evil.kiwi - robtex.com

evil.kiwi

DNSSEC⚠️ Not signed
A2606:4700:3034::6815:3534πŸ‡ΊπŸ‡Έ Cloudflare βœ“ In HTTPS hints
A2606:4700:3035::ac43:d121πŸ‡ΊπŸ‡Έ Cloudflare βœ“ In HTTPS hints
A104.21.53.52 Cloudflare βœ“ In HTTPS hints
A172.67.209.33πŸ‡ΊπŸ‡Έ Cloudflare βœ“ In HTTPS hints
NScarioca.ns.cloudflare.com ⭐
A2606:4700:50::a29f:2614πŸ‡ΊπŸ‡Έ Cloudflare
PTRcarioca.ns.cloudflare.com
A2803:f800:50::6ca2:c214πŸ‡¨πŸ‡· Cloudflare
PTRcarioca.ns.cloudflare.com
A2a06:98c1:50::ac40:2214πŸ‡ΊπŸ‡Έ Cloudflare
PTRcarioca.ns.cloudflare.com
A108.162.194.20πŸ‡ΊπŸ‡Έ Cloudflare
PTRcarioca.ns.cloudflare.com
A162.159.38.20 Cloudflare
PTRcarioca.ns.cloudflare.com
A172.64.34.20πŸ‡ΊπŸ‡Έ Cloudflare
PTRcarioca.ns.cloudflare.com
NSmax.ns.cloudflare.com
A2606:4700:58::adf5:3b84πŸ‡ΊπŸ‡Έ Cloudflare
PTRmax.ns.cloudflare.com
A2803:f800:50::6ca2:c184πŸ‡¨πŸ‡· Cloudflare
PTRmax.ns.cloudflare.com
A2a06:98c1:50::ac40:2184πŸ‡ΊπŸ‡Έ Cloudflare
PTRmax.ns.cloudflare.com
A108.162.193.132πŸ‡ΊπŸ‡Έ Cloudflare
PTRmax.ns.cloudflare.com
A172.64.33.132πŸ‡ΊπŸ‡Έ Cloudflare
PTRmax.ns.cloudflare.com
A173.245.59.132πŸ‡ΊπŸ‡Έ Cloudflare
PTRmax.ns.cloudflare.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c19::1bπŸ‡ΊπŸ‡Έ Google
PTRbk-in-f27.1e100.net
A172.253.62.27πŸ‡ΊπŸ‡Έ Google
PTRbc-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2607:f8b0:4003:c30::1bπŸ‡ΊπŸ‡Έ Google
PTRyutulis-in-f27.1e100.net
A74.125.27.26πŸ‡ΊπŸ‡Έ Google
PTRyutulis-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2607:f8b0:4001:c70::1aπŸ‡ΊπŸ‡Έ Google
PTRyucbful-in-f26.1e100.net
A192.178.209.26πŸ‡ΊπŸ‡Έ Google
PTRyucbful-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2607:f8b0:4024:c0d::1bπŸ‡ΊπŸ‡Έ Google
PTRmj-in-f27.1e100.net
A192.178.152.26πŸ‡ΊπŸ‡Έ Google
PTRmj-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2607:f8b0:4023:403::1aπŸ‡ΊπŸ‡Έ Google
PTRgg-in-f26.1e100.net
A142.250.96.27πŸ‡ΊπŸ‡Έ Google
PTRgg-in-f27.1e100.net
TXTgoogle-site-verification=7DHFH6s2M-chgDATTfPc-3F29379QanQplBPvpdvT-c
TXTv=spf1 include:_spf.google.com -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4104.21.53.52, 172.67.209.33
IPv62606:4700:3034::6815:3534, 2606:4700:3035::ac43:d121
SOAcarioca.ns.cloudflare.comdns@cloudflare.com serial=2397075287

kiwi

DNSSECπŸ”’ Signed (DS record present)
NSprd-fzp-03.corp.cira.ca ⭐ πŸ”’
NSa.ns.nic.kiwi πŸ”’
NSb.ns.nic.kiwi πŸ”’
NSc.ns.nic.kiwi πŸ”’
NSd.ns.nic.kiwi πŸ”’
SOAprd-fzp-03.corp.cira.caadmin-dns@cira.ca serial=2602231045

Same first word

Similar names

DNS History

49 records (11 active, 38 former)

201820192020202120222023202420252026NScarioca.ns.cloudflare.commax.ns.cloudflare.comclint.ns.cloudflare.comdana.ns.cloudflare.comns-1359.awsdns-41.orgns-1463.awsdns-54.orgns-1725.awsdns-23.co.ukns-193.awsdns-24.comns-1967.awsdns-53.co.ukns-469.awsdns-58.comns-588.awsdns-09.netns-728.awsdns-27.netpete.ns.cloudflare.comvida.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.commx.zoho.commx2.zoho.commx3.zoho.comA104.21.53.52172.67.209.332606:4700:3034::6815:35342606:4700:3035::ac43:d121104.18.44.104104.18.45.104104.18.52.232104.18.53.232104.31.66.96104.31.67.96165.22.87.176172.67.145.432400:cb00:2048:1::681f:42602400:cb00:2048:1::681f:43602606:4700:3031::6812:2d682606:4700:3033::6812:35e82606:4700:3036::6812:2c682606:4700:3037::6812:34e82606:4700:3037::ac43:912b54.182.5.1154.182.5.5154.182.5.5254.182.5.7599.84.238.6399.84.238.7199.84.238.7499.84.238.79
●NScarioca.ns.cloudflare.com2026-02-23 β†’ 2026-02-23 Β· 3 obs
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
β—‹NSclint.ns.cloudflare.com2020-03-25 β†’ 2020-03-25 Β· 4 obs
β—‹ 2020-01-15 03:25:14
● 2020-03-25 16:27:30
β—‹ 2020-05-15 06:54:08
β—‹ 2026-02-23 10:51:22
β—‹NSdana.ns.cloudflare.com2017-03-16 β†’ 2020-06-04 Β· 8 obs
● 2017-03-16 17:30:48
● 2019-09-04 05:39:16
β—‹ 2020-01-15 03:25:14
β—‹ 2020-03-25 16:27:30
● 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
●NSmax.ns.cloudflare.com2026-02-23 β†’ 2026-02-23 Β· 3 obs
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
β—‹NSns-1359.awsdns-41.org2020-01-15 β†’ 2020-01-15 Β· 4 obs
β—‹ 2019-09-04 05:39:16
● 2020-01-15 03:25:14
β—‹ 2020-03-25 16:27:30
β—‹ 2026-02-23 10:51:22
β—‹NSns-1463.awsdns-54.org2020-07-20 β†’ 2020-09-05 Β· 5 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹NSns-1725.awsdns-23.co.uk2020-01-15 β†’ 2020-01-15 Β· 4 obs
β—‹ 2019-09-04 05:39:16
● 2020-01-15 03:25:14
β—‹ 2020-03-25 16:27:30
β—‹ 2026-02-23 10:51:22
β—‹NSns-193.awsdns-24.com2020-01-15 β†’ 2020-01-15 Β· 4 obs
β—‹ 2019-09-04 05:39:16
● 2020-01-15 03:25:14
β—‹ 2020-03-25 16:27:30
β—‹ 2026-02-23 10:51:22
β—‹NSns-1967.awsdns-53.co.uk2020-07-20 β†’ 2020-09-05 Β· 5 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹NSns-469.awsdns-58.com2020-07-20 β†’ 2020-09-05 Β· 5 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹NSns-588.awsdns-09.net2020-07-20 β†’ 2020-09-05 Β· 5 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹NSns-728.awsdns-27.net2020-01-15 β†’ 2020-01-15 Β· 4 obs
β—‹ 2019-09-04 05:39:16
● 2020-01-15 03:25:14
β—‹ 2020-03-25 16:27:30
β—‹ 2026-02-23 10:51:22
β—‹NSpete.ns.cloudflare.com2017-03-16 β†’ 2020-06-04 Β· 8 obs
● 2017-03-16 17:30:48
● 2019-09-04 05:39:16
β—‹ 2020-01-15 03:25:14
β—‹ 2020-03-25 16:27:30
● 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
β—‹NSvida.ns.cloudflare.com2020-03-25 β†’ 2020-03-25 Β· 4 obs
β—‹ 2020-01-15 03:25:14
● 2020-03-25 16:27:30
β—‹ 2020-05-15 06:54:08
β—‹ 2026-02-23 10:51:22
●MXalt1.aspmx.l.google.com2017-03-16 β†’ 2026-02-23 Β· 5 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
●MXalt2.aspmx.l.google.com2017-03-16 β†’ 2026-02-23 Β· 5 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
●MXalt3.aspmx.l.google.com2017-03-16 β†’ 2026-02-23 Β· 5 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
●MXalt4.aspmx.l.google.com2017-03-16 β†’ 2026-02-23 Β· 5 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
●MXaspmx.l.google.com2017-03-16 β†’ 2026-02-23 Β· 5 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
β—‹MXmx.zoho.com2019-08-21 β†’ 2020-09-05 Β· 5 obs
β—‹ 2017-03-16 17:30:48
● 2019-08-21 19:50:12
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹MXmx2.zoho.com2019-08-21 β†’ 2020-09-05 Β· 5 obs
β—‹ 2017-03-16 17:30:48
● 2019-08-21 19:50:12
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹MXmx3.zoho.com2019-08-21 β†’ 2020-09-05 Β· 5 obs
β—‹ 2017-03-16 17:30:48
● 2019-08-21 19:50:12
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹A104.18.44.1042020-05-15 β†’ 2020-06-04 Β· 5 obs
β—‹ 2020-03-25 16:27:30
● 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
β—‹A104.18.45.1042020-05-15 β†’ 2020-06-04 Β· 5 obs
β—‹ 2020-03-25 16:27:30
● 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
β—‹A104.18.52.2322020-03-25 β†’ 2020-03-25 Β· 4 obs
β—‹ 2020-01-15 03:25:14
● 2020-03-25 16:27:30
β—‹ 2020-05-15 06:54:08
β—‹ 2026-02-23 10:51:22
β—‹A104.18.53.2322020-03-25 β†’ 2020-03-25 Β· 4 obs
β—‹ 2020-01-15 03:25:14
● 2020-03-25 16:27:30
β—‹ 2020-05-15 06:54:08
β—‹ 2026-02-23 10:51:22
●A104.21.53.522026-02-23 β†’ 2026-02-23 Β· 3 obs
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
β—‹A104.31.66.962017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2026-02-23 10:51:22
β—‹A104.31.67.962017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2026-02-23 10:51:22
β—‹A165.22.87.1762019-08-21 β†’ 2019-09-04 Β· 5 obs
β—‹ 2017-03-16 17:30:48
● 2019-08-21 19:50:12
● 2019-09-04 05:39:16
β—‹ 2020-01-15 03:25:14
β—‹ 2026-02-23 10:51:22
β—‹A172.67.145.432020-06-04 β†’ 2020-06-04 Β· 4 obs
β—‹ 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
●A172.67.209.332026-02-23 β†’ 2026-02-23 Β· 3 obs
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
β—‹A2400:cb00:2048:1::681f:42602017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2026-02-23 10:51:22
β—‹A2400:cb00:2048:1::681f:43602017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:48
β—‹ 2019-08-21 19:50:12
β—‹ 2026-02-23 10:51:22
β—‹A2606:4700:3031::6812:2d682020-05-15 β†’ 2020-06-04 Β· 5 obs
β—‹ 2020-03-25 16:27:30
● 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
β—‹A2606:4700:3033::6812:35e82020-03-25 β†’ 2020-03-25 Β· 4 obs
β—‹ 2020-01-15 03:25:14
● 2020-03-25 16:27:30
β—‹ 2020-05-15 06:54:08
β—‹ 2026-02-23 10:51:22
●A2606:4700:3034::6815:35342026-02-23 β†’ 2026-02-23 Β· 3 obs
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
●A2606:4700:3035::ac43:d1212026-02-23 β†’ 2026-02-23 Β· 3 obs
β—‹ 2020-09-05 22:43:34
● 2026-02-23 10:51:20
● 2026-02-23 10:51:22
β—‹A2606:4700:3036::6812:2c682020-05-15 β†’ 2020-06-04 Β· 5 obs
β—‹ 2020-03-25 16:27:30
● 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
β—‹A2606:4700:3037::6812:34e82020-03-25 β†’ 2020-03-25 Β· 4 obs
β—‹ 2020-01-15 03:25:14
● 2020-03-25 16:27:30
β—‹ 2020-05-15 06:54:08
β—‹ 2026-02-23 10:51:22
β—‹A2606:4700:3037::ac43:912b2020-06-04 β†’ 2020-06-04 Β· 4 obs
β—‹ 2020-05-15 06:54:08
● 2020-06-04 07:50:16
β—‹ 2020-07-20 14:20:40
β—‹ 2026-02-23 10:51:22
β—‹A54.182.5.112020-07-20 β†’ 2020-07-20 Β· 4 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
β—‹ 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:22
β—‹A54.182.5.512020-07-20 β†’ 2020-07-20 Β· 4 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
β—‹ 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:22
β—‹A54.182.5.522020-07-20 β†’ 2020-07-20 Β· 4 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
β—‹ 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:22
β—‹A54.182.5.752020-07-20 β†’ 2020-07-20 Β· 4 obs
β—‹ 2020-06-04 07:50:16
● 2020-07-20 14:20:40
β—‹ 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:22
β—‹A99.84.238.632020-09-05 β†’ 2020-09-05 Β· 4 obs
β—‹ 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹A99.84.238.712020-09-05 β†’ 2020-09-05 Β· 4 obs
β—‹ 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹A99.84.238.742020-09-05 β†’ 2020-09-05 Β· 4 obs
β—‹ 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22
β—‹A99.84.238.792020-09-05 β†’ 2020-09-05 Β· 4 obs
β—‹ 2020-07-20 14:20:40
● 2020-09-05 22:43:34
β—‹ 2026-02-23 10:51:20
β—‹ 2026-02-23 10:51:22

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
kiwic.ns.nic.kiwi, a.ns.nic.kiwi, b.ns.nic.kiwi, d.ns.nic.kiwi8 records
evil.kiwicarioca.ns.cloudflare.com, max.ns.cloudflare.com-

βœ… Authoritative Response

Server: 162.159.38.20

NS records: carioca.ns.cloudflare.com, max.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evil.kiwi (unsigned zone)

⏱️ Timing

Total: 1140ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.53.52, 172.67.209.33
AAAA12606:4700:130:436c:6f75:6466:6c61:7265
NS2carioca.ns.cloudflare.com, max.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT2google-site-verification=7DHFH6s2M-chgDA, v=spf1 include:_spf.google.com -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1carioca.ns.cloudflare.com dns.cloudflare

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (c.ns.nic.kiwi, c.ns.nic.kiwi, a.ns.nic.kiwi...)

AI analysis

evil.kiwi maps to four IP numbers: 2606:4700:3034::6815:3534, 2606:4700:3035::ac43:d121, 104.21.53.52 and 172.67.209.33.

Other host names such as secure.judaismshop.com, 24pay.in.th, spinderella.net, www.w3xperts.com and peekstop.com share IPs with evil.kiwi.

Two name servers carioca.ns.cloudflare.com and max.ns.cloudflare.com handle the delegation for evil.kiwi.

evil.kiwi shares the same name server setup as other domains, for example getsquareva.com, marketreportbiz.com, amudanan.co.il, teripets.com and theadvisor.net.

evil.kiwi at least partially shares name servers with other domains, for example jetzt-spielen.de, wifimaku.com, accountabill.ca, yamud.uk and pattiramos.com.

these name servers are commonly used alongside elisa.ns.cloudflare.com name servers.

Host names with six IP numbers:

carioca.ns.cloudflare.com points to 2606:4700:50::a29f:2614, 2803:f800:50::6ca2:c214, 2a06:98c1:50::ac40:2214, 108.162.194.20, 162.159.38.20 and 172.64.34.20.

max.ns.cloudflare.com points to 2606:4700:58::adf5:3b84, 2803:f800:50::6ca2:c184, 2a06:98c1:50::ac40:2184, 108.162.193.132, 172.64.33.132 and 173.245.59.132.

evil.kiwi is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.

evil.kiwi shares at least partially some mail servers with other domains, for instance supr.design, expertbrasil.withgoogle.com, tmsindia.net, ns500698.ns500758.ns500758.ns500758.ns500758.ns500698.ns500698.ns500698.ns500736.ns500698.ns500735.ns500576.ns500708.ns500698.ns500619.ns500576.ns500576.trackreceptor.com and ns500742.ns500671.ns500731.ns500671.ns500731.ns500671.ns500704.ns500704.ns500705.ns500705.ns500688.ns500671.ns500649.ns500649.lustychickser.com.

these mail servers are often used together with aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com and aspmx5.googlemail.com.

Host names with two IP numbers

Each host name points to two IP numbers:

aspmx.l.google.com points to 2607:f8b0:4004:c19::1b and 172.253.62.27

alt1.aspmx.l.google.com points to 2607:f8b0:4003:c30::1b and 74.125.27.26

alt2.aspmx.l.google.com points to 2607:f8b0:4001:c70::1a and 192.178.209.26

alt3.aspmx.l.google.com points to 2607:f8b0:4024:c0d::1b and 192.178.152.26

alt4.aspmx.l.google.com points to 2607:f8b0:4023:403::1a and 142.250.96.27