codebear.win - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

codebear.win

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:1eb7πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::ac43:ad83πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.30.183Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.173.131πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSmatias.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c49πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmatias.ns.cloudflare.com
A2803:f800:50::6ca2:c349πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmatias.ns.cloudflare.com
A2a06:98c1:50::ac40:2349πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmatias.ns.cloudflare.com
A108.162.195.73πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmatias.ns.cloudflare.com
A162.159.44.73Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmatias.ns.cloudflare.com
A172.64.35.73πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmatias.ns.cloudflare.com
NSsasha.ns.cloudflare.com
A2606:4700:50::a29f:2645πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsasha.ns.cloudflare.com
A2803:f800:50::6ca2:c245πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsasha.ns.cloudflare.com
A2a06:98c1:50::ac40:2245πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRsasha.ns.cloudflare.com
A108.162.194.69πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsasha.ns.cloudflare.com
A162.159.38.69Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsasha.ns.cloudflare.com
A172.64.34.69πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsasha.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.30.183, 172.67.173.131
IPv6 hints2606:4700:3032::6815:1eb7, 2606:4700:3037::ac43:ad83
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=39, name=cloudflare-ech.com
SOAmatias.ns.cloudflare.comdns@cloudflare.com serial=2413812153

win

DNSSECπŸ”’ Signed (DS record present)
NSns1.dns.nic.win ⭐
NSa.nic.win
NSb.nic.win
NSc.nic.win
NSns2.dns.nic.win
NSns3.dns.nic.win
SOAns1.dns.nic.winadmin@tldns.godaddy serial=1788656370
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSmatias.ns.cloudflare.comsasha.ns.cloudflare.comA104.21.30.183172.67.173.1312606:4700:3032::6815:1eb72606:4700:3037::ac43:ad83188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSmatias.ns.cloudflare.com2026-09-04 β†’ 2026-09-06 Β· 2 obs
● 2026-09-04 13:11:04
● 2026-09-06 01:21:22
●NSsasha.ns.cloudflare.com2026-09-04 β†’ 2026-09-06 Β· 2 obs
● 2026-09-04 13:11:04
● 2026-09-06 01:21:22
●A104.21.30.1832026-09-06 β†’ 2026-09-06 Β· 3 obs
β—‹ 2026-09-04 13:11:04
● 2026-09-06 01:21:18
● 2026-09-06 01:21:22
●A172.67.173.1312026-09-06 β†’ 2026-09-06 Β· 3 obs
β—‹ 2026-09-04 13:11:04
● 2026-09-06 01:21:18
● 2026-09-06 01:21:22
β—‹A188.114.96.02026-09-04 β†’ 2026-09-04 Β· 3 obs
● 2026-09-04 13:11:04
β—‹ 2026-09-06 01:21:18
β—‹ 2026-09-06 01:21:22
β—‹A188.114.97.02026-09-04 β†’ 2026-09-04 Β· 3 obs
● 2026-09-04 13:11:04
β—‹ 2026-09-06 01:21:18
β—‹ 2026-09-06 01:21:22
●A2606:4700:3032::6815:1eb72026-09-06 β†’ 2026-09-06 Β· 3 obs
β—‹ 2026-09-04 13:11:04
● 2026-09-06 01:21:18
● 2026-09-06 01:21:22
●A2606:4700:3037::ac43:ad832026-09-06 β†’ 2026-09-06 Β· 3 obs
β—‹ 2026-09-04 13:11:04
● 2026-09-06 01:21:18
● 2026-09-06 01:21:22
β—‹A2a06:98c1:3120::2026-09-04 β†’ 2026-09-04 Β· 3 obs
● 2026-09-04 13:11:04
β—‹ 2026-09-06 01:21:18
β—‹ 2026-09-06 01:21:22
β—‹A2a06:98c1:3121::2026-09-04 β†’ 2026-09-04 Β· 3 obs
● 2026-09-04 13:11:04
β—‹ 2026-09-06 01:21:18
β—‹ 2026-09-06 01:21:22

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
winb.nic.win, ns1.dns.nic.win, ns3.dns.nic.win, ns2.dns.nic.win...-
codebear.winmatias.ns.cloudflare.com, sasha.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.195.73

NS records: matias.ns.cloudflare.com, sasha.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for codebear.win (unsigned zone)

⏱️ Timing

Total: 1244ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.173.131, 104.21.30.183
AAAA22606:4700:3037::ac43:ad83, 2606:4700:3032::6815:1eb7
NS2matias.ns.cloudflare.com, sasha.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1matias.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

codebear.win directs to four IP numbers, which are 104.21.30.183, 172.67.173.131, 2606:4700:3032::6815:1eb7 and 2606:4700:3037::ac43:ad83.

ctlystspace.com, hj2605017b9.top, gamepresse.de and two other host names share IP numbers with codebear.win.

Name Servers

codebear.win uses two name servers for its delegation: matias.ns.cloudflare.com and sasha.ns.cloudflare.com.

codebear.win uses the same name servers as several other domains β€” among them htsd6bf7hh.workers.dev, coin-player.com, fimixi3897.workers.dev and two more.

At least some of codebear.win's name servers are shared with other domains, for example food-recipes-cb9.pages.dev, offensivecyber.net, admar24h.pl and two more.

These name servers tend to be deployed in combination with the name servers nile.ns.cloudflare.com and quentin.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname matias.ns.cloudflare.com directs to 108.162.195.73, 162.159.44.73 and 172.64.35.73 along with 3 other IP addresses.

Hostname sasha.ns.cloudflare.com directs to 108.162.194.69, 162.159.38.69 and 172.64.34.69 along with 3 other IP addresses.