`cosmeticsmod.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:27a4^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::ac43:92c3^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.39.164^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.146.195^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`roan.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3be2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1e2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`roan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21e2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`roan.ns.cloudflare.com`
		A	108.162.193.226^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roan.ns.cloudflare.com`
		A	172.64.33.226^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roan.ns.cloudflare.com`
		A	173.245.59.226^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`roan.ns.cloudflare.com`
NS	`robin.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ada^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0da^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`robin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20da^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`robin.ns.cloudflare.com`
		A	108.162.192.218^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	172.64.32.218^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	173.245.58.218^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
MX	`mx1.improvmx.com` ⭐
		A	2a05:d012:412:e201:88aa:e7b9:7a43:12d7^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e202:f36:2c1f:1a49:d38a^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e203:373a:f51a:4a85:1d25^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	13.37.195.136^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-37-195-136.eu-west-3.compute.amazonaws.com`
		A	15.236.236.160^{🇫🇷 Amazon15.236.0.0/15 EC2 CDG prefix}
			PTR	`ec2-15-236-236-160.eu-west-3.compute.amazonaws.com`
		A	35.181.18.45^{🇫🇷 Amazon35.181.0.0/16 EC2 CDG prefix}
			PTR	`ec2-35-181-18-45.eu-west-3.compute.amazonaws.com`
MX	`mx2.improvmx.com`⁽²⁰⁾
		A	2a05:d012:412:e201:1f6e:f6e4:8fd7:4678^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e202:e81e:cc44:3b53:8a3d^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	2a05:d012:412:e203:7e33:3d9c:28d7:ee20^{🇫🇷 Amazon2a05:d012:400::/38 AMAZON AWS}
		A	13.36.107.63^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-36-107-63.eu-west-3.compute.amazonaws.com`
		A	13.36.222.39^{🇫🇷 Amazon13.36.0.0/14 EC2 CDG Prefix}
			PTR	`ec2-13-36-222-39.eu-west-3.compute.amazonaws.com`
		A	15.236.61.92^{🇫🇷 Amazon15.236.0.0/15 EC2 CDG prefix}
			PTR	`ec2-15-236-61-92.eu-west-3.compute.amazonaws.com`
TXT	`ca3-62bce532e1ec4262b24785b18adfffec`
TXT	`google-site-verification=HwJzF9J9l8xOayubkxShsdjFV5bO1YAljotpz2xsCKM`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com include:spf.improvmx.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.39.164, 172.67.146.195
		IPv6	2606:4700:3031::6815:27a4, 2606:4700:3032::ac43:92c3
SOA	`roan.ns.cloudflare.com`dns@cloudflare.com serial=2396773297

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1774454997

Same first word

cosmeticsmod.com

DNS History

8 records (8 active, 0 former)

●NSroan.ns.cloudflare.com2026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●NSrobin.ns.cloudflare.com2026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●MXmx1.improvmx.com2026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●MXmx2.improvmx.com2026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●A104.21.39.1642026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●A172.67.146.1952026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●A2606:4700:3031::6815:27a42026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

●A2606:4700:3032::ac43:92c32026-03-08 → 2026-03-25 · 2 obs

● 2026-03-08 09:11:24
● 2026-03-25 16:28:58

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
cosmeticsmod.com	roan.ns.cloudflare.com, robin.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.218

NS records: roan.ns.cloudflare.com, robin.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cosmeticsmod.com (unsigned zone)

⏱️ Timing

Total: 174ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.39.164, 172.67.146.195`
AAAA	2	`2606:4700:3031::6815:27a4, 2606:4700:3032::ac43:92c3`
NS	2	`roan.ns.cloudflare.com, robin.ns.cloudflare.com`
MX	2	`mx1.improvmx.com (pri: 10), mx2.improvmx.com (pri: 20)`
TXT	3	`ca3-62bce532e1ec4262b24785b18adfffec, google-site-verification=HwJzF9J9l8xOayu...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`roan.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (roan.ns.cloudflare.com, roan.ns.cloudflare.com, roan.ns.cloudflare.com...)

Analysis

IP Addresses

cosmeticsmod.com resolves to four IP numbers: 2606:4700:3031::6815:27a4, 2606:4700:3032::ac43:92c3, 104.21.39.164 and 172.67.146.195.

Other host names such as sueari.com, jessekaufman.com, abmisrc.com, succinc.foundation and calinpop.com share IPs with cosmeticsmod.com.

Name Servers

cosmeticsmod.com is delegated to two name servers: roan.ns.cloudflare.com and robin.ns.cloudflare.com.

cosmeticsmod.com shares the same name server setup as houseandgarden.co, schrodingersothercat.blog, chefaraby.com, ipksa.net and arenaku.com.

cosmeticsmod.com at least partially shares name servers with other domains, for instance philip.place, thefragrancenetpulse.net, healthy-male.com, jxjuyun.com and rgbinfo.com.

These name servers are commonly used with heather.ns.cloudflare.com and alberto.ns.cloudflare.com.

Host names with six IP numbers:

roan.ns.cloudflare.com points to 2606:4700:58::adf5:3be2, 2803:f800:50::6ca2:c1e2, 2a06:98c1:50::ac40:21e2, 108.162.193.226, 172.64.33.226 and 173.245.59.226.

robin.ns.cloudflare.com points to 2606:4700:50::adf5:3ada, 2803:f800:50::6ca2:c0da, 2a06:98c1:50::ac40:20da, 108.162.192.218, 172.64.32.218 and 173.245.58.218.

Mail Servers

cosmeticsmod.com is handled by two mail servers: mx1.improvmx.com and mx2.improvmx.com.

The mail server setup for cosmeticsmod.com matches that of other domains, for instance adventurous-present.de, scs-mail.com, sponsorme.in, togint.com and newsrelay.net.

cosmeticsmod.com shares mail servers with other domains, for instance conexboxes.com and liepins.eu.

Host names with six IP numbers:

mx1.improvmx.com points to 2a05:d012:412:e201:88aa:e7b9:7a43:12d7, 2a05:d012:412:e202:f36:2c1f:1a49:d38a, 2a05:d012:412:e203:373a:f51a:4a85:1d25, 13.37.195.136, 15.236.236.160 and 35.181.18.45.

mx2.improvmx.com points to 2a05:d012:412:e201:1f6e:f6e4:8fd7:4678, 2a05:d012:412:e202:e81e:cc44:3b53:8a3d, 2a05:d012:412:e203:7e33:3d9c:28d7:ee20, 13.36.107.63, 13.36.222.39 and 15.236.61.92.

cosmeticsmod.com - robtex.com