DNS delegation of evilcode.com updated: May 23, 2013 8:23:23 PM
Delegation
step
query
auth
servers
1
evilcode.com.
.
(h,e,m,i,j,d,a,c,g,l,k,b,f).root-servers.net.
2
evilcode.com.
com.
(i,l,d,m,c,f,g,e,b,k,h,a,j).gtld-servers.net.
3
evilcode.com.
evilcode.com.
(ns1,ns2).hover.com.
We pick h.root-servers.net, one of the 13 root servers (1), and ask it about evilcode.com and learn that com is delegated to 13 name servers (2), so we ask i.gtld-servers.net where we learn that evilcode.com is delegated to two name servers, including ns1.hover.com (3), so we ask that one and get the following answer:
Evilcode.com is a domain controlled by two domain name servers at hover.com. Both are on different IP networks. Incoming mail for evilcode.com is handled by seven mail servers at googlemail.com and google.com having a total of 57 IP numbers. There are 33 duplicated IP numbers. Some of them are on the same IP network.