`est1887.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3036::6815:2923^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:9f83^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.41.35^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.159.131^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bonnie.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bonnie.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bonnie.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bonnie.ns.cloudflare.com`
		A	108.162.192.76^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bonnie.ns.cloudflare.com`
		A	172.64.32.76^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bonnie.ns.cloudflare.com`
		A	173.245.58.76^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bonnie.ns.cloudflare.com`
NS	`hank.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b74^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hank.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c174^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`hank.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2174^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`hank.ns.cloudflare.com`
		A	108.162.193.116^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hank.ns.cloudflare.com`
		A	172.64.33.116^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hank.ns.cloudflare.com`
		A	173.245.59.116^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hank.ns.cloudflare.com`
MX	`localhost` ⭐
TXT	`v=spf1 -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.41.35, 172.67.159.131
		IPv6 hints	2606:4700:3036::6815:2923, 2606:4700:3036::ac43:9f83
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=251, name=cloudflare-ech.com
SOA	`bonnie.ns.cloudflare.com`dns@cloudflare.com serial=2410916051

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786686234

WOT: SUSPICIOUS (60/100)

Same first word

est1887.com

DNS History

20 records (7 active, 13 former)

●NSbonnie.ns.cloudflare.com2026-08-14 → 2026-08-14 · 2 obs

○ 2026-06-22 11:23:02
● 2026-08-14 05:52:46

●NShank.ns.cloudflare.com2026-08-14 → 2026-08-14 · 2 obs

○ 2026-06-22 11:23:02
● 2026-08-14 05:52:46

○NSns-us.1and1-dns.com2015-08-06 → 2017-08-09 · 4 obs

● 2015-08-06 09:31:30
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○NSns-us.1and1-dns.de2015-08-06 → 2017-08-09 · 4 obs

● 2015-08-06 09:31:30
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○NSns-us.1and1-dns.org2015-08-06 → 2017-08-09 · 4 obs

● 2015-08-06 09:31:30
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○NSns-us.1and1-dns.us2015-08-06 → 2017-08-09 · 4 obs

● 2015-08-06 09:31:30
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○NSns1.sedoparking.com2026-06-22 → 2026-06-22 · 3 obs

○ 2017-08-09 12:12:10
● 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○NSns2.sedoparking.com2026-06-22 → 2026-06-22 · 3 obs

○ 2017-08-09 12:12:10
● 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

●MXlocalhost2026-06-22 → 2026-08-14 · 3 obs

○ 2017-08-09 12:12:10
● 2026-06-22 11:23:02
● 2026-08-14 05:52:46

○MXmx00.1and1.com2015-08-06 → 2017-08-09 · 4 obs

● 2015-08-06 09:31:30
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○MXmx01.1and1.com2015-08-06 → 2017-08-09 · 4 obs

● 2015-08-06 09:31:30
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

●A104.21.41.352026-08-14 → 2026-08-14 · 2 obs

○ 2026-06-22 11:23:02
● 2026-08-14 05:52:46

○A108.175.10.1582015-08-06 → 2016-03-18 · 4 obs

● 2015-08-06 09:31:30
● 2016-03-18 17:54:58
○ 2016-07-17 18:20:02
○ 2026-08-14 05:52:46

●A172.67.159.1312026-08-14 → 2026-08-14 · 2 obs

○ 2026-06-22 11:23:02
● 2026-08-14 05:52:46

○A192.195.77.1162016-07-17 → 2017-08-09 · 5 obs

○ 2016-03-18 17:54:58
● 2016-07-17 18:20:02
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

●A2606:4700:3036::6815:29232026-08-14 → 2026-08-14 · 2 obs

○ 2026-06-22 11:23:02
● 2026-08-14 05:52:46

●A2606:4700:3036::ac43:9f832026-08-14 → 2026-08-14 · 2 obs

○ 2026-06-22 11:23:02
● 2026-08-14 05:52:46

○A2607:f1c0:1000:600c:414a:7014:e696:02015-08-06 → 2016-03-18 · 4 obs

● 2015-08-06 09:31:30
● 2016-03-18 17:54:58
○ 2016-07-17 18:20:02
○ 2026-08-14 05:52:46

○A2607:f1c0:1000:600c:6312:5747:76d3:c0142016-07-17 → 2017-08-09 · 5 obs

○ 2016-03-18 17:54:58
● 2016-07-17 18:20:02
● 2017-08-09 12:12:10
○ 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

○A64.190.63.2222026-06-22 → 2026-06-22 · 3 obs

○ 2017-08-09 12:12:10
● 2026-06-22 11:23:02
○ 2026-08-14 05:52:46

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
est1887.com	hank.ns.cloudflare.com, bonnie.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.76

NS records: hank.ns.cloudflare.com, bonnie.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for est1887.com (unsigned zone)

⏱️ Timing

Total: 222ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.41.35, 172.67.159.131`
AAAA	2	`2606:4700:3036::ac43:9f83, 2606:4700:3036::6815:2923`
NS	2	`bonnie.ns.cloudflare.com, hank.ns.cloudflare.com`
MX	1	`localhost (pri: 0)`
TXT	1	`v=spf1 -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bonnie.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (hank.ns.cloudflare.com, hank.ns.cloudflare.com, hank.ns.cloudflare.com...)

Analysis

IP Addresses

est1887.com points to the four IP addresses 104.21.41.35, 172.67.159.131, 2606:4700:3036::6815:2923 and 2606:4700:3036::ac43:9f83.

visanhanh.net, senegal-camions.com, pceesoft.com plus two other host names have IP numbers in common with est1887.com.

Name Servers

DNS delegation for est1887.com points to two name servers: bonnie.ns.cloudflare.com and hank.ns.cloudflare.com.

The name server configuration of est1887.com is shared with other domains, for instance nemation.sg, fm.my, stefansface.com and two others.

At least some of est1887.com's name servers are shared with other domains, for example seyeye16.com, glhair.com, youngautosales.com and two more.

These name servers tend to be deployed in combination with the name servers aragorn.ns.cloudflare.com and ivy.ns.cloudflare.com.

Hosts with 6 IP addresses each:

bonnie.ns.cloudflare.com has IP addresses 108.162.192.76, 172.64.32.76 and 173.245.58.76, plus 3 other.

hank.ns.cloudflare.com has IP addresses 108.162.193.116, 172.64.33.116 and 173.245.59.116, plus 3 other.

Mail Servers

est1887.com uses one mail server — localhost.

The mail server setup of est1887.com matches that of other domains such as ottobaer.de, hittheroad.info, ghatreh.filmgardi.com and two others.

est1887.com - robtex.com

est1887.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`est1887.com`

`com`