026-03-26 16:33:08
●A2606:4700:3030::6815:459d2026-03-08 → 2026-03-26 · 3 obs
○ 2017-12-13 17:46:12
● 2026-03-08 16:33:00
● 2026-03-26 16:33:08
●A2606:4700:3030::ac43:d1a62026-03-08 → 2026-03-26 · 3 obs
○ 2017-12-13 17:46:12
● 2026-03-08 16:33:00
● 2026-03-26 16:33:08

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
comh.gtld-servers.net, l.gtld-servers.net, b.gtld-servers.net, a.gtld-servers.net...-
evil-sheep.comphoenix.ns.cloudflare.com, kayden.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.195.74

NS records: phoenix.ns.cloudflare.com, kayden.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evil-sheep.com (unsigned zone)

⏱️ Timing

Total: 298ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.209.166, 104.21.69.157
AAAA22606:4700:3030::6815:459d, 2606:4700:3030::ac43:d1a6
NS2kayden.ns.cloudflare.com, phoenix.ns.cloudflare.com
TXT1v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1kayden.ns.cloudflare.com dns.cloudflare.

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (phoenix.ns.cloudflare.com, phoenix.ns.cloudflare.com, phoenix.ns.cloudflare.com...)

Analysis

IP Addresses

evil-sheep.com resolves to four IP numbers: 2606:4700:3030::6815:459d, 2606:4700:3030::ac43:d1a6, 104.21.69.157 and 172.67.209.166.

other host names for instance vt88.my, www.juba.ge, eulogik.com, knlaw.com and helderfontenelle.com.br share IP numbers with evil-sheep.com.

Name Servers

evil-sheep.com is delegated to two name servers: kayden.ns.cloudflare.com and phoenix.ns.cloudflare.com.

evil-sheep.com uses the same name server setup as gift25.xyz, statbest.in and norskecasino.casino.

evil-sheep.com at least partially shares name servers with other domains, for instance juqh.xyz, fileone.tv, tcmac.fr, alphamix.com.br and domicile37.com.

These name servers are commonly used with lamar.ns.cloudflare.com, destiny.ns.cloudflare.com and lana.ns.cloudflare.com.

Host names with six IP numbers:

kayden.ns.cloudflare.com points to: 2606:4700:58::a29f:2c4a, 2803:f800:50::6ca2:c34a, 2a06:98c1:50::ac40:234a, 108.162.195.74, 162.159.44.74 and 172.64.35.74; phoenix.ns.cloudflare.com points to: 2606:4700:50::a29f:26c9, 2803:f800:50::6ca2:c2c9, 2a06:98c1:50::ac40:22c9, 108.162.194.201, 162.159.38.201 and 172.64.34.201.