evilginx.com - robtex.com

evilginx.com

DNSSEC⚠️ Not signed
A64.225.102.218πŸ‡©πŸ‡ͺ DIGITALOCEAN64.225.96.0/20 DigitalOcean
PTRbreakdev.org
NSns1.digitalocean.com ⭐ ⚠️ Not in zone NS records
A2606:4700:52::ac40:34d2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:52::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns1.digitalocean.com
A172.64.52.210πŸ‡ΊπŸ‡Έ Cloudflare172.64.52.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns1.digitalocean.com
NSns2.digitalocean.com ⚠️ Not in zone NS records
A2606:4700:5a::ac40:3515πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:5a::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns2.digitalocean.com
A172.64.53.21πŸ‡ΊπŸ‡Έ Cloudflare172.64.53.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns2.digitalocean.com
NSns3.digitalocean.com ⚠️ Not in zone NS records
A2606:4700:52::ac40:31d1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:52::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns3.digitalocean.com
A172.64.49.209πŸ‡ΊπŸ‡Έ Cloudflare172.64.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRns3.digitalocean.com
TXTgoogle-site-verification=Rj4S8EDCsiGLo9PvFCeHSY2ojfseNZiyMj_qTHr31Y4
TXTv=spf1 -all
SOAns1.digitalocean.comhostmaster@evilginx.com serial=0

com

⚠️ On DNS blocklist: tif, tif.medium

Subdomains

Same first word

Similar names

DNS History

5 records (4 active, 1 former)

201820192020202120222023202420252026NSns1.digitalocean.comns2.digitalocean.comns3.digitalocean.comA64.225.102.21846.101.195.123
●NSns1.digitalocean.com2017-05-09 β†’ 2026-08-09 Β· 2 obs
● 2017-05-09 10:03:36
● 2026-08-09 20:50:58
●NSns2.digitalocean.com2017-05-09 β†’ 2026-08-09 Β· 2 obs
● 2017-05-09 10:03:36
● 2026-08-09 20:50:58
●NSns3.digitalocean.com2017-05-09 β†’ 2026-08-09 Β· 2 obs
● 2017-05-09 10:03:36
● 2026-08-09 20:50:58
β—‹A46.101.195.1232026-06-19 β†’ 2026-06-19 Β· 3 obs
● 2026-06-19 12:13:52
β—‹ 2026-08-09 16:47:02
β—‹ 2026-08-09 20:50:58
●A64.225.102.2182026-08-09 β†’ 2026-08-09 Β· 3 obs
β—‹ 2026-06-19 12:13:52
● 2026-08-09 16:47:02
● 2026-08-09 20:50:58

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
comf.gtld-servers.net, k.gtld-servers.net, d.gtld-servers.net, i.gtld-servers.net...-
evilginx.comns1.digitalocean.com, ns2.digitalocean.com, ns3.digitalocean.com3 records

βœ… Authoritative Response

Server:172.64.49.209

NS records: ns1.digitalocean.com, ns2.digitalocean.com, ns3.digitalocean.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evilginx.com (unsigned zone)

⏱️ Timing

Total: 234ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A164.225.102.218
TXT2v=spf1 -all, google-site-verification=Rj4S8EDCsiGLo9P
SOA1ns1.digitalocean.com hostmaster.evilginx

πŸ“Œ Glue Records Collected

Total: 3

Out-of-bailiwick: 3 (ns1.digitalocean.com, ns2.digitalocean.com, ns3.digitalocean.com)

Analysis

Hierarchy

evilginx.com serves as the parent of lab.evilginx.com.

IP Addresses

evilginx.com resolves to just one IP address, 64.225.102.218.

breakdev.org, lab.evilginx.com and akira.lab.evilginx.com are examples of other host names that share IP numbers with evilginx.com.

Name Servers

evilginx.com carries NS records delegating to ns1.digitalocean.com, ns2.digitalocean.com and ns3.digitalocean.com.

evilginx.com has at least partial name server overlap with other domains, such as amaphoto.com, school1368.ru, housebuyersllc.net and two others.

ns1.digitalocean.com, ns2.digitalocean.com and ns3.digitalocean.com are three hostnames that each resolve to a pair of IP addresses: ns1.digitalocean.com to 172.64.52.210 and 2606:4700:52::ac40:34d2, ns2.digitalocean.com to 172.64.53.21 and 2606:4700:5a::ac40:3515, and ns3.digitalocean.com to 172.64.49.209 and 2606:4700:52::ac40:31d1.