whitehatbots.com - dns.ninja

`whitehatbots.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:4c95^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3030::ac43:c440^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.76.149^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.196.64^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`journey.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2603^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`journey.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c203^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`journey.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2203^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`journey.ns.cloudflare.com`
		A	108.162.194.3^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`journey.ns.cloudflare.com`
		A	162.159.38.3^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`journey.ns.cloudflare.com`
		A	172.64.34.3^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`journey.ns.cloudflare.com`
NS	`stan.ns.cloudflare.com`
		A	2606:4700:58::adf5:3beb^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1eb^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`stan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21eb^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`stan.ns.cloudflare.com`
		A	108.162.193.235^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stan.ns.cloudflare.com`
		A	172.64.33.235^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stan.ns.cloudflare.com`
		A	173.245.59.235^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stan.ns.cloudflare.com`
MX	`whitehatbots-com.mail.protection.outlook.com` ⭐
		A	2a01:111:f403:c803::^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn1pr21cu00200.inbound.protection.outlook.com`
		A	2a01:111:f403:c927::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn8pr05cu00301.inbound.protection.outlook.com`
		A	2a01:111:f403:c946::2^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-ch4pr04cu00102.inbound.protection.outlook.com`
		A	2a01:111:f403:f90d::^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-sn1pr0501cu00200.inbound.protection.outlook.com`
		A	52.101.11.17^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-sn1pr0501cu00301.inbound.protection.outlook.com`
		A	52.101.41.4^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-sj2pr05cu00204.inbound.protection.outlook.com`
		A	52.101.50.4^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-co1pr03cu00404.inbound.protection.outlook.com`
		A	52.101.50.7^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-co1pr21cu00207.inbound.protection.outlook.com`
TXT	`MS=ms73240493`
TXT	`google-site-verification=yPu6pXLFCrnhc2d-XIOsKzhA94-wY36NlhaiR9dzm48`
TXT	`v=spf1 include:spf.protection.outlook.com -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.76.149, 172.67.196.64
		IPv6 hints	2606:4700:3030::6815:4c95, 2606:4700:3030::ac43:c440
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=253, name=cloudflare-ech.com
SOA	`journey.ns.cloudflare.com`dns@cloudflare.com serial=2406751055

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1781390138

Same first word

whitehatbots.com

DNS History

9 records (7 active, 2 former)

●NSjourney.ns.cloudflare.com2026-02-18 → 2026-06-13 · 2 obs

● 2026-02-18 22:45:08
● 2026-06-13 22:36:44

●NSstan.ns.cloudflare.com2026-02-18 → 2026-06-13 · 2 obs

● 2026-02-18 22:45:08
● 2026-06-13 22:36:44

●MXwhitehatbots-com.mail.protection.outlook.com2026-02-18 → 2026-06-13 · 2 obs

● 2026-02-18 22:45:08
● 2026-06-13 22:36:44

●A104.21.76.1492026-06-13 → 2026-06-13 · 3 obs

○ 2026-04-12 09:32:14
● 2026-06-13 13:26:40
● 2026-06-13 22:36:44

●A172.67.196.642026-06-13 → 2026-06-13 · 3 obs

○ 2026-04-12 09:32:14
● 2026-06-13 13:26:40
● 2026-06-13 22:36:44

○A198.202.211.12026-02-18 → 2026-04-12 · 4 obs

● 2026-02-18 22:45:08
● 2026-04-12 09:32:14
○ 2026-06-13 13:26:40
○ 2026-06-13 22:36:44

●A2606:4700:3030::6815:4c952026-06-13 → 2026-06-13 · 3 obs

○ 2026-04-12 09:32:14
● 2026-06-13 13:26:40
● 2026-06-13 22:36:44

●A2606:4700:3030::ac43:c4402026-06-13 → 2026-06-13 · 3 obs

○ 2026-04-12 09:32:14
● 2026-06-13 13:26:40
● 2026-06-13 22:36:44

○A2620:cb:2000::12026-02-18 → 2026-04-12 · 4 obs

● 2026-02-18 22:45:08
● 2026-04-12 09:32:14
○ 2026-06-13 13:26:40
○ 2026-06-13 22:36:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, c.gtld-servers.net, m.gtld-servers.net, k.gtld-servers.net...	-
whitehatbots.com	stan.ns.cloudflare.com, journey.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.3

NS records: stan.ns.cloudflare.com, journey.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for whitehatbots.com (unsigned zone)

⏱️ Timing

Total: 1432ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.76.149, 172.67.196.64`
AAAA	2	`2606:4700:3030::6815:4c95, 2606:4700:3030::ac43:c440`
NS	2	`journey.ns.cloudflare.com, stan.ns.cloudflare.com`
MX	1	`whitehatbots-com.mail.protection.outlook`
TXT	3	`MS=ms73240493, google-site-verification=yPu6pXLFCrnhc2d...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`journey.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (stan.ns.cloudflare.com, stan.ns.cloudflare.com, stan.ns.cloudflare.com...)

Analysis

IP Addresses

whitehatbots.com points to four IP numbers: 104.21.76.149, 172.67.196.64, 2606:4700:3030::6815:4c95 and 2606:4700:3030::ac43:c440.

93qcxiqdsa.com, idikotawaringinbaratpemkab.org, botnet.im plus two other host names have IP numbers in common with whitehatbots.com.

Name Servers

Two name servers handle the delegation for whitehatbots.com: journey.ns.cloudflare.com and stan.ns.cloudflare.com.

The name server configuration of whitehatbots.com is shared with other domains, for instance copy-ninja.de, bottomup.app, arliin.com and two others.

At least some of whitehatbots.com's name servers are shared with other domains, for example elearningpsyuir.com, gomgomi3.com, arwayconfections.com and two more.

These name servers tend to be used in conjunction with the name servers sneh.ns.cloudflare.com.

Hosts with 6 IP addresses each:

journey.ns.cloudflare.com resolves to 108.162.194.3, 162.159.38.3 and 172.64.34.3 among others, with 3 other IP addresses in total.

stan.ns.cloudflare.com resolves to 108.162.193.235, 172.64.33.235 and 173.245.59.235 among others, with 3 other IP addresses in total.

Mail Servers

whitehatbots.com uses one mail server — whitehatbots-com.mail.protection.outlook.com.

whitehatbots-com.mail.protection.outlook.com has 8 IP addresses: 52.101.11.17, 52.101.41.4, 52.101.50.4 plus 5 more.