unexpectedcookies.com - robtex.com

unexpectedcookies.com

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:5c40🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:bb9e🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.92.64Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.187.158🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSanita.ns.cloudflare.com ⭐
A2606:4700:50::a29f:2652🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanita.ns.cloudflare.com
A2803:f800:50::6ca2:c252🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRanita.ns.cloudflare.com
A2a06:98c1:50::ac40:2252🇺🇸 Cloudflare2a06:98c1:50::/45
PTRanita.ns.cloudflare.com
A108.162.194.82🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanita.ns.cloudflare.com
A162.159.38.82Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanita.ns.cloudflare.com
A172.64.34.82🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanita.ns.cloudflare.com
NScody.ns.cloudflare.com
A2606:4700:58::adf5:3b6b🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcody.ns.cloudflare.com
A2803:f800:50::6ca2:c16b🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcody.ns.cloudflare.com
A2a06:98c1:50::ac40:216b🇺🇸 Cloudflare2a06:98c1:50::/45
PTRcody.ns.cloudflare.com
A108.162.193.107🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcody.ns.cloudflare.com
A172.64.33.107🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcody.ns.cloudflare.com
A173.245.59.107🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcody.ns.cloudflare.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c0b::1b🇺🇸 Google2607:f8b0:4004::/48
PTRbj-in-f27.1e100.net
A192.178.155.27🇺🇸 Google192.178.155.0/24
PTRyuiadrs-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1b🇨🇱 Google2800:3f0:4003::/48
A108.177.123.26🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:4013:c1e::1b🇳🇱 Google2a00:1450:4013::/48
PTRyugrqzs-in-f27.1e100.net
A192.178.213.26🇺🇸 Google192.178.213.0/24
PTRyugrqzs-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b🇬🇧 Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.26🇺🇸 Google192.178.223.0/24
PTRyulhrs-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c00::1b🇧🇪 Google2a00:1450:400c::/48
PTRws-in-f27.1e100.net
PTRws-in-x1b.1e100.net
A173.194.76.27🇺🇸 Google173.194.76.0/24
PTRws-in-f27.1e100.net
TXTgoogle-site-verification=ZDIfvoUI83eGvoPfl1k8JAjS4xGDkyJqQbq8w-tLw_w
TXTv=spf1 include:_spf.google.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.92.64, 172.67.187.158
IPv6 hints2606:4700:3031::6815:5c40, 2606:4700:3037::ac43:bb9e
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=194, name=cloudflare-ech.com
SOAanita.ns.cloudflare.comdns@cloudflare.com serial=2401164261

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1778878196

Same first word

unexpectedcookies.com

DNS History

15 records (11 active, 4 former)

NSanita.ns.cloudflare.comcody.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA104.21.92.64172.67.187.1582606:4700:3031::6815:5c402606:4700:3037::ac43:bb9e188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSanita.ns.cloudflare.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●NScody.ns.cloudflare.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●MXalt1.aspmx.l.google.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●MXalt2.aspmx.l.google.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●MXalt3.aspmx.l.google.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●MXalt4.aspmx.l.google.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●MXaspmx.l.google.com2026-03-24 → 2026-05-15 · 2 obs
● 2026-03-24 18:04:08
● 2026-05-15 20:51:54
●A104.21.92.642026-03-24 → 2026-05-15 · 8 obs
● 2026-03-24 18:04:08
○ 2026-03-31 13:03:46
○ 2026-04-07 13:01:38
● 2026-04-12 16:29:04
○ 2026-04-21 13:05:48
○ 2026-05-12 13:03:00
● 2026-05-15 20:51:52
● 2026-05-15 20:51:54
●A172.67.187.1582026-03-24 → 2026-05-15 · 8 obs
● 2026-03-24 18:04:08
○ 2026-03-31 13:03:46
○ 2026-04-07 13:01:38
● 2026-04-12 16:29:04
○ 2026-04-21 13:05:48
○ 2026-05-12 13:03:00
● 2026-05-15 20:51:52
● 2026-05-15 20:51:54
○A188.114.96.02026-03-31 → 2026-05-12 · 8 obs
○ 2026-03-24 18:04:08
● 2026-03-31 13:03:46
● 2026-04-07 13:01:38
○ 2026-04-12 16:29:04
● 2026-04-21 13:05:48
● 2026-05-12 13:03:00
○ 2026-05-15 20:51:52
○ 2026-05-15 20:51:54
○A188.114.97.02026-03-31 → 2026-05-12 · 8 obs
○ 2026-03-24 18:04:08
● 2026-03-31 13:03:46
● 2026-04-07 13:01:38
○ 2026-04-12 16:29:04
● 2026-04-21 13:05:48
● 2026-05-12 13:03:00
○ 2026-05-15 20:51:52
○ 2026-05-15 20:51:54
●A2606:4700:3031::6815:5c402026-03-24 → 2026-05-15 · 8 obs
● 2026-03-24 18:04:08
○ 2026-03-31 13:03:46
○ 2026-04-07 13:01:38
● 2026-04-12 16:29:04
○ 2026-04-21 13:05:48
○ 2026-05-12 13:03:00
● 2026-05-15 20:51:52
● 2026-05-15 20:51:54
●A2606:4700:3037::ac43:bb9e2026-03-24 → 2026-05-15 · 8 obs
● 2026-03-24 18:04:08
○ 2026-03-31 13:03:46
○ 2026-04-07 13:01:38
● 2026-04-12 16:29:04
○ 2026-04-21 13:05:48
○ 2026-05-12 13:03:00
● 2026-05-15 20:51:52
● 2026-05-15 20:51:54
○A2a06:98c1:3120::2026-03-31 → 2026-05-12 · 8 obs
○ 2026-03-24 18:04:08
● 2026-03-31 13:03:46
● 2026-04-07 13:01:38
○ 2026-04-12 16:29:04
● 2026-04-21 13:05:48
● 2026-05-12 13:03:00
○ 2026-05-15 20:51:52
○ 2026-05-15 20:51:54
○A2a06:98c1:3121::2026-03-31 → 2026-05-12 · 8 obs
○ 2026-03-24 18:04:08
● 2026-03-31 13:03:46
● 2026-04-07 13:01:38
○ 2026-04-12 16:29:04
● 2026-04-21 13:05:48
● 2026-05-12 13:03:00
○ 2026-05-15 20:51:52
○ 2026-05-15 20:51:54

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
unexpectedcookies.comcody.ns.cloudflare.com, anita.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.194.82

NS records: cody.ns.cloudflare.com, anita.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for unexpectedcookies.com (unsigned zone)

⏱️ Timing

Total: 370ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.92.64, 172.67.187.158
AAAA22606:4700:3037::ac43:bb9e, 2606:4700:3031::6815:5c40
NS2anita.ns.cloudflare.com, cody.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT2google-site-verification=ZDIfvoUI83eGvoP, v=spf1 include:_spf.google.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1anita.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (cody.ns.cloudflare.com, cody.ns.cloudflare.com, cody.ns.cloudflare.com...)

Analysis

IP Addresses

unexpectedcookies.com maps to four IP numbers: 2606:4700:3031::6815:5c40, 2606:4700:3037::ac43:bb9e, 104.21.92.64 and 172.67.187.158.

Other host names, for instance surfdoors.net, metalohm.com.br, ufo7770-a1.site, ynvo.cn and mebiqusocorholdings.digital share IP numbers with unexpectedcookies.com.

Name Servers

Two name servers anita.ns.cloudflare.com and cody.ns.cloudflare.com are delegated to unexpectedcookies.com.

unexpectedcookies.com uses the same name server configuration as other domains, such as hackerfactor.net, yaempleo.net, pnbl.net, ultrafair.com and jefa.se.

unexpectedcookies.com at least partially shares name servers with other domains such as younews.in, dqaoli.com, 0769paint.com, bojanoro.com and abanegan.com.

Host names with six IP numbers: Host name anita.ns.cloudflare.com points to 2606:4700:50::a29f:2652, 2803:f800:50::6ca2:c252, 2a06:98c1:50::ac40:2252, 108.162.194.82, 162.159.38.82 and 172.64.34.82; host name cody.ns.cloudflare.com points to 2606:4700:58::adf5:3b6b, 2803:f800:50::6ca2:c16b, 2a06:98c1:50::ac40:216b, 108.162.193.107, 172.64.33.107 and 173.245.59.107.

Mail Servers

unexpectedcookies.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.

unexpectedcookies.com shares mail servers with other domains at least in part, for instance studentville.it, ns500765.ns500693.ns500693.ns500734.ns500693.ns500699.ns500693.ns500734.ns500588.ns500588.ns500588.ns500588.ns500588.ns500632.ns500588.ns500588.ns500588.dtrkdll.com, ns500765.ns500734.ns500699.ns500693.ns500693.ns500693.ns500588.ns500693.ns500683.ns500683.ns500699.ns500683.ns500588.ns500612.ns500588.ns500110.dtrkdll.com, ns500671.ns500731.ns500754.ns500671.ns500742.ns500671.ns500704.ns500671.ns500704.ns500705.ns500704.ns500704.ns500704.ns500666.ns500666.ns500131.lustychickser.com and ns500731.ns500731.ns500754.ns500704.ns500742.ns500705.ns500688.ns500671.ns500704.ns500671.ns500688.ns500678.ns500666.ns500653.ns500153.tenderladiesbz.com.

These mail servers are often used together with aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com and aspmx5.googlemail.com.

Two IPs per host name:

aspmx.l.google.com points to: 2607:f8b0:4004:c0b::1b and 192.178.155.27

alt1.aspmx.l.google.com points to: 2800:3f0:4003:c0f::1b and 108.177.123.26

alt2.aspmx.l.google.com points to: 2a00:1450:4013:c1e::1b and 192.178.213.26

alt3.aspmx.l.google.com points to: 2a00:1450:4009:c0f::1b and 192.178.223.26

alt4.aspmx.l.google.com points to: 2a00:1450:400c:c00::1b and 173.194.76.27

Pattern: left IDs ascend by 9 (12, 21, 30, 39, 48); each pair of targets ascend by 9 (15/18, 24/27, 33/36, 42/45, 51/54)