bleeding.dev - dns.ninja

๐Ÿ›ก๏ธDomain Reputation CheckBlocklist, phishing & malware statusโ†’

bleeding.dev

DNSSECโš ๏ธ Not signed
A2606:4700:3032::6815:857๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A2606:4700:3032::ac43:8b0e๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A104.21.8.87Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A172.67.139.14๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
NSthomas.ns.cloudflare.com โญ
A2606:4700:58::adf5:3bee๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRthomas.ns.cloudflare.com
A2803:f800:50::6ca2:c1ee๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRthomas.ns.cloudflare.com
A2a06:98c1:50::ac40:21ee๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRthomas.ns.cloudflare.com
A108.162.193.238๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRthomas.ns.cloudflare.com
A172.64.33.238๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRthomas.ns.cloudflare.com
A173.245.59.238๐Ÿ‡บ๐Ÿ‡ธ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRthomas.ns.cloudflare.com
NSzita.ns.cloudflare.com
A2606:4700:50::adf5:3af3๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
A2803:f800:50::6ca2:c0f3๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRzita.ns.cloudflare.com
A2a06:98c1:50::ac40:20f3๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRzita.ns.cloudflare.com
A108.162.192.243๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
A172.64.32.243๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
A173.245.58.243๐Ÿ‡บ๐Ÿ‡ธ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
MXaspmx.l.google.com โญ
A2607:f8b0:4004:c07::1a๐Ÿ‡บ๐Ÿ‡ธ Google2607:f8b0:4004::/48
PTRbc-in-f26.1e100.net
A172.253.63.27๐Ÿ‡บ๐Ÿ‡ธ Google172.253.63.0/24
PTRbi-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c14::1a๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A192.178.234.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.0.0/15
PTRncsclj-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1a๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f26.1e100.net
A172.253.116.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1a๐Ÿ‡ฌ๐Ÿ‡ง Google2a00:1450:4009::/48
PTRyulhrs-in-f26.1e100.net
A192.178.223.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.223.0/24
PTRyulhrs-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1a๐Ÿ‡ง๐Ÿ‡ช Google2a00:1450:400c::/48
PTRyubrupd-in-f26.1e100.net
A172.253.157.27๐Ÿ‡บ๐Ÿ‡ธ Google172.253.0.0/16
PTRyubrupd-in-f27.1e100.net
TXTv=spf1 include:_spf.google.com ~all
HTTPSHTTP/3, HTTP/2 โœ“ hints match
IPv4 hints104.21.8.87, 172.67.139.14
IPv6 hints2606:4700:3032::6815:857, 2606:4700:3032::ac43:8b0e
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=49, name=cloudflare-ech.com
SOAthomas.ns.cloudflare.comdns@cloudflare.com serial=2416555746

dev

DNSSEC๐Ÿ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com โญ
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
๐Ÿ”’ HSTS Preload (+subdomains)

Subdomains

Same first word

Similar names

Previous names

Next names

DNS History

16 records (11 active, 5 former)

NSthomas.ns.cloudflare.comzita.ns.cloudflare.comcuritiba.ns.porkbun.comfortaleza.ns.porkbun.commaceio.ns.porkbun.comsalvador.ns.porkbun.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA104.21.8.87172.67.139.142606:4700:3032::6815:8572606:4700:3032::ac43:8b0e103.169.142.0
โ—‹NScuritiba.ns.porkbun.com2026-08-31 โ†’ 2026-08-31 ยท 3 obs
โ— 2026-08-31 02:52:44
โ—‹ 2026-09-23 01:12:30
โ—‹ 2026-10-06 19:51:00
โ—‹NSfortaleza.ns.porkbun.com2026-08-31 โ†’ 2026-08-31 ยท 3 obs
โ— 2026-08-31 02:52:44
โ—‹ 2026-09-23 01:12:30
โ—‹ 2026-10-06 19:51:00
โ—‹NSmaceio.ns.porkbun.com2026-08-31 โ†’ 2026-08-31 ยท 3 obs
โ— 2026-08-31 02:52:44
โ—‹ 2026-09-23 01:12:30
โ—‹ 2026-10-06 19:51:00
โ—‹NSsalvador.ns.porkbun.com2026-08-31 โ†’ 2026-08-31 ยท 3 obs
โ— 2026-08-31 02:52:44
โ—‹ 2026-09-23 01:12:30
โ—‹ 2026-10-06 19:51:00
โ—NSthomas.ns.cloudflare.com2026-09-23 โ†’ 2026-10-06 ยท 3 obs
โ—‹ 2026-08-31 02:52:44
โ— 2026-09-23 01:12:30
โ— 2026-10-06 19:51:00
โ—NSzita.ns.cloudflare.com2026-09-23 โ†’ 2026-10-06 ยท 3 obs
โ—‹ 2026-08-31 02:52:44
โ— 2026-09-23 01:12:30
โ— 2026-10-06 19:51:00
โ—MXalt1.aspmx.l.google.com2026-08-31 โ†’ 2026-10-06 ยท 2 obs
โ— 2026-08-31 02:52:44
โ— 2026-10-06 19:51:00
โ—MXalt2.aspmx.l.google.com2026-08-31 โ†’ 2026-10-06 ยท 2 obs
โ— 2026-08-31 02:52:44
โ— 2026-10-06 19:51:00
โ—MXalt3.aspmx.l.google.com2026-08-31 โ†’ 2026-10-06 ยท 2 obs
โ— 2026-08-31 02:52:44
โ— 2026-10-06 19:51:00
โ—MXalt4.aspmx.l.google.com2026-08-31 โ†’ 2026-10-06 ยท 2 obs
โ— 2026-08-31 02:52:44
โ— 2026-10-06 19:51:00
โ—MXaspmx.l.google.com2026-08-31 โ†’ 2026-10-06 ยท 2 obs
โ— 2026-08-31 02:52:44
โ— 2026-10-06 19:51:00
โ—‹A103.169.142.02026-08-31 โ†’ 2026-08-31 ยท 3 obs
โ— 2026-08-31 02:52:44
โ—‹ 2026-09-23 01:12:30
โ—‹ 2026-10-06 19:51:00
โ—A104.21.8.872026-09-23 โ†’ 2026-10-06 ยท 3 obs
โ—‹ 2026-08-31 02:52:44
โ— 2026-09-23 01:12:30
โ— 2026-10-06 19:51:00
โ—A172.67.139.142026-09-23 โ†’ 2026-10-06 ยท 3 obs
โ—‹ 2026-08-31 02:52:44
โ— 2026-09-23 01:12:30
โ— 2026-10-06 19:51:00
โ—A2606:4700:3032::6815:8572026-09-23 โ†’ 2026-10-06 ยท 3 obs
โ—‹ 2026-08-31 02:52:44
โ— 2026-09-23 01:12:30
โ— 2026-10-06 19:51:00
โ—A2606:4700:3032::ac43:8b0e2026-09-23 โ†’ 2026-10-06 ยท 3 obs
โ—‹ 2026-08-31 02:52:44
โ— 2026-09-23 01:12:30
โ— 2026-10-06 19:51:00

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
bleeding.devthomas.ns.cloudflare.com, zita.ns.cloudflare.com-

โœ… Authoritative Response

Server:172.64.32.243

NS records: thomas.ns.cloudflare.com, zita.ns.cloudflare.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for bleeding.dev (unsigned zone)

โฑ๏ธ Timing

Total: 688ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A2104.21.8.87, 172.67.139.14
AAAA22606:4700:3032::ac43:8b0e, 2606:4700:3032::6815:857
NS2thomas.ns.cloudflare.com, zita.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT1v=spf1 include:_spf.google.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1thomas.ns.cloudflare.com dns.cloudflare.

Analysis

Hierarchy

bleeding.dev is the parent domain of ontos-stage-commerce-customer-context.bleeding.dev, ontos-stage-price-group-catalog.bleeding.dev, ontos-stage-storefront-registry.bleeding.dev and ontos-stage-payment-term-catalog.bleeding.dev.

IP Addresses

bleeding.dev has four IP addresses: 104.21.8.87, 172.67.139.14, 2606:4700:3032::6815:857 and 2606:4700:3032::ac43:8b0e.

Two other host names, along with 7cc294eaf12f.7cc294eaf12f.7cc294eaf12f.7cc294eaf12f.7cc294eaf12f.7cc294eaf12f.jasonweiss.com, exploresimple.org and irnpost.net, also share IP numbers with bleeding.dev.

Name Servers

bleeding.dev uses two name servers for its delegation: thomas.ns.cloudflare.com and zita.ns.cloudflare.com.

bleeding.dev shares its NS records with other domains, for example phonesoft.ru, marlospomin.com, tariqalagha02.workers.dev and two others.

bleeding.dev shares at least some of its name servers with other domains, including o2u.io, si-power.com.tw, 88vip345.com and two others.

These name servers are frequently seen alongside the name servers conrad.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname thomas.ns.cloudflare.com directs to 108.162.193.238, 172.64.33.238 and 173.245.59.238 along with 3 other IP addresses.

Hostname zita.ns.cloudflare.com directs to 108.162.192.243, 172.64.32.243 and 173.245.58.243 along with 3 other IP addresses.

Mail Servers

Mail for bleeding.dev is handled by five mail servers, namely aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between bleeding.dev and other domains, including bestworkers.biz, rumberostudios.com, ordwayhealthmart.com and two others.

alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com are mail servers that frequently appear together with these mail servers.

Host names that have two IP addresses:

aspmx.l.google.com directs traffic to 172.253.63.27 and 2607:f8b0:4004:c07::1a.

alt1.aspmx.l.google.com directs traffic to 192.178.234.26 and 2800:3f0:4003:c14::1a.

alt2.aspmx.l.google.com directs traffic to 172.253.116.26 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com directs traffic to 192.178.223.26 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com directs traffic to 172.253.157.27 and 2a00:1450:400c:c23::1a.