command.observer - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

command.observer

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:4ac4🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3031::ac43:ce35🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.74.196Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.206.53🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NScruz.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a58🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
A2803:f800:50::6ca2:c058🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcruz.ns.cloudflare.com
A2a06:98c1:50::ac40:2058🇺🇸 Cloudflare2a06:98c1:50::/45
PTRcruz.ns.cloudflare.com
A108.162.192.88🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
A172.64.32.88🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
A173.245.58.88🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcruz.ns.cloudflare.com
NSlewis.ns.cloudflare.com
A2606:4700:58::a29f:2c9f🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
A2803:f800:50::6ca2:c39f🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRlewis.ns.cloudflare.com
A2a06:98c1:50::ac40:239f🇺🇸 Cloudflare2a06:98c1:50::/45
PTRlewis.ns.cloudflare.com
A108.162.195.159🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
A162.159.44.159Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
A172.64.35.159🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlewis.ns.cloudflare.com
MXmx1.krystal.io ⭐
A185.53.56.44🇬🇧 KRYSTAL185.53.56.0/22
PTRmx1.strikemail.co.uk
A185.53.56.46🇬🇧 KRYSTAL185.53.56.0/22
PTRmx1.strikemail.co.uk
MXmx2.krystal.io(20)
A185.53.56.45🇬🇧 KRYSTAL185.53.56.0/22
PTRmx2.strikemail.co.uk
A185.53.56.47🇬🇧 KRYSTAL185.53.56.0/22
PTRmx2.strikemail.co.uk
TXTv=spf1 +a +mx +ip4:77.72.2.131 include:relay.k.io ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.74.196, 172.67.206.53
IPv6 hints2606:4700:3031::6815:4ac4, 2606:4700:3031::ac43:ce35
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=237, name=cloudflare-ech.com
SOAcruz.ns.cloudflare.comdns@cloudflare.com serial=2412304300

observer

DNSSEC🔒 Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1788179759
⚠️ On DNS blocklist: spam-tlds

Same first word

command.org
command.com.sv
command.tools
command.com.hn
command.se
command.co.nz
command.co.at
command.com.ph
command.com.gr
command.codes
command.ke
command.gr
command.fund
command.observer
command.com.br
command.ca
command.cfd
command.watch
command.com.mx
command.company
command.cz
command.sv
command.rocks
command.ch
command.uy
command.consulting
command.tokyo
command.bargains
command.pl
command.team
command.com.au
command.agency
command.com.gt
command.com.lk
command.com.tw
command.tt
command.ee
command.group
command.ae
command.eu
command.pk
command.com.tr
command.quest
command.info
command.com.pe
command.chat
command.life
command.co.ke
command.domains
command.cheap
command.org.nz
command.com.co
command.com.hk
command.sg
command.ec
command.wiki
command.trade
command.cc
command.com.pl
command.org.es
command.jp
command.com.cn
command.cl
command.com.pk
command.lk
command.market
command.be
command.tm.se
command.com.pa
command.co.id
command.fi
command.srl
command.ro
command.jp.net
command.one
command.co.tt
command.com.sg
command.gen.tr
command.es
command.tw
command.de
command.co
command.com.my
command.cash
command.asia
command.com.ni
command.edu.pk
command.nom.es
command.hk
command.space
command.ph
command.me
command.clinic
command.biz
command.co.th
command.im
command.pe
command.com.uy
command.in.net
command.hn
command.net.nz
command.now
command.com.ec
command.com.pr
command.com.es
command.co.il
command.uk.com
command.co.ve
command.fr
command.at
command.ma
command.network
command.it
command.co.hu
command.vn
command.eu.org
command.ws
command.co.in
command.co.ma
command.run
command.ru
command.com.ve
command.in
command.cr
command.finance
command.sh
command.center
command.com
command.com.do
command.ltd
command.si
command.us
command.dk

Similar names

adncomm.com
dancomm.dk
mandmco.shop
dancomm.ru
mdcoman.com
command.do
command.ai
command.art
command.pm
command.co.cr
command.com.ro
command.cn
command.world
command.com.pt
command.md
command.nl
command.net
command.io
mmandco.shop
mmcando.com
mmandco.net
madmnco.cc
dmcoman.com
mandcom.de
madncom.com
mcdamon.com
dnacomm.my
nadcomm.com
mcadmon.com
mmandco.ru
dancomm.com
nomadmc.net
mandmco.gr
mondcam.de
mandcom.com
dancomm.net
mcadmon.es
dnacomm.co.kr
commdna.com
dnacomm.com
mmandco.com.au
nomadmc.com
nomadmc.org
adncomm.net
dancomm.ci
aocndmm.cn
mcdoman.com
andcomm.it

Previous names

cdn-livsp.observer
cdn.observer
cevmos.observer
chains.observer
chaitanya.observer
chart.observer
check-out-my-cool.observer
checkip.observer
chocolate.observer
chorus.observer
claude-code.observer
claw.observer
clickfix.observer
climate.observer
cloudmft.observer
codebase.observer
coffee.observer
coflix.observer
comfora.observer

Next names

commodities.observer
compass.observer
comstar.observer
concave.observer
congressional.observer
conscious.observer
conservative.observer
constitutional.observer
copper.observer
coreloop.observer
cornonthec.observer
corporeal.observer
corru.observer
corvid.observer
corvus.observer
cosmo.observer
cost.observer
covid.observer
crimetokens.observer
crotch.observer

DNS History

8 records (8 active, 0 former)

NScruz.ns.cloudflare.comlewis.ns.cloudflare.comMXmx1.krystal.iomx2.krystal.ioA104.21.74.196172.67.206.532606:4700:3031::6815:4ac42606:4700:3031::ac43:ce35
●NScruz.ns.cloudflare.com2026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●NSlewis.ns.cloudflare.com2026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●MXmx1.krystal.io2026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●MXmx2.krystal.io2026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●A104.21.74.1962026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●A172.67.206.532026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●A2606:4700:3031::6815:4ac42026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28
●A2606:4700:3031::ac43:ce352026-08-29 → 2026-08-31 · 2 obs
● 2026-08-29 14:55:02
● 2026-08-31 12:39:28

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
observerns01.trs-dns.net, ns10.trs-dns.org, ns01.trs-dns.com, ns10.trs-dns.info8 records
command.observercruz.ns.cloudflare.com, lewis.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.195.159

NS records: cruz.ns.cloudflare.com, lewis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for command.observer (unsigned zone)

⏱️ Timing

Total: 1013ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.74.196, 172.67.206.53
AAAA22606:4700:3031::6815:4ac4, 2606:4700:3031::ac43:ce35
NS2cruz.ns.cloudflare.com, lewis.ns.cloudflare.com
MX2mx1.krystal.io (pri: 10), mx2.krystal.io (pri: 20)
TXT1v=spf1 +a +mx +ip4:77.72.2.131 include:r
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1cruz.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns01.trs-dns.net, ns01.trs-dns.net, ns10.trs-dns.org...)

Analysis

IP Addresses

command.observer directs to four IP numbers, which are 104.21.74.196, 172.67.206.53, 2606:4700:3031::6815:4ac4 and 2606:4700:3031::ac43:ce35.

trendpul(0x736578).xyz, dlhsintang.org, takethesky.me plus two other host names have IP numbers in common with command.observer.

Name Servers

command.observer is served by two delegated name servers, cruz.ns.cloudflare.com and lewis.ns.cloudflare.com.

The name server configuration of command.observer is shared with other domains, for instance huierelectrical.com, kantin-mama.pages.dev, pushmanelectronic.co and two others.

There is at least partial name server overlap between command.observer and other domains — cinejone.com, clark-1-sharon-96.pages.dev, ellfyn.com and two more among them.

These name servers are routinely deployed together with the name servers alexa.ns.cloudflare.com.

Hosts with 6 IP addresses each:

cruz.ns.cloudflare.com carries IP addresses 108.162.192.88, 172.64.32.88 and 173.245.58.88, with 3 other addresses beyond those.

lewis.ns.cloudflare.com carries IP addresses 108.162.195.159, 162.159.44.159 and 172.64.35.159, with 3 other addresses beyond those.

Mail Servers

command.observer uses two mail servers, mx1.krystal.io and mx2.krystal.io.

The mail server setup of command.observer matches that of other domains such as etgi.co.uk, truecoloursmotorcyclepaintwork.co.uk, ipatrons.net and two others.

command.observer and other domains — todhills.org for instance — share at least some mail servers.

Each of the two host names carries two IP addresses: mx1.krystal.io points to 185.53.56.44 and 185.53.56.46, and mx2.krystal.io points to 185.53.56.45 and 185.53.56.47.