🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`evilsoftware.com`

DNSSEC	⚠️ Not signed
A	13.248.169.48^{🇺🇸 Amazon13.248.160.0/20}
		PTR	`a904c694c05102f30.awsglobalaccelerator.com`
A	76.223.54.146^{🇺🇸 Amazon76.223.48.0/20}
NS	`ns1.afternic.com` ⭐
		A	2603:5:2126::45^{🇺🇸 GODADDY-DNS2603:5:2120::/44}
			PTR	`ns1.afternic.com`
		A	97.74.98.69^{🇺🇸 GODADDY-DNS97.74.98.0/23}
			PTR	`ns1.afternic.com`
NS	`ns2.afternic.com`
		A	2603:5:2226::45^{🇺🇸 GODADDY-DNS2603:5:2220::/44}
			PTR	`ns2.afternic.com`
		A	173.201.66.69^{🇺🇸 GODADDY-DNS173.201.66.0/23}
			PTR	`ns2.afternic.com`
NS	`verification-ywpbsnxpm99a4argbrkijr.ns101.verify.hn` ⚠️ Not in zone NS records
		A	13.248.169.48^{🇺🇸 Amazon13.248.160.0/20}
			PTR	`a904c694c05102f30.awsglobalaccelerator.com`
		A	76.223.54.146^{🇺🇸 Amazon76.223.48.0/20}
			PTR	`a904c694c05102f30.awsglobalaccelerator.com`
TXT	`v=spf1 -all`
SOA	`ns1.afternic.com`dns@jomax.net serial=1

`com`

	DNSSEC	⚠️ Not signed
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1793595971

Subdomains

mail.evilsoftware.com

Same first word

evilsoftware.com

Similar names

Previous names

Next names

DNS History

15 records (5 active, 10 former)

●NSns1.afternic.com2026-08-24 → 2026-11-02 · 3 obs

○ 2017-08-26 17:02:30
● 2026-08-24 10:39:40
● 2026-11-02 05:47:06

○NSns1.iviewer.com2015-07-17 → 2016-11-19 · 4 obs

● 2015-07-17 19:15:30
● 2016-11-19 15:57:04
○ 2017-08-26 17:02:30
○ 2026-11-02 05:47:06

○NSns1.sedoparking.com2017-08-26 → 2017-08-26 · 4 obs

○ 2016-11-19 15:57:04
● 2017-08-26 17:02:30
○ 2026-08-24 10:39:40
○ 2026-11-02 05:47:06

●NSns2.afternic.com2026-08-24 → 2026-11-02 · 3 obs

○ 2017-08-26 17:02:30
● 2026-08-24 10:39:40
● 2026-11-02 05:47:06

○NSns2.iviewer.com2015-07-17 → 2016-11-19 · 4 obs

● 2015-07-17 19:15:30
● 2016-11-19 15:57:04
○ 2017-08-26 17:02:30
○ 2026-11-02 05:47:06

○NSns2.sedoparking.com2017-08-26 → 2017-08-26 · 4 obs

○ 2016-11-19 15:57:04
● 2017-08-26 17:02:30
○ 2026-08-24 10:39:40
○ 2026-11-02 05:47:06

○NSns3.iviewer.com2015-07-17 → 2016-11-19 · 4 obs

● 2015-07-17 19:15:30
● 2016-11-19 15:57:04
○ 2017-08-26 17:02:30
○ 2026-11-02 05:47:06

○NSns4.iviewer.com2015-07-17 → 2016-11-19 · 4 obs

● 2015-07-17 19:15:30
● 2016-11-19 15:57:04
○ 2017-08-26 17:02:30
○ 2026-11-02 05:47:06

●NSverification-ywpbsnxpm99a4argbrkijr.ns101.verify.hn2026-08-24 → 2026-11-02 · 3 obs

○ 2017-08-26 17:02:30
● 2026-08-24 10:39:40
● 2026-11-02 05:47:06

○MXlocalhost2017-08-26 → 2017-08-26 · 4 obs

○ 2016-11-19 15:57:04
● 2017-08-26 17:02:30
○ 2026-08-24 10:39:40
○ 2026-11-02 05:47:06

○MXmail.evilsoftware.com2015-07-17 → 2016-11-19 · 4 obs

● 2015-07-17 19:15:30
● 2016-11-19 15:57:04
○ 2017-08-26 17:02:30
○ 2026-11-02 05:47:06

●A13.248.169.482026-08-24 → 2026-11-02 · 3 obs

○ 2017-08-26 17:02:30
● 2026-08-24 10:39:40
● 2026-11-02 05:47:06

○A216.1.60.182015-07-17 → 2016-11-19 · 4 obs

● 2015-07-17 19:15:30
● 2016-11-19 15:57:04
○ 2017-08-26 17:02:30
○ 2026-11-02 05:47:06

○A72.52.4.1192017-08-26 → 2017-08-26 · 4 obs

○ 2016-11-19 15:57:04
● 2017-08-26 17:02:30
○ 2026-08-24 10:39:40
○ 2026-11-02 05:47:06

●A76.223.54.1462026-08-24 → 2026-11-02 · 3 obs

○ 2017-08-26 17:02:30
● 2026-08-24 10:39:40
● 2026-11-02 05:47:06

🔍 DNS Trace

Analysis

Hierarchy

evilsoftware.com serves as the parent of mail.evilsoftware.com.

IP Addresses

evilsoftware.com directs to two IP numbers, 13.248.169.48 and 76.223.54.146

auburnvirtual.xyz, xuwg.xyz, celery.legit(0x706f726e).com and two other host names share IP numbers with evilsoftware.com.

Name Servers

The authoritative name servers for evilsoftware.com are ns1.afternic.com, ns2.afternic.com and verification-ywpbsnxpm99a4argbrkijr.ns101.verify.hn — three in total.

evilsoftware.com has at least partial name server overlap with other domains, such as pspec.com, wholesalekayakstore.com, aajtak2.com and two others.

It is common to see these name servers used together with name servers verification-d3jclucsp89ganyqbydeny.ns101.verify.hn and verification-cz5t4emckzq8g7otfhtftw.ns101.verify.hn.

ns1.afternic.com, ns2.afternic.com and verification-ywpbsnxpm99a4argbrkijr.ns101.verify.hn all resolve to exactly two IP numbers apiece: ns1.afternic.com → 97.74.98.69 and 2603:5:2126::45; ns2.afternic.com → 173.201.66.69 and 2603:5:2226::45; verification-ywpbsnxpm99a4argbrkijr.ns101.verify.hn → 13.248.169.48 and 76.223.54.146.

evilsoftware.com - robtex.com