evilcode.win - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

evilcode.win

DNSSEC⚠️ Not signed
A2606:4700:3034::6815:4613🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:d9ee🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.70.19Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.217.238🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSbowen.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c53🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbowen.ns.cloudflare.com
A2803:f800:50::6ca2:c353🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbowen.ns.cloudflare.com
A2a06:98c1:50::ac40:2353🇺🇸 Cloudflare2a06:98c1:50::/45
PTRbowen.ns.cloudflare.com
A108.162.195.83🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A162.159.44.83Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.35.83🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSnucum.ns.cloudflare.com
A2606:4700:50::a29f:2691🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnucum.ns.cloudflare.com
A2803:f800:50::6ca2:c291🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnucum.ns.cloudflare.com
A2a06:98c1:50::ac40:2291🇺🇸 Cloudflare2a06:98c1:50::/45
PTRnucum.ns.cloudflare.com
A108.162.194.145🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnucum.ns.cloudflare.com
A162.159.38.145Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnucum.ns.cloudflare.com
A172.64.34.145🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnucum.ns.cloudflare.com
MXmx2.zoho.eu ⭐
A185.230.214.166🇳🇱 ZOHO-EU185.230.214.0/23
MXmx3.zoho.eu(20)
A185.230.212.166🇳🇱 ZOHO-EU185.230.212.0/23
MXmx.zoho.eu(50)
A185.230.212.166🇳🇱 ZOHO-EU185.230.212.0/23
A185.230.214.166🇳🇱 ZOHO-EU185.230.214.0/23
TXTv=spf1 include:zoho.eu ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.70.19, 172.67.217.238
IPv6 hints2606:4700:3034::6815:4613, 2606:4700:3037::ac43:d9ee
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=244, name=cloudflare-ech.com
SOAbowen.ns.cloudflare.comdns@cloudflare.com serial=2415898619

win

DNSSEC🔒 Signed (DS record present)
NSns1.dns.nic.win ⭐
NSa.nic.win
NSb.nic.win
NSc.nic.win
NSns2.dns.nic.win
NSns3.dns.nic.win
SOAns1.dns.nic.winadmin@tldns.godaddy serial=1791157150
⚠️ On DNS blocklist: spam-tlds

Same first word

evilcode.club
evilcode.uber.space
evilcode.uk
evilcode.workers.dev
evilcode.cn
evilcode.web.id
evilcode.net
evilcode.xyz
evilcode.com
evilcode.win

Similar names

dolcevie.com
codelive.dev
devcelio.me
develoci.com.br
livecode.academy
livecode.icu
veilcode.pages.dev
velocedi.com
livecode.eu
velocide.com
livecode.za.com
decolive.com
codelive.tech
codelive.pages.dev
codeveil.com
videolec.com
devcelio.email
delvoice.com
vleicode.com
livecode.info
livecode.co.kr
livecode.com
lovecide.synology.me
livecode.boston
veilcode.studio
codelive.com
livecode.community
livecode.co.za
evlideco.com
decolive.ir
livecode.solutions
vedicole.workers.dev
livecode.top
livecode.net
codelive.ee
livecode.world
livecode.com.br
devcelio.page
voiceled.com
idlecove.com
clevideo.com
livecode.mobi
codelive.top
covedeli.com
codelive.store
livecode.cc
codelive.agency
codelive.jp
livecode.in
codelive.de
devcelio.store
livedeco.com
livecode.nl
livecode.pages.dev
covedeli.net
livecode.ca
cdeolive.com
codelive.cn
iloveedc.com
livecode.studio
levicode.com
decolive.com.ar
develoci.com
livedeco.es
codelive.co.kr
velicode.com
codelive.org
codelive.site
livecode.github.io
decovile.com
codeevil.xyz
livecoed.com
decoveil.com
livecode.org
codelive.xyz
livecode.co.uk
livecode.au
livedeco.it
develico.com
livecode.tech
livedeco.fr
livecode.de
livecode.pro
coedlive.com
lovedice.com
livedeco.de
livecode.ae
vecoedil.ch
lovedice.de
livecode.radio.fm
livedeco.be
livecode.wiki
livecode.guru
livecode.nyc
livecode.tv
livecode.it
veilcode.xyz
codeveil.org
livecode.ru

Previous names

everygamecasino.win
everylittlewin.win
everyones.win
everythingeagles.win
everythingg.win
everythingisawesome.win
everytossplay.win
everywherehome.win
evesweetai.win
evethllax.win
evg-nas.win
evi88.win
evicka.win
evidentalamo.win
evidentamber.win
evieapps.win
evil-genius.win
evil-mc.win
evil-site.win
evilavenger35.win

Next names

evilcorp.win
evildomain.win
evilfox.win
evillair.win
evilmail.win
evilpentathief.win
evilpig.win
evilpony.win
evilrobots.win
evilscp.win
evilsinger.win
eviltoto.win
eviltwinx.win
evilunraid.win
evilwillnot.win
evilzabanya.win
evimoney.win
evine.win
evion.win
evip2s.win

DNS History

9 records (9 active, 0 former)

NSbowen.ns.cloudflare.comnucum.ns.cloudflare.comMXmx.zoho.eumx2.zoho.eumx3.zoho.euA104.21.70.19172.67.217.2382606:4700:3034::6815:46132606:4700:3037::ac43:d9ee
●NSbowen.ns.cloudflare.com2026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●NSnucum.ns.cloudflare.com2026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●MXmx.zoho.eu2026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●MXmx2.zoho.eu2026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●MXmx3.zoho.eu2026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●A104.21.70.192026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●A172.67.217.2382026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●A2606:4700:3034::6815:46132026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14
●A2606:4700:3037::ac43:d9ee2026-09-26 → 2026-10-05 · 2 obs
● 2026-09-26 08:57:24
● 2026-10-05 00:13:14

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
winns1.dns.nic.win, ns3.dns.nic.win, b.nic.win, a.nic.win...-
evilcode.winbowen.ns.cloudflare.com, nucum.ns.cloudflare.com-

✅ Authoritative Response

Server:162.159.44.83

NS records: bowen.ns.cloudflare.com, nucum.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for evilcode.win (unsigned zone)

⏱️ Timing

Total: 482ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.217.238, 104.21.70.19
AAAA22606:4700:3037::ac43:d9ee, 2606:4700:3034::6815:4613
NS2bowen.ns.cloudflare.com, nucum.ns.cloudflare.com
MX3mx.zoho.eu (pri: 10), mx2.zoho.eu (pri: 20)...
TXT1v=spf1 include:zoho.eu ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1bowen.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

evilcode.win resolves to four IP addresses: 104.21.70.19, 172.67.217.238, 2606:4700:3034::6815:4613 and 2606:4700:3037::ac43:d9ee.

Additional host names — shreeruh.com, mashnlearn.com, dewi11jpex.site and two others — share IP numbers with evilcode.win.

Name Servers

evilcode.win is served by two delegated name servers, bowen.ns.cloudflare.com and nucum.ns.cloudflare.com.

evilcode.win shares its name server setup with other domains, including prestigecasino-uk.co.uk, x951.buzz, 8310w.pages.dev and two others.

evilcode.win has at least partial name server overlap with other domains, such as dinerolistoglobal.com, storebeeper.com, gwpmozambique.org and two others.

It is common to see these name servers used together with name servers lloyd.ns.cloudflare.com and thaddeus.ns.cloudflare.com.

Host names with 6 IP numbers:

bowen.ns.cloudflare.com carries IP addresses 108.162.195.83, 162.159.44.83 and 172.64.35.83, with 3 other addresses beyond those.

nucum.ns.cloudflare.com carries IP addresses 108.162.194.145, 162.159.38.145 and 172.64.34.145, with 3 other addresses beyond those.

Mail Servers

evilcode.win has three mail servers: mx2.zoho.eu, mx3.zoho.eu and mx.zoho.eu.

evilcode.win shares mail servers — at least in part — with other domains, including ngly.de, timzar.es, genelous.com and two others.

Host names with two IP numbers:

mx.zoho.eu maps to two IP addresses — 185.230.212.166 and 185.230.214.166.

Host names pointing to a single IP address:

mx2.zoho.eu points to the IP address 185.230.214.166.

mx3.zoho.eu points to the IP address 185.230.212.166.

These two host names — mx.zoho.eu and mx3.zoho.eu — each point to 185.230.212.166 IP addresses.

These two host names — mx.zoho.eu and mx2.zoho.eu — each point to 185.230.214.166 IP addresses.