powershell.foo - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

powershell.foo

DNSSEC⚠️ Not signed
A18.208.88.157πŸ‡ΊπŸ‡Έ Amazon18.208.0.0/13 EC2 IAD prefix
PTRec2-18-208-88-157.compute-1.amazonaws.com
A98.84.224.111πŸ‡ΊπŸ‡Έ Amazon98.80.0.0/13 EC2 IAD Prefix
NSdns1.p01.nsone.net ⭐ ⚠️ Not in zone NS records
A2620:4d:4000:6259:7:1:0:1πŸ‡ΊπŸ‡Έ NSONE2620:4d:4000::/48 PNAP-ACS nsone-1
PTRdns1.p01.nsone.net
A198.51.44.1πŸ‡ΊπŸ‡Έ NSONE198.51.44.0/24
PTRdns1.p01.nsone.net
NSdns1.p06.nsone.net ⚠️ Not in parent delegation
A2620:4d:4000:6259:7:6:0:1πŸ‡ΊπŸ‡Έ NSONE2620:4d:4000::/48 PNAP-ACS nsone-1
PTRdns1.p06.nsone.net
A198.51.44.6πŸ‡ΊπŸ‡Έ NSONE198.51.44.0/24
PTRdns1.p06.nsone.net
NSdns2.p01.nsone.net ⚠️ Not in zone NS records
A2a00:edc0:6259:7:1::2πŸ‡ΊπŸ‡Έ NSONE2a00:edc0:6259::/48 NS1-2
PTRdns2.p01.nsone.net
A198.51.45.1πŸ‡ΊπŸ‡Έ NSONE198.51.45.0/24
PTRdns2.p01.nsone.net
NSdns2.p06.nsone.net ⚠️ Not in parent delegation
A2a00:edc0:6259:7:6::2πŸ‡ΊπŸ‡Έ NSONE2a00:edc0:6259::/48 NS1-2
PTRdns2.p06.nsone.net
A198.51.45.6πŸ‡ΊπŸ‡Έ NSONE198.51.45.0/24
PTRdns2.p06.nsone.net
NSdns3.p01.nsone.net ⚠️ Not in zone NS records
A2620:4d:4000:6259:7:1:0:3πŸ‡ΊπŸ‡Έ NSONE2620:4d:4000::/48 PNAP-ACS nsone-1
PTRdns3.p01.nsone.net
A198.51.44.65πŸ‡ΊπŸ‡Έ NSONE198.51.44.0/24
PTRdns3.p01.nsone.net
NSdns3.p06.nsone.net ⚠️ Not in parent delegation
A2620:4d:4000:6259:7:6:0:3πŸ‡ΊπŸ‡Έ NSONE2620:4d:4000::/48 PNAP-ACS nsone-1
PTRdns3.p06.nsone.net
A198.51.44.70πŸ‡ΊπŸ‡Έ NSONE198.51.44.0/24
PTRdns3.p06.nsone.net
NSdns4.p01.nsone.net ⚠️ Not in zone NS records
A2a00:edc0:6259:7:1::4πŸ‡ΊπŸ‡Έ NSONE2a00:edc0:6259::/48 NS1-2
PTRdns4.p01.nsone.net
A198.51.45.65πŸ‡ΊπŸ‡Έ NSONE198.51.45.0/24
PTRdns4.p01.nsone.net
NSdns4.p06.nsone.net ⚠️ Not in parent delegation
A2a00:edc0:6259:7:6::4πŸ‡ΊπŸ‡Έ NSONE2a00:edc0:6259::/48 NS1-2
PTRdns4.p06.nsone.net
A198.51.45.70πŸ‡ΊπŸ‡Έ NSONE198.51.45.0/24
PTRdns4.p06.nsone.net
SOAdns1.p01.nsone.netdomains+netlify@netlify.com serial=1684356787

foo

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
⚠️ On DNS blocklist: spam-tlds
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

14 records (10 active, 4 former)

NSdns1.p01.nsone.netdns1.p06.nsone.netdns2.p01.nsone.netdns2.p06.nsone.netdns3.p01.nsone.netdns3.p06.nsone.netdns4.p01.nsone.netdns4.p06.nsone.netA18.208.88.15798.84.224.11113.52.188.9535.157.26.13552.52.192.19163.176.8.218
●NSdns1.p01.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns1.p06.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns2.p01.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns2.p06.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns3.p01.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns3.p06.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns4.p01.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
●NSdns4.p06.nsone.net2026-09-06 β†’ 2026-10-02 Β· 2 obs
● 2026-09-06 17:05:48
● 2026-10-02 16:06:18
β—‹A13.52.188.952026-09-09 β†’ 2026-09-09 Β· 4 obs
β—‹ 2026-09-07 22:34:28
● 2026-09-09 14:46:10
β—‹ 2026-09-15 23:06:24
β—‹ 2026-10-02 16:06:18
●A18.208.88.1572026-09-07 β†’ 2026-10-02 Β· 5 obs
β—‹ 2026-09-06 17:05:48
● 2026-09-07 22:34:28
β—‹ 2026-09-09 14:46:10
● 2026-09-18 11:31:48
● 2026-10-02 16:06:18
β—‹A35.157.26.1352026-09-06 β†’ 2026-09-15 Β· 5 obs
● 2026-09-06 17:05:48
β—‹ 2026-09-07 22:34:28
● 2026-09-15 23:06:24
β—‹ 2026-09-18 11:31:48
β—‹ 2026-10-02 16:06:18
β—‹A52.52.192.1912026-09-09 β†’ 2026-09-09 Β· 4 obs
β—‹ 2026-09-07 22:34:28
● 2026-09-09 14:46:10
β—‹ 2026-09-15 23:06:24
β—‹ 2026-10-02 16:06:18
β—‹A63.176.8.2182026-09-06 β†’ 2026-09-15 Β· 5 obs
● 2026-09-06 17:05:48
β—‹ 2026-09-07 22:34:28
● 2026-09-15 23:06:24
β—‹ 2026-09-18 11:31:48
β—‹ 2026-10-02 16:06:18
●A98.84.224.1112026-09-07 β†’ 2026-10-02 Β· 5 obs
β—‹ 2026-09-06 17:05:48
● 2026-09-07 22:34:28
β—‹ 2026-09-09 14:46:10
● 2026-09-18 11:31:48
● 2026-10-02 16:06:18

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
foons-tld5.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...10 records
powershell.foodns4.p01.nsone.net, dns3.p01.nsone.net, dns2.p01.nsone.net, dns1.p01.nsone.net-

βœ… Authoritative Response

Server:198.51.44.65

NS records: dns4.p01.nsone.net, dns3.p01.nsone.net, dns2.p01.nsone.net, dns1.p01.nsone.net

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for powershell.foo (unsigned zone)

⏱️ Timing

Total: 391ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A298.84.224.111, 18.208.88.157
NS4dns2.p06.nsone.net, dns4.p06.nsone.net...
SOA1dns1.p01.nsone.net domains+netlify.netli

πŸ“Œ Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld5.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com...)

Analysis

IP Addresses

powershell.foo resolves to the IP addresses 18.208.88.157 and 98.84.224.111

comfortplacellc.com, vedanvita.com, darijus.com plus two other host names have IP numbers in common with powershell.foo.

Name Servers

powershell.foo carries NS records listing 8 name servers β€” dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net and 5 others.

powershell.foo has at least partial name server overlap with other domains, such as jkorchestrator.com, colleennewquist.enterprises, zacharygondelman.com and two others.

ns01.squarespacedns.com, ns02.squarespacedns.com and ns03.squarespacedns.com β€” plus 7 other name servers β€” are commonly paired with these name servers.

Host names pointing to two IP addresses:

The A records for dns1.p01.nsone.net return 198.51.44.1 and 2620:4d:4000:6259:7:1:0:1.

The A records for dns2.p01.nsone.net return 198.51.45.1 and 2a00:edc0:6259:7:1::2.

The A records for dns3.p01.nsone.net return 198.51.44.65 and 2620:4d:4000:6259:7:1:0:3.

The A records for dns4.p01.nsone.net return 198.51.45.65 and 2a00:edc0:6259:7:1::4.

The A records for dns1.p06.nsone.net return 198.51.44.6 and 2620:4d:4000:6259:7:6:0:1.

The A records for dns2.p06.nsone.net return 198.51.45.6 and 2a00:edc0:6259:7:6::2.

The A records for dns3.p06.nsone.net return 198.51.44.70 and 2620:4d:4000:6259:7:6:0:3.

The A records for dns4.p06.nsone.net return 198.51.45.70 and 2a00:edc0:6259:7:6::4.