evil.st - robtex.com

evil.st

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:86e7πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3035::6815:695πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.6.149Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.134.231πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSbayan.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b48πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbayan.ns.cloudflare.com
A2803:f800:50::6ca2:c148πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbayan.ns.cloudflare.com
A2a06:98c1:50::ac40:2148πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRbayan.ns.cloudflare.com
A108.162.193.72πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbayan.ns.cloudflare.com
A172.64.33.72πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbayan.ns.cloudflare.com
A173.245.59.72πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbayan.ns.cloudflare.com
NSkara.ns.cloudflare.com
A2606:4700:50::adf5:3a7bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkara.ns.cloudflare.com
A2803:f800:50::6ca2:c07bπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkara.ns.cloudflare.com
A2a06:98c1:50::ac40:207bπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRkara.ns.cloudflare.com
A108.162.192.123πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkara.ns.cloudflare.com
A172.64.32.123πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkara.ns.cloudflare.com
A173.245.58.123πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkara.ns.cloudflare.com
MXmail.evil.st ⭐
A185.103.164.241πŸ‡·πŸ‡Ί BIG-AS185.103.164.0/22
TXTv=spf1 mx a:mail.evil.st -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.6.149, 172.67.134.231
IPv6 hints2606:4700:3031::ac43:86e7, 2606:4700:3035::6815:695
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=240, name=cloudflare-ech.com
SOAbayan.ns.cloudflare.comdns@cloudflare.com serial=2407285172

st

DNSSEC⚠️ Not signed
NSns1.bahnhof.net ⭐ ⚠️ Not in parent delegation
NSdns-st.bahnhof.net ⚠️ Not in parent delegation
NSsoutheast-2.dns-au.st
NSwest-2.dns-us.st
SOAns1.bahnhof.nethostmaster@nic.st serial=2511384950
⚠️ On DNS blocklist: tif

Subdomains

Same first word

Similar names

DNS History

7 records (7 active, 0 former)

NSbayan.ns.cloudflare.comkara.ns.cloudflare.comMXmail.evil.stA104.21.6.149172.67.134.2312606:4700:3031::ac43:86e72606:4700:3035::6815:695
●NSbayan.ns.cloudflare.com2026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36
●NSkara.ns.cloudflare.com2026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36
●MXmail.evil.st2026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36
●A104.21.6.1492026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36
●A172.67.134.2312026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36
●A2606:4700:3031::ac43:86e72026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36
●A2606:4700:3035::6815:6952026-07-28 β†’ 2026-08-04 Β· 2 obs
● 2026-07-28 15:07:46
● 2026-08-04 17:03:36

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
stsoutheast-2.dns-au.st, dns-st.bahnhof.net, ns1.bahnhof.net, west-2.dns-us.st8 records
evil.stkara.ns.cloudflare.com, bayan.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.193.72

NS records: kara.ns.cloudflare.com, bayan.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for st (unsigned zone)

⏱️ Timing

Total: 567ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.6.149, 172.67.134.231
AAAA22606:4700:3031::ac43:86e7, 2606:4700:3035::6815:695
NS2bayan.ns.cloudflare.com, kara.ns.cloudflare.com
MX1mail.evil.st (pri: 10)
TXT1v=spf1 mx a:mail.evil.st -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1bayan.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 4 (southeast-2.dns-au.st, southeast-2.dns-au.st, west-2.dns-us.st...)

Out-of-bailiwick: 4 (dns-st.bahnhof.net, dns-st.bahnhof.net, ns1.bahnhof.net...)

Analysis

Hierarchy

The domain mail.evil.st falls under the parent evil.st.

IP Addresses

evil.st directs to four IP numbers, which are 104.21.6.149, 172.67.134.231, 2606:4700:3031::ac43:86e7 and 2606:4700:3035::6815:695.

Additional host names β€” casinojellybean.com, www.4638.com, gjiaoyi.com and two others β€” share IP numbers with evil.st.

Name Servers

DNS delegation for evil.st points to two name servers: bayan.ns.cloudflare.com and kara.ns.cloudflare.com.

evil.st shares its name server setup with other domains, including al-menn.ru, perlooraorievo.com, anlaxerdralitharosiv.com and two others.

At least some of evil.st's name servers are shared with other domains, for example fox1news.com, smzdxyx.com, webapiz.com and two more.

These name servers tend to be deployed in combination with the name servers donna.ns.cloudflare.com and lucy.ns.cloudflare.com.

Host names with 6 IP numbers:

bayan.ns.cloudflare.com has IP addresses 108.162.193.72, 172.64.33.72 and 173.245.59.72, plus 3 other.

kara.ns.cloudflare.com has IP addresses 108.162.192.123, 172.64.32.123 and 173.245.58.123, plus 3 other.

Mail Servers

evil.st has one mail server: mail.evil.st.

mail.evil.st has exactly one IP number: 185.103.164.241.