www.evilware.com - robtex.com

www.evilware.com

CNAMEevilware.com
DNSSEC⚠️ Not signed
A15.204.240.210🇺🇸 OVH15.204.128.0/17 Hosting route
PTRvps-e22fca79.vps.ovh.us
NSdns1.registrar-servers.com ⭐
A2610:a1:1024::200🇺🇸 MAINT-ID-120082610:a1:1024::/48 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
A156.154.132.200🇺🇸 MAINT-ID-12008156.154.132.0/24 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
NSdns2.registrar-servers.com
A2610:a1:1025::200🇺🇸 MAINT-ID-120082610:a1:1025::/48 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
A156.154.133.200🇺🇸 MAINT-ID-12008156.154.133.0/24 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c09::1a🇺🇸 Google2607:f8b0:4004::/48
PTRbh-in-f26.1e100.net
A192.178.155.27🇺🇸 Google192.178.155.0/24
PTRyuiadrs-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1a🇨🇱 Google2800:3f0:4003::/48
A108.177.123.27🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f27.1e100.net
MXalt2.aspmx.l.google.com(5)
A2607:f8b0:4023:1015::1b🇺🇸 Google2607:f8b0::/32
PTRyudfwta-in-f27.1e100.net
A172.253.135.27🇺🇸 Google172.253.135.0/24
PTRyudfwta-in-f27.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4001:c21::1b🇩🇪 Google2a00:1450:4001::/48
PTRlcfrai-in-f27.1e100.net
A142.251.127.26🇺🇸 Google142.251.127.0/24
PTRlcfrai-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2607:f8b0:4003:c4a::1b🇺🇸 Google2607:f8b0:4003::/48
PTRyutulth-in-f27.1e100.net
A142.251.96.26🇺🇸 Google142.250.0.0/15
PTRyutulth-in-f26.1e100.net
SOAdns1.registrar-servers.comhostmaster@registrar-servers.com serial=1758252459

evilware.com

DNSSEC⚠️ Not signed
A15.204.240.210🇺🇸 OVH15.204.128.0/17 Hosting route
NSdns1.registrar-servers.com ⭐
NSdns2.registrar-servers.com
MXaspmx.l.google.com ⭐
MXalt1.aspmx.l.google.com(5)
MXalt2.aspmx.l.google.com(5)
MXalt3.aspmx.l.google.com(10)
MXalt4.aspmx.l.google.com(10)
SOAdns1.registrar-servers.comhostmaster@registrar-servers.com serial=1758252459

Same first word

www.bytom.pl
www.video
www.mg.gov.br
www.webhop.me
www.jgora.pl
www.birkenes.no
www.football
www.bike
www.works
www.appspot.com
www.auto.pl
www.boy.jp
www.rovno.ua
www.blogspot.co.at
www.s3.amazonaws.com
www.elblag.pl
www.ddnss.org
www.pyatigorsk.ru
www.iobb.net
www.com.ag
www.sap
www.zombie.jp
www.blogdns.net
www.slupsk.pl
www.tf
www.cci.fr
www.mp
www.leirfjord.no
www.sklep.pl
www.is-an-entertainer.com
www.barsy.bg
www.codes
www.now-dns.org
www.vin
www.gob.pe
www.kharkiv.ua
www.is-a-personaltrainer.com
www.vip
www.biz.at
www.dnsalias.net
www.pru
www.official.academy
www.blogspot.nl
www.from-dc.com
www.przeworsk.pl
www.from-de.com
www.adobeioruntime.net
www.net.sc
www.rexroth
www.dynalias.com
www.gov.lv
www.windows
www.charity
www.glass
www.vivian.jp
www.nl.eu.org
www.siljan.no
www.szczecin.pl
www.engineering
www.123webseite.at
www.tickets.io
www.company
www.servepics.com
www.vardo.no
www.sth.ac.at
www.cloudaccess.net
www.vapor.cloud
www.lc
www.asia
www.bz
www.md
www.gov.tn
www.msk.ru
www.is-a-cpa.com
www.legnica.pl
www.cd
www.ericsson
www.nx.cn
www.is-a-chef.net
www.band
www.cloudjiffy.net
www.eu.ngrok.io
www.cfolks.pl
www.gob.ec
www.ba.gov.br
www.delivery
www.co.tt
www.backdrop.jp
www.gov.mr
www.com.se
www.grue.no
www.readthedocs.io
www.dojin.com
www.edu.kg
www.or.at
www.is
www.pp.ua
www.v.ua
www.guru
www.servebbs.org

Similar names

www.golffan.us
www.tl
www.versus.jp
www.meteorapp.com
www.pointto.us
www.mil.by
www.ac.za
www.likes-pie.com
www.stjordal.no
www.yandex
www.soundcast.me
www.fish
www.worse-than.tv
www.modalen.no
www.from-pa.com
www.edu.cn
www.mlb
www.ge
www.withyoutube.com
www.modelscape.com
www.bergen.no
www.melbourne
www.xbox
www.games
www.webspace.rocks
www.wtf
www.me.uk
www.energy
www.lovesick.jp
www.carrd.co
www.ne.jp
www.krasnik.pl
www.hippy.jp
www.from-nm.com
www.ciscofreak.com
www.df.gov.br
www.gov.ie
www.ha.cn
www.blogspot.lt
www.trysil.no
www.condos
www.gov.cy
www.ath.cx
www.from-nv.com
www.miniserver.com
www.af
www.myeffect.net
www.xz.cn
www.woltlab-demo.com
www.gub.uy
www.selfip.org
www.technology
www.leczna.pl
www.is-an-accountant.com
www.123kotisivu.fi
www.averoy.no
www.bplaced.net
www.mircloud.us
www.careers
www.czeladz.pl
www.cloudns.info
www.ms.gov.br
www.edu.ee
www.activetrail.biz
www.news
www.net.kg
www.keymachine.de
www.ml
www.cloudns.biz
www.ddnsgeek.com
www.servebbs.com
www.ma.gov.br
www.industries
www.ch
www.lierne.no
www.kapsi.fi
www.blogspot.ae
www.kr.ua
www.chowder.jp
www.js.org
www.wf
www.from-ok.com
www.gov.ls
www.blogspot.com.eg
www.ddns.net
www.za.net
www.land
www.skiptvet.no
www.gi
www.gov.qa
www.is-very-good.org
www.secret.jp
www.codeberg.page
www.bialowieza.pl
www.fjell.no
www.ly
www.edu.az
www.webhop.org
www.lebork.pl
www.isa-geek.com

DNS History

3 records (2 active, 1 former)

20192020202120222023202420252026A15.204.240.21045.55.38.20CNAMEevilware.com
●A15.204.240.2102026-03-24 → 2026-03-25 · 3 obs
○ 2018-01-27 10:33:48
● 2026-03-24 23:31:56
● 2026-03-25 02:49:54
○A45.55.38.202018-01-27 → 2018-01-27 · 3 obs
● 2018-01-27 10:33:48
○ 2026-03-24 23:31:56
○ 2026-03-25 02:49:54
●CNAMEevilware.com2026-03-24 → 2026-03-25 · 2 obs
● 2026-03-24 23:31:56
● 2026-03-25 02:49:54

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
comd.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, f.gtld-servers.net...-
evilware.comdns1.registrar-servers.com, dns2.registrar-servers.com4 records

✅ Authoritative Response

Server:156.154.133.200

NS records: dns1.registrar-servers.com, dns2.registrar-servers.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evilware.com (unsigned zone)

⏱️ Timing

Total: 142ms | Queries: -

📄 Records

TypeCountSample Data
A115.204.240.210
CNAME1evilware.com

📌 Glue Records Collected

Total: 4

Out-of-bailiwick: 4 (dns1.registrar-servers.com, dns1.registrar-servers.com, dns2.registrar-servers.com...)

Analysis

IP Addresses

www.evilware.com points to a single IP number: 15.204.240.210.

Other host names like vps-e22fca79.vps.ovh.us and evilware.com share IP numbers with www.evilware.com.

Name Servers

www.evilware.com is delegated to two name servers: dns1.registrar-servers.com and dns2.registrar-servers.com.

www.evilware.com shares the same name server setup as other domains, for example iph.biz, darkhorsedeluxe.net, eugeniogrosso.com, masterguitaracademy.com and now.co.

www.evilware.com partially shares name servers with other domains, for instance bwcplumbing.com, mashically.com, pyrodb.com and womeva.com.

These name servers are commonly used with dns3.registrar-servers.com, dns4.registrar-servers.com and dns5.registrar-servers.com.

Host names with two IP numbers:

dns1.registrar-servers.com points to 2610:a1:1024::200 and 156.154.132.200

dns2.registrar-servers.com points to 2610:a1:1025::200 and 156.154.133.200

Mail Servers

www.evilware.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.

www.evilware.com shares mail servers with other domains at least partially, including irisgo.vn, tamar.si, ns500754.ns500742.ns500754.ns500742.ns500671.ns500742.ns500731.ns500705.ns500678.ns500688.ns500688.ns500649.ns500649.ns500666.ns500142.lusty(0x736c7574)z.com, ns500742.ns500671.ns500671.ns500671.ns500671.ns500688.ns500671.ns500704.ns500688.ns500688.ns500678.ns500671.ns500666.ns500291.ns500131.lustychickser.com and ns500759.ns500698.ns500759.ns500759.ns500698.ns500735.ns500735.ns500735.ns500735.ns500736.ns500736.ns500735.ns500708.ns500619.ns500619.ns500686.ns500619.trackreceptor.com.

these mail servers are often used with the mail servers aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com and aspmx5.googlemail.com.

Hosts with two IP numbers:

aspmx.l.google.com points to 2607:f8b0:4004:c09::1a and 192.178.155.27.

alt1.aspmx.l.google.com points to 2800:3f0:4003:c0f::1a and 108.177.123.27.

alt2.aspmx.l.google.com points to 2607:f8b0:4023:1015::1b and 172.253.135.27.

alt3.aspmx.l.google.com points to 2a00:1450:4001:c21::1b and 142.251.127.26.

alt4.aspmx.l.google.com points to 2607:f8b0:4003:c4a::1b and 142.251.96.26.