evilcastle.com - robtex.com

evilcastle.com

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:9638🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:bc1🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.11.193Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.150.56🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSsid.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b8f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsid.ns.cloudflare.com
A2803:f800:50::6ca2:c18f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsid.ns.cloudflare.com
A2a06:98c1:50::ac40:218f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRsid.ns.cloudflare.com
A108.162.193.143🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsid.ns.cloudflare.com
A172.64.33.143🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsid.ns.cloudflare.com
A173.245.59.143🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsid.ns.cloudflare.com
NSullis.ns.cloudflare.com
A2606:4700:50::a29f:267f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRullis.ns.cloudflare.com
A2803:f800:50::6ca2:c27f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRullis.ns.cloudflare.com
A2a06:98c1:50::ac40:227f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRullis.ns.cloudflare.com
A108.162.194.127🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRullis.ns.cloudflare.com
A162.159.38.127Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRullis.ns.cloudflare.com
A172.64.34.127🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRullis.ns.cloudflare.com
MXroute1.mx.cloudflare.net ⭐
A2606:4700:f5::b🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::c🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A2606:4700:f5::d🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.11Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.12Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
A162.159.205.13Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute1.mx.cloudflare.net
MXroute3.mx.cloudflare.net(42)
A2606:4700:f5::11🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::12🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A2606:4700:f5::13🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.23Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.24Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
A162.159.205.25Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute3.mx.cloudflare.net
MXroute2.mx.cloudflare.net(53)
A2606:4700:f5::e🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::f🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A2606:4700:f5::10🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.17Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.18Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
A162.159.205.19Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRroute2.mx.cloudflare.net
TXTv=spf1 include:spf.protection.outlook.com include:_spf.mx.cloudflare.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.11.193, 172.67.150.56
IPv6 hints2606:4700:3030::ac43:9638, 2606:4700:3037::6815:bc1
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=95, name=cloudflare-ech.com
SOAsid.ns.cloudflare.comdns@cloudflare.com serial=2399268263

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1776016222

Same first word

evilcastle.com

Similar names

activesell.com
livecastle.org
cetsevilla.es
livecastle.com
castelviel.com
activelles.com
celestialv.com
sellactive.eu
sellactive.nl
sellactive.de
castleevil.ca
cvilleeats.com

DNS History

17 records (9 active, 8 former)

20162017201820192020202120222023202420252026NSsid.ns.cloudflare.comullis.ns.cloudflare.comns1.ukdnsservers.co.ukns2.ukdnsservers.co.ukns3.ukdnsservers.co.ukns4.ukdnsservers.co.ukMXroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netus2.mx1.mailhostbox.comus2.mx2.mailhostbox.comus2.mx3.mailhostbox.comA104.21.11.193172.67.150.562606:4700:3030::ac43:96382606:4700:3037::6815:bc195.131.64.149
○NSns1.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
○NSns2.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
○NSns3.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
○NSns4.ukdnsservers.co.uk2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
●NSsid.ns.cloudflare.com2026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●NSullis.ns.cloudflare.com2026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●MXroute1.mx.cloudflare.net2026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●MXroute2.mx.cloudflare.net2026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●MXroute3.mx.cloudflare.net2026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
○MXus2.mx1.mailhostbox.com2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
○MXus2.mx2.mailhostbox.com2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
○MXus2.mx3.mailhostbox.com2015-06-18 → 2016-04-06 · 4 obs
● 2015-06-18 17:56:32
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56
●A104.21.11.1932026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●A172.67.150.562026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●A2606:4700:3030::ac43:96382026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
●A2606:4700:3037::6815:bc12026-03-26 → 2026-04-12 · 3 obs
○ 2016-04-06 19:47:52
● 2026-03-26 09:29:40
● 2026-04-12 17:53:56
○A95.131.64.1492015-10-27 → 2016-04-06 · 4 obs
● 2015-10-27 08:46:20
● 2016-04-06 19:47:52
○ 2026-03-26 09:29:40
○ 2026-04-12 17:53:56

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coml.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...-
evilcastle.comsid.ns.cloudflare.com, ullis.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.194.127

NS records: sid.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evilcastle.com (unsigned zone)

⏱️ Timing

Total: 178ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.150.56, 104.21.11.193
AAAA22606:4700:3030::ac43:9638, 2606:4700:3037::6815:bc1
NS2sid.ns.cloudflare.com, ullis.ns.cloudflare.com
MX3route1.mx.cloudflare.net (pri: 20), route3.mx.cloudflare.net (pri: 42)...
TXT1v=spf1 include:spf.protection.outlook.co
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1sid.ns.cloudflare.com dns.cloudflare.com

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (sid.ns.cloudflare.com, sid.ns.cloudflare.com, sid.ns.cloudflare.com...)

Analysis

IP Addresses

Four IP numbers are pointed to by evilcastle.com: 2606:4700:3030::ac43:9638, 2606:4700:3037::6815:bc1, 104.21.11.193 and 172.67.150.56.

other host names including willpeach.com, ns2.hc-barys.kz, www.ycsmg.com, mosesremodeling.mobi and metromedya.com share IP numbers with evilcastle.com.

Name Servers

evilcastle.com is delegated to two name servers sid.ns.cloudflare.com and ullis.ns.cloudflare.com.

evilcastle.com shares the same name server setup as other domains, for instance amazingsoftbd.com, cloudsited.com, rumus.web.id, jurnalindonesia.co.id and tanjungpinangpos.co.id.

evilcastle.com at least partially shares name servers with other domains, for instance 0797hjxx.com, fipa.es, minfb.com, conway.tech and alora.es.

Host names with six IP numbers:

Host name sid.ns.cloudflare.com points to: 2606:4700:58::adf5:3b8f, 2803:f800:50::6ca2:c18f, 2a06:98c1:50::ac40:218f, 108.162.193.143, 172.64.33.143 and 173.245.59.143.

Host name ullis.ns.cloudflare.com points to: 2606:4700:50::a29f:267f, 2803:f800:50::6ca2:c27f, 2a06:98c1:50::ac40:227f, 108.162.194.127, 162.159.38.127 and 172.64.34.127.

Mail Servers

evilcastle.com is handled by three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

evilcastle.com shares some mail servers with other domains, at least partially, for instance securelylogout.com, legalassociates.services, temovision.com, busanstay.com and seobeaver.ca.

Host names with six IP numbers:

Host name route1.mx.cloudflare.net points to: 2606:4700:f5::b, 2606:4700:f5::c, 2606:4700:f5::d, 162.159.205.11, 162.159.205.12 and 162.159.205.13.

Host name route2.mx.cloudflare.net points to: 2606:4700:f5::e, 2606:4700:f5::f, 2606:4700:f5::10, 162.159.205.17, 162.159.205.18 and 162.159.205.19.

Host name route3.mx.cloudflare.net points to: 2606:4700:f5::11, 2606:4700:f5::12, 2606:4700:f5::13, 162.159.205.23, 162.159.205.24 and 162.159.205.25.