command.observer - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

command.observer

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:4ac4🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3031::ac43:ce35🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.74.196Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.206.53🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NScruz.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a58🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
A2803:f800:50::6ca2:c058🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcruz.ns.cloudflare.com
A2a06:98c1:50::ac40:2058🇺🇸 Cloudflare2a06:98c1:50::/45
PTRcruz.ns.cloudflare.com
A108.162.192.88🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
A172.64.32.88🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
A173.245.58.88🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
NSlewis.ns.cloudflare.com
A2606:4700:58::a29f:2c9f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
A2803:f800:50::6ca2:c39f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRlewis.ns.cloudflare.com
A2a06:98c1:50::ac40:239f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRlewis.ns.cloudflare.com
A108.162.195.159🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
A162.159.44.159Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
A172.64.35.159🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
MXmx1.krystal.io ⭐
A185.53.56.44🇬🇧 KRYSTAL185.53.56.0/22
PTRmx1.strikemail.co.uk
A185.53.56.46🇬🇧 KRYSTAL185.53.56.0/22
PTRmx1.strikemail.co.uk
MXmx2.krystal.io(20)
A185.53.56.45🇬🇧 KRYSTAL185.53.56.0/22
PTRmx2.strikemail.co.uk
A185.53.56.47🇬🇧 KRYSTAL185.53.56.0/22
PTRmx2.strikemail.co.uk
TXTv=spf1 +a +mx +ip4:77.72.2.131 include:relay.k.io ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.74.196, 172.67.206.53
IPv6 hints2606:4700:3031::6815:4ac4, 2606:4700:3031::ac43:ce35
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=182, name=cloudflare-ech.com
SOAcruz.ns.cloudflare.comdns@cloudflare.com serial=2412304300

observer

DNSSEC🔒 Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1788042358
⚠️ On DNS blocklist: spam-tlds

Same first word

command.org
command.com.sv
command.tools
command.com.hn
command.se
command.co.nz
command.co.at
command.com.ph
command.com.gr
command.codes
command.ke
command.gr
command.fund
command.observer
command.com.br
command.ca
command.cfd
command.watch
command.com.mx
command.company
command.cz
command.sv
command.rocks
command.ch
command.uy
command.consulting
command.bargains
command.pl
command.team
command.com.au
command.agency
command.com.gt
command.com.lk
command.com.tw
command.tt
command.ee
command.group
command.ae
command.eu
command.pk
command.com.tr
command.quest
command.info
command.com.pe
command.chat
command.life
command.co.ke
command.domains
command.cheap
command.org.nz
command.com.co
command.com.hk
command.sg
command.ec
command.wiki
command.cc
command.com.pl
command.org.es
command.jp
command.com.cn
command.cl
command.com.pk
command.lk
command.market
command.be
command.tm.se
command.com.pa
command.co.id
command.fi
command.srl
command.ro
command.jp.net
command.one
command.co.tt
command.com.sg
command.gen.tr
command.es
command.tw
command.de
command.co
command.com.my
command.cash
command.asia
command.com.ni
command.edu.pk
command.nom.es
command.hk
command.space
command.ph
command.me
command.clinic
command.biz
command.co.th
command.im
command.pe
command.com.uy
command.in.net
command.hn
command.net.nz
command.now
command.com.ec
command.com.pr
command.com.es
command.co.il
command.uk.com
command.co.ve
command.fr
command.at
command.ma
command.network
command.it
command.co.hu
command.vn
command.eu.org
command.ws
command.co.in
command.co.ma
command.run
command.ru
command.com.ve
command.in
command.cr
command.sh
command.center
command.com
command.com.do
command.ltd
command.us
command.dk
command.do
command.ai
command.pm

Similar names

adncomm.com
dancomm.dk
mandmco.shop
dancomm.ru
mdcoman.com
command.com.ro
command.cn
command.world
command.com.pt
command.md
command.nl
command.net
command.io
mmandco.shop
mmcando.com
mmandco.net
madmnco.cc
dmcoman.com
mandcom.de
madncom.com
mcdamon.com
dnacomm.my
nadcomm.com
mcadmon.com
mmandco.ru
dancomm.com
nomadmc.net
mandmco.gr
mandcom.com
dancomm.net
mcadmon.es
dnacomm.co.kr
commdna.com
dnacomm.com
mmandco.com.au
nomadmc.com
adncomm.net
aocndmm.cn
mcdoman.com
andcomm.it

Previous names

cannabis.observer
capitalists.observer
careful.observer
casual.observer
cats.observer
cdn-livsp.observer
cdn.observer
cevmos.observer
chains.observer
chart.observer
chocolate.observer
claude-code.observer
clickfix.observer
climate.observer
codebase.observer
coffee.observer
coflix.observer

Next names

commodities.observer
compass.observer
comstar.observer
concave.observer
conscious.observer
coreloop.observer
corru.observer
corvid.observer
cosmo.observer
covid.observer
cryptic.observer
cryptoclaw.observer
cryptocoin.observer
cryptopulse.observer
csp.observer
cti.observer
cuck.observer
cum.observer
dah.observer

DNS History

8 records (8 active, 0 former)

NScruz.ns.cloudflare.comlewis.ns.cloudflare.comMXmx1.krystal.iomx2.krystal.ioA104.21.74.196172.67.206.532606:4700:3031::6815:4ac42606:4700:3031::ac43:ce35
●NScruz.ns.cloudflare.com2026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●NSlewis.ns.cloudflare.com2026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●MXmx1.krystal.io2026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●MXmx2.krystal.io2026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●A104.21.74.1962026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●A172.67.206.532026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●A2606:4700:3031::6815:4ac42026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22
●A2606:4700:3031::ac43:ce352026-08-29 → 2026-08-29 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-29 22:29:22

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
observerns10.trs-dns.org, ns10.trs-dns.info, ns01.trs-dns.com, ns01.trs-dns.net8 records
command.observerlewis.ns.cloudflare.com, cruz.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.32.88

NS records: lewis.ns.cloudflare.com, cruz.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for command.observer (unsigned zone)

⏱️ Timing

Total: 508ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.74.196, 172.67.206.53
AAAA22606:4700:3031::6815:4ac4, 2606:4700:3031::ac43:ce35
NS2cruz.ns.cloudflare.com, lewis.ns.cloudflare.com
MX2mx1.krystal.io (pri: 10), mx2.krystal.io (pri: 20)
TXT1v=spf1 +a +mx +ip4:77.72.2.131 include:r
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1cruz.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns10.trs-dns.info, ns10.trs-dns.org, ns01.trs-dns.net...)

Analysis

IP Addresses

command.observer directs to four IP numbers, which are 104.21.74.196, 172.67.206.53, 2606:4700:3031::6815:4ac4 and 2606:4700:3031::ac43:ce35.

Additional host names — trendpul(0x736578).xyz, dlhsintang.org, piccosalesbuds.com and two others — share IP numbers with command.observer.

Name Servers

command.observer uses two name servers for its delegation: cruz.ns.cloudflare.com and lewis.ns.cloudflare.com.

command.observer shares its name server setup with other domains, including kantin-mama.pages.dev, pushmanelectronic.co, trackevrv.click and two others.

There is at least partial name server overlap between command.observer and other domains — cinejone.com, clark-1-sharon-96.pages.dev, ellfyn.com and two more among them.

These name servers are routinely deployed together with the name servers alexa.ns.cloudflare.com.

Host names with 6 IP numbers:

Hostname cruz.ns.cloudflare.com directs to 108.162.192.88, 172.64.32.88 and 173.245.58.88 along with 3 other IP addresses.

Hostname lewis.ns.cloudflare.com directs to 108.162.195.159, 162.159.44.159 and 172.64.35.159 along with 3 other IP addresses.

Mail Servers

command.observer has two mail servers: mx1.krystal.io and mx2.krystal.io.

command.observer shares the same mail server setup as other domains, including truecoloursmotorcyclepaintwork.co.uk, ipatrons.net, queprint.co.uk and two others.

command.observer and other domains — todhills.org for instance — share at least some mail servers.

The two host names mx1.krystal.io and mx2.krystal.io each have a pair of IP addresses: mx1.krystal.io has 185.53.56.44 and 185.53.56.46, and mx2.krystal.io has 185.53.56.45 and 185.53.56.47.