ek9995.win - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

ek9995.win

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:d868πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3034::6815:2d9dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.45.157Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.216.104πŸ‡ΊπŸ‡Έ Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NScorey.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c18πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcorey.ns.cloudflare.com
A2803:f800:50::6ca2:c318πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcorey.ns.cloudflare.com
A2a06:98c1:50::ac40:2318πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRcorey.ns.cloudflare.com
A108.162.195.24πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcorey.ns.cloudflare.com
A162.159.44.24Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcorey.ns.cloudflare.com
A172.64.35.24πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcorey.ns.cloudflare.com
NSmalavika.ns.cloudflare.com
A2606:4700:50::a29f:26a5πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmalavika.ns.cloudflare.com
A2803:f800:50::6ca2:c2a5πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmalavika.ns.cloudflare.com
A2a06:98c1:50::ac40:22a5πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmalavika.ns.cloudflare.com
A108.162.194.165πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmalavika.ns.cloudflare.com
A162.159.38.165Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmalavika.ns.cloudflare.com
A172.64.34.165πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmalavika.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.45.157, 172.67.216.104
IPv6 hints2606:4700:3031::ac43:d868, 2606:4700:3034::6815:2d9d
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=76, name=cloudflare-ech.com
SOAcorey.ns.cloudflare.comdns@cloudflare.com serial=2411938202

win

DNSSECπŸ”’ Signed (DS record present)
NSns1.dns.nic.win ⭐
NSa.nic.win
NSb.nic.win
NSc.nic.win
NSns2.dns.nic.win
NSns3.dns.nic.win
SOAns1.dns.nic.winadmin@tldns.godaddy serial=1786826414
⚠️ On DNS blocklist: spam-tlds

Same first word

DNS History

6 records (6 active, 0 former)

NScorey.ns.cloudflare.commalavika.ns.cloudflare.comA104.21.45.157172.67.216.1042606:4700:3031::ac43:d8682606:4700:3034::6815:2d9d
●NScorey.ns.cloudflare.com2026-08-13 β†’ 2026-08-15 Β· 2 obs
● 2026-08-13 05:54:56
● 2026-08-15 21:05:00
●NSmalavika.ns.cloudflare.com2026-08-13 β†’ 2026-08-15 Β· 2 obs
● 2026-08-13 05:54:56
● 2026-08-15 21:05:00
●A104.21.45.1572026-08-13 β†’ 2026-08-15 Β· 2 obs
● 2026-08-13 05:54:56
● 2026-08-15 21:05:00
●A172.67.216.1042026-08-13 β†’ 2026-08-15 Β· 2 obs
● 2026-08-13 05:54:56
● 2026-08-15 21:05:00
●A2606:4700:3031::ac43:d8682026-08-13 β†’ 2026-08-15 Β· 2 obs
● 2026-08-13 05:54:56
● 2026-08-15 21:05:00
●A2606:4700:3034::6815:2d9d2026-08-13 β†’ 2026-08-15 Β· 2 obs
● 2026-08-13 05:54:56
● 2026-08-15 21:05:00

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
winc.nic.win, ns1.dns.nic.win, a.nic.win, ns3.dns.nic.win...12 records
ek9995.wincorey.ns.cloudflare.com, malavika.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.34.165

NS records: corey.ns.cloudflare.com, malavika.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ek9995.win (unsigned zone)

⏱️ Timing

Total: 407ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.45.157, 172.67.216.104
AAAA22606:4700:3034::6815:2d9d, 2606:4700:3031::ac43:d868
NS2corey.ns.cloudflare.com, malavika.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1corey.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (ns3.dns.nic.win, ns2.dns.nic.win, ns1.dns.nic.win...)

Analysis

IP Addresses

ek9995.win directs to four IP numbers, which are 104.21.45.157, 172.67.216.104, 2606:4700:3031::ac43:d868 and 2606:4700:3034::6815:2d9d.

Two other host names, along with cyberguard.nl, www.hsjzw.net and bluedesk.uk, also share IP numbers with ek9995.win.

Name Servers

ek9995.win is served by two delegated name servers, corey.ns.cloudflare.com and malavika.ns.cloudflare.com.

ek9995.win shares its NS records with other domains, for example da777.pro, 7u78.win, bagh88.win and two others.

At least some of ek9995.win's name servers are shared with other domains, for example ujws.shop, jingcaizucaishouye.com.cn, hangdianyingzaixianguankanmianfeiwanzhengban.com.cn and two more.

These name servers tend to be deployed in combination with the name servers alberto.ns.cloudflare.com and monika.ns.cloudflare.com.

DNS names with 6 IP addresses:

corey.ns.cloudflare.com carries IP addresses 108.162.195.24, 162.159.44.24 and 172.64.35.24, with 3 other addresses beyond those.

malavika.ns.cloudflare.com carries IP addresses 108.162.194.165, 162.159.38.165 and 172.64.34.165, with 3 other addresses beyond those.