attack.observer - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

attack.observer

DNSSEC⚠️ Not signed
NSjessica.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3aabπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjessica.ns.cloudflare.com
A2803:f800:50::6ca2:c0abπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjessica.ns.cloudflare.com
A2a06:98c1:50::ac40:20abπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjessica.ns.cloudflare.com
A108.162.192.171πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjessica.ns.cloudflare.com
A172.64.32.171πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjessica.ns.cloudflare.com
A173.245.58.171πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjessica.ns.cloudflare.com
NSsonny.ns.cloudflare.com
A2606:4700:58::a29f:2c42πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsonny.ns.cloudflare.com
A2803:f800:50::6ca2:c342πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsonny.ns.cloudflare.com
A2a06:98c1:50::ac40:2342πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRsonny.ns.cloudflare.com
A108.162.195.66πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A162.159.44.66Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.35.66πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
SOAjessica.ns.cloudflare.comdns@cloudflare.com serial=2416964599

observer

DNSSECπŸ”’ Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1793024749
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

Previous names

Next names

DNS History

2 records (2 active, 0 former)

NSjessica.ns.cloudflare.comsonny.ns.cloudflare.com
●NSjessica.ns.cloudflare.com2026-10-03 β†’ 2026-10-26 Β· 2 obs
● 2026-10-03 21:50:02
● 2026-10-26 14:47:44
●NSsonny.ns.cloudflare.com2026-10-03 β†’ 2026-10-26 Β· 2 obs
● 2026-10-03 21:50:02
● 2026-10-26 14:47:44

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
observerns01.trs-dns.com, ns01.trs-dns.net, ns10.trs-dns.org, ns10.trs-dns.info8 records
attack.observersonny.ns.cloudflare.com, jessica.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.195.66

NS records: sonny.ns.cloudflare.com, jessica.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attack.observer (unsigned zone)

⏱️ Timing

Total: 1200ms | Queries: -

πŸ“„ Records

TypeCountSample Data
NS2jessica.ns.cloudflare.com, sonny.ns.cloudflare.com
SOA1jessica.ns.cloudflare.com dns.cloudflare

πŸ“Œ Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns01.trs-dns.com, ns01.trs-dns.com, ns01.trs-dns.net...)

Analysis

Name Servers

attack.observer is served by two delegated name servers, jessica.ns.cloudflare.com and sonny.ns.cloudflare.com.

attack.observer has the same name server delegation as a number of other domains, such as 6zlicyqe.pages.dev, k1caiqbq.pages.dev, itemsjinemporium.shop and two more.

At least some of attack.observer's name servers are shared with other domains, for example sendmoney.pages.dev, worksmaximus100.pages.dev, naqra-sa.com and two more.

These name servers tend to be deployed in combination with the name servers haley.ns.cloudflare.com and cash.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

jessica.ns.cloudflare.com carries IP addresses 108.162.192.171, 172.64.32.171 and 173.245.58.171, with 3 other addresses beyond those.

sonny.ns.cloudflare.com carries IP addresses 108.162.195.66, 162.159.44.66 and 172.64.35.66, with 3 other addresses beyond those.