Skip to content

Hostname

mail.evilcorp.red

Last fetched

mail.evilcorp.red resolves to 1 IPv4 address operated by AS16276 in FR.

Nutrition Label

WHISPER CANON · mail.evilcorp.redRouting diversity1.5/10Peering density10.0/10MOAS conflict✓ noneThreat-feed listings10.0/10WHOIS transparency0.0/10Resolver footprint3.2/10canon.whisper.security/host/mail.evilcorp.red

Resolution chain

mail.evilcorp.red resolves to 1 distinct IPv4 address via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
162.19.76.102162.19.0.0/17AS16276—FR

WHOIS identity

No WHOIS records are currently associated with mail.evilcorp.red in WhisperGraph.

Threat posture

History

Mail and authentication

MX records

SPF policy

2 SPF mechanisms authorising senders for mail.evilcorp.red.

MechanismTarget
SPF_Amail.evilcorp.red
SPF_MXmail.evilcorp.red

Related pages

Pivot deeper into the graph from mail.evilcorp.red.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "mail.evilcorp.red"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.