`covid389.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::ac43:d3b3^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:179c^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.23.156^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.211.179^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`rob.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b8c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c18c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rob.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:218c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rob.ns.cloudflare.com`
		A	108.162.193.140^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
		A	172.64.33.140^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
		A	173.245.59.140^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
NS	`ulla.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ulla.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ulla.ns.cloudflare.com`
		A	108.162.192.233^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	172.64.32.233^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	173.245.58.233^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.23.156, 172.67.211.179
		IPv6 hints	2606:4700:3035::ac43:d3b3, 2606:4700:3037::6815:179c
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=148, name=cloudflare-ech.com
SOA	`rob.ns.cloudflare.com`dns@cloudflare.com serial=2402231820

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778575811

⚠️ On DNS blocklist: tif

Same first word

covid389.com

DNS History

10 records (6 active, 4 former)

●NSrob.ns.cloudflare.com2026-03-18 → 2026-05-12 · 2 obs

● 2026-03-18 19:42:56
● 2026-05-12 09:03:18

●NSulla.ns.cloudflare.com2026-03-18 → 2026-05-12 · 2 obs

● 2026-03-18 19:42:56
● 2026-05-12 09:03:18

●A104.21.23.1562026-03-18 → 2026-05-12 · 5 obs

● 2026-03-18 19:42:56
● 2026-03-21 05:51:56
○ 2026-03-29 08:41:24
● 2026-04-03 20:14:08
● 2026-05-12 09:03:18

●A172.67.211.1792026-03-18 → 2026-05-12 · 5 obs

● 2026-03-18 19:42:56
● 2026-03-21 05:51:56
○ 2026-03-29 08:41:24
● 2026-04-03 20:14:08
● 2026-05-12 09:03:18

○A188.114.96.02026-03-29 → 2026-03-29 · 4 obs

○ 2026-03-21 05:51:56
● 2026-03-29 08:41:24
○ 2026-04-03 20:14:08
○ 2026-05-12 09:03:18

○A188.114.97.02026-03-29 → 2026-03-29 · 4 obs

○ 2026-03-21 05:51:56
● 2026-03-29 08:41:24
○ 2026-04-03 20:14:08
○ 2026-05-12 09:03:18

●A2606:4700:3035::ac43:d3b32026-03-18 → 2026-05-12 · 5 obs

● 2026-03-18 19:42:56
● 2026-03-21 05:51:56
○ 2026-03-29 08:41:24
● 2026-04-03 20:14:08
● 2026-05-12 09:03:18

●A2606:4700:3037::6815:179c2026-03-18 → 2026-05-12 · 5 obs

● 2026-03-18 19:42:56
● 2026-03-21 05:51:56
○ 2026-03-29 08:41:24
● 2026-04-03 20:14:08
● 2026-05-12 09:03:18

○A2a06:98c1:3120::2026-03-29 → 2026-03-29 · 4 obs

○ 2026-03-21 05:51:56
● 2026-03-29 08:41:24
○ 2026-04-03 20:14:08
○ 2026-05-12 09:03:18

○A2a06:98c1:3121::2026-03-29 → 2026-03-29 · 4 obs

○ 2026-03-21 05:51:56
● 2026-03-29 08:41:24
○ 2026-04-03 20:14:08
○ 2026-05-12 09:03:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
covid389.com	rob.ns.cloudflare.com, ulla.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.140

NS records: rob.ns.cloudflare.com, ulla.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for covid389.com (unsigned zone)

⏱️ Timing

Total: 547ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.211.179, 104.21.23.156`
AAAA	2	`2606:4700:3035::ac43:d3b3, 2606:4700:3037::6815:179c`
NS	2	`rob.ns.cloudflare.com, ulla.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`rob.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (rob.ns.cloudflare.com, rob.ns.cloudflare.com, rob.ns.cloudflare.com...)

Analysis

IP Addresses

covid389.com resolves to four IPs: 2606:4700:3035::ac43:d3b3, 2606:4700:3037::6815:179c, 104.21.23.156 and 172.67.211.179.

Other host names, for instance mta-sts.rozalimas.lt, myvianne.com, tappara.info, doxhost.com and www.kwjfejtnfuxlj.space share IP numbers with covid389.com.

Name Servers

covid389.com has two name servers: rob.ns.cloudflare.com and ulla.ns.cloudflare.com.

covid389.com shares the same name server setup as other domains, for example 98c02c.xyz, sgvapeoutlet8.com, zamgame.com, satriolangit.com and yeetlab.net.

covid389.com shares some name servers with other domains, for example bec88.day, 621316.com, algopacks.com, 452tapgn.de and regantree.com.

These name servers are often used together with clay.ns.cloudflare.com, etienne.ns.cloudflare.com and isla.ns.cloudflare.com.

Host names with six IP numbers: rob.ns.cloudflare.com points to: 2606:4700:58::adf5:3b8c, 2803:f800:50::6ca2:c18c, 2a06:98c1:50::ac40:218c, 108.162.193.140, 172.64.33.140 and 173.245.59.140; ulla.ns.cloudflare.com points to: 2606:4700:50::adf5:3ae9, 2803:f800:50::6ca2:c0e9, 2a06:98c1:50::ac40:20e9, 108.162.192.233, 172.64.32.233 and 173.245.58.233.

covid389.com - robtex.com

covid389.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`covid389.com`

`com`