`step-coinbase.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:d86b^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:2da0^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.45.160^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.216.107^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`cloe.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a56^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c056^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cloe.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2056^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cloe.ns.cloudflare.com`
		A	108.162.192.86^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	172.64.32.86^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
		A	173.245.58.86^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cloe.ns.cloudflare.com`
NS	`fattouche.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c30^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fattouche.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c330^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`fattouche.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2330^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`fattouche.ns.cloudflare.com`
		A	108.162.195.48^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fattouche.ns.cloudflare.com`
		A	162.159.44.48^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fattouche.ns.cloudflare.com`
		A	172.64.35.48^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fattouche.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.45.160, 172.67.216.107
		IPv6 hints	2606:4700:3031::ac43:d86b, 2606:4700:3036::6815:2da0
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=168, name=cloudflare-ech.com
SOA	`cloe.ns.cloudflare.com`dns@cloudflare.com serial=2400500782

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778318146

⚠️ On DNS blocklist: tif

Same first word

step-coinbase.com

DNS History

10 records (6 active, 4 former)

●NScloe.ns.cloudflare.com2026-02-18 → 2026-05-09 · 2 obs

● 2026-02-18 17:18:12
● 2026-05-09 09:43:50

●NSfattouche.ns.cloudflare.com2026-02-18 → 2026-05-09 · 2 obs

● 2026-02-18 17:18:12
● 2026-05-09 09:43:50

●A104.21.45.1602026-04-29 → 2026-05-09 · 3 obs

○ 2026-02-18 17:18:12
● 2026-04-29 09:20:40
● 2026-05-09 09:43:50

●A172.67.216.1072026-04-29 → 2026-05-09 · 3 obs

○ 2026-02-18 17:18:12
● 2026-04-29 09:20:40
● 2026-05-09 09:43:50

○A188.114.96.02026-02-18 → 2026-02-18 · 3 obs

● 2026-02-18 17:18:12
○ 2026-04-29 09:20:40
○ 2026-05-09 09:43:50

○A188.114.97.02026-02-18 → 2026-02-18 · 3 obs

● 2026-02-18 17:18:12
○ 2026-04-29 09:20:40
○ 2026-05-09 09:43:50

●A2606:4700:3031::ac43:d86b2026-04-29 → 2026-05-09 · 3 obs

○ 2026-02-18 17:18:12
● 2026-04-29 09:20:40
● 2026-05-09 09:43:50

●A2606:4700:3036::6815:2da02026-04-29 → 2026-05-09 · 3 obs

○ 2026-02-18 17:18:12
● 2026-04-29 09:20:40
● 2026-05-09 09:43:50

○A2a06:98c1:3120::2026-02-18 → 2026-02-18 · 3 obs

● 2026-02-18 17:18:12
○ 2026-04-29 09:20:40
○ 2026-05-09 09:43:50

○A2a06:98c1:3121::2026-02-18 → 2026-02-18 · 3 obs

● 2026-02-18 17:18:12
○ 2026-04-29 09:20:40
○ 2026-05-09 09:43:50

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	f.gtld-servers.net, h.gtld-servers.net, e.gtld-servers.net, a.gtld-servers.net...	-
step-coinbase.com	cloe.ns.cloudflare.com, fattouche.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.86

NS records: cloe.ns.cloudflare.com, fattouche.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for step-coinbase.com (unsigned zone)

⏱️ Timing

Total: 314ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.216.107, 104.21.45.160`
AAAA	2	`2606:4700:3031::ac43:d86b, 2606:4700:3036::6815:2da0`
NS	2	`cloe.ns.cloudflare.com, fattouche.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`cloe.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (cloe.ns.cloudflare.com, cloe.ns.cloudflare.com, cloe.ns.cloudflare.com...)

Analysis

IP Addresses

step-coinbase.com points to four IP numbers: 2606:4700:3031::ac43:d86b, 2606:4700:3036::6815:2da0, 104.21.45.160 and 172.67.216.107.

For instance, other host names nexapi.xyz, betgogrid.us, xn88.loan, www.rsgcsl.com and www.west-clover.com share IP numbers with step-coinbase.com.

Name Servers

step-coinbase.com is delegated to two name servers: cloe.ns.cloudflare.com and fattouche.ns.cloudflare.com.

step-coinbase.com uses the same name server setup as other domains such as heeae.com, wawoof.com, muia.com.mt, bodystyling.at and yourpurrfectpetcare.com.

step-coinbase.com shares name servers with other domains at least partially, for example 220ict.net, bcca.kiwi, proads.vn, tqbb.net and befrlop.com.

These name servers are commonly used with the name servers nelci.ns.cloudflare.com and norman.ns.cloudflare.com.

Host names with six IP numbers: host name cloe.ns.cloudflare.com points to: 2606:4700:50::adf5:3a56, 2803:f800:50::6ca2:c056, 2a06:98c1:50::ac40:2056, 108.162.192.86, 172.64.32.86 and 173.245.58.86; host name fattouche.ns.cloudflare.com points to: 2606:4700:58::a29f:2c30, 2803:f800:50::6ca2:c330, 2a06:98c1:50::ac40:2330, 108.162.195.48, 162.159.44.48 and 172.64.35.48.

step-coinbase.com - robtex.com