when.do - dns.ninja

when.do

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:48b4🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3033::ac43:99d6🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.72.180Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.153.214🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSmariah.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26c8🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A2803:f800:50::6ca2:c2c8🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmariah.ns.cloudflare.com
A2a06:98c1:50::ac40:22c8🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmariah.ns.cloudflare.com
A108.162.194.200🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A162.159.38.200Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A172.64.34.200🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
NSrazvan.ns.cloudflare.com
A2606:4700:58::a29f:2c4d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
A2803:f800:50::6ca2:c34d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrazvan.ns.cloudflare.com
A2a06:98c1:50::ac40:234d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRrazvan.ns.cloudflare.com
A108.162.195.77🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
A162.159.44.77Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
A172.64.35.77🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
TXT_52ulf2otmynmgtqzjm86x60ehw8xizs
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.72.180, 172.67.153.214
IPv6 hints2606:4700:3030::6815:48b4, 2606:4700:3033::ac43:99d6
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=64, name=cloudflare-ech.com
SOAmariah.ns.cloudflare.comdns@cloudflare.com serial=2408935070

do

DNSSEC⚠️ Not signed
NSns2.nic.do ⭐
NSa.lactld.org
NSns.nic.do
NSns1.nic.do
NSns4.nic.do
NSns5.nic.do
NSphloem.uoregon.edu
TXTGeneration Time: 1785175208
SOAns1.nic.dohostmaster@nic.do 2026-07-27 #18
⚠️ On DNS blocklist: tif

Same first word

when.biz
when.jp
when.network
when.fr
when.be
when.org
when.pl
when.se
when.cn
when.tv
when.eu
when.green
when.life
when.do
when.nl
when.pw
when.com.au
when.cc
when.com
when.co
when.works
when.guide
when.de
when.gay
when.dk
when.com.tw
when.live
when.markets
when.no
when.us
when.today
when.sale
when.care
when.me
when.ca
when.fm
when.info
when.es
when.in
when.com.br
when.mx
when.ltd
when.cl
when.ie
when.sg
when.ro
when.im
when.ma
when.net
when.org.gr
when.ru

Similar names

henw.nl
ehnw.net
wehn.de
hewn.com.au
nwhe.com
hnew.com.cn
ewhn.uk
wehn.org
ehwn.com
wehn.xyz
enhw.com
nhwe.com
wneh.cn
hnew.org.vn
hewn.de
hwen.cn
nehw.org
hnew.net
hnew.de
wenh.net
hnew.ru
newh.com.cn
nehw.de
wehn.no
nweh.com
hwen.org
whne.com
henw.org
hnew.com
newh.com.au
nhwe.de
hewn.co.uk
hewn.com
wenh.com
hewn.ru
newh.ru
enwh.com
hewn.ie
wnhe.gov.sd
ewhn.com
hewn.net
ewnh.cn
hewn.co
newh.org
ewnh.com
wenh.cn
hewn.org

DNS History

21 records (6 active, 15 former)

NSmariah.ns.cloudflare.comrazvan.ns.cloudflare.comns1.linode.comns2.linode.comns3.linode.comns4.linode.comns5.linode.comA104.21.72.180172.67.153.2142606:4700:3030::6815:48b42606:4700:3033::ac43:99d6188.114.96.0188.114.96.4188.114.97.0188.114.97.42606:4700:3032::ac43:99d62606:4700:3035::6815:48b42a06:98c1:3120::2a06:98c1:3120::42a06:98c1:3121::2a06:98c1:3121::4
●NSmariah.ns.cloudflare.com2026-06-09 → 2026-07-27 · 3 obs
○ 2026-04-14 20:54:28
● 2026-06-09 17:47:30
● 2026-07-27 19:24:00
○NSns1.linode.com2026-03-18 → 2026-04-14 · 4 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○ 2026-07-27 19:24:00
○NSns2.linode.com2026-03-18 → 2026-04-14 · 4 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○ 2026-07-27 19:24:00
○NSns3.linode.com2026-03-18 → 2026-04-14 · 4 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○ 2026-07-27 19:24:00
○NSns4.linode.com2026-03-18 → 2026-04-14 · 4 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○ 2026-07-27 19:24:00
○NSns5.linode.com2026-03-18 → 2026-04-14 · 4 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○ 2026-07-27 19:24:00
●NSrazvan.ns.cloudflare.com2026-06-09 → 2026-07-27 · 3 obs
○ 2026-04-14 20:54:28
● 2026-06-09 17:47:30
● 2026-07-27 19:24:00
●A104.21.72.1802026-06-09 → 2026-07-27 · 5 obs
● 2026-06-09 17:47:30
○ 2026-06-21 20:44:36
● 2026-06-21 22:25:20
○ 2026-06-29 21:57:18
● 2026-07-27 19:24:00
●A172.67.153.2142026-06-09 → 2026-07-27 · 5 obs
● 2026-06-09 17:47:30
○ 2026-06-21 20:44:36
● 2026-06-21 22:25:20
○ 2026-06-29 21:57:18
● 2026-07-27 19:24:00
○A188.114.96.02026-06-29 → 2026-06-29 · 4 obs
○ 2026-06-29 21:57:18
● 2026-06-29 22:38:28
○ 2026-07-18 19:20:12
○ 2026-07-27 19:24:00
○A188.114.96.42026-06-21 → 2026-06-29 · 6 obs
○ 2026-06-09 17:47:30
● 2026-06-21 20:44:36
○ 2026-06-21 22:25:20
● 2026-06-29 21:57:18
○ 2026-06-29 22:38:28
○ 2026-07-27 19:24:00
○A188.114.97.02026-06-29 → 2026-06-29 · 4 obs
○ 2026-06-29 21:57:18
● 2026-06-29 22:38:28
○ 2026-07-18 19:20:12
○ 2026-07-27 19:24:00
○A188.114.97.42026-06-21 → 2026-06-29 · 6 obs
○ 2026-06-09 17:47:30
● 2026-06-21 20:44:36
○ 2026-06-21 22:25:20
● 2026-06-29 21:57:18
○ 2026-06-29 22:38:28
○ 2026-07-27 19:24:00
●A2606:4700:3030::6815:48b42026-07-27 → 2026-07-27 · 2 obs
○ 2026-07-18 19:20:12
● 2026-07-27 19:24:00
○A2606:4700:3032::ac43:99d62026-06-09 → 2026-06-21 · 5 obs
● 2026-06-09 17:47:30
○ 2026-06-21 20:44:36
● 2026-06-21 22:25:20
○ 2026-06-29 21:57:18
○ 2026-07-27 19:24:00
●A2606:4700:3033::ac43:99d62026-07-27 → 2026-07-27 · 2 obs
○ 2026-07-18 19:20:12
● 2026-07-27 19:24:00
○A2606:4700:3035::6815:48b42026-06-09 → 2026-06-21 · 5 obs
● 2026-06-09 17:47:30
○ 2026-06-21 20:44:36
● 2026-06-21 22:25:20
○ 2026-06-29 21:57:18
○ 2026-07-27 19:24:00
○A2a06:98c1:3120::2026-06-21 → 2026-06-29 · 6 obs
○ 2026-06-21 20:44:36
● 2026-06-21 21:39:08
○ 2026-06-21 22:25:20
● 2026-06-29 21:57:18
○ 2026-07-18 19:20:12
○ 2026-07-27 19:24:00
○A2a06:98c1:3120::42026-06-21 → 2026-06-21 · 4 obs
○ 2026-06-09 17:47:30
● 2026-06-21 20:44:36
○ 2026-06-21 21:39:08
○ 2026-07-27 19:24:00
○A2a06:98c1:3121::2026-06-21 → 2026-06-29 · 6 obs
○ 2026-06-21 20:44:36
● 2026-06-21 21:39:08
○ 2026-06-21 22:25:20
● 2026-06-29 21:57:18
○ 2026-07-18 19:20:12
○ 2026-07-27 19:24:00
○A2a06:98c1:3121::42026-06-21 → 2026-06-21 · 4 obs
○ 2026-06-09 17:47:30
● 2026-06-21 20:44:36
○ 2026-06-21 21:39:08
○ 2026-07-27 19:24:00

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
dons4.nic.do, ns5.nic.do, ns.nic.do, ns2.nic.do...-
when.dorazvan.ns.cloudflare.com, mariah.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.35.77

NS records: razvan.ns.cloudflare.com, mariah.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for do (unsigned zone)

⏱️ Timing

Total: 1436ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.153.214, 104.21.72.180
AAAA22606:4700:3030::6815:48b4, 2606:4700:3033::ac43:99d6
NS2mariah.ns.cloudflare.com, razvan.ns.cloudflare.com
TXT1_52ulf2otmynmgtqzjm86x60ehw8xizs
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1mariah.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

when.do directs to four IP numbers, which are 104.21.72.180, 172.67.153.214, 2606:4700:3030::6815:48b4 and 2606:4700:3033::ac43:99d6.

veriffiedhotelstay.com, tphelp.net, auridar.com and two other host names share IP numbers with when.do.

Name Servers

when.do is delegated to two name servers: mariah.ns.cloudflare.com and razvan.ns.cloudflare.com.

when.do uses the same name servers as several other domains — among them shopsellvia.shop, betmatchcasino.co.hu, limpiamur.es and two more.

At least some of when.do's name servers are shared with other domains, for example yjdm1260.com, ahmadwagdy.com, owalalifedanmark.com and two more.

These name servers tend to be deployed in combination with the name servers lucy.ns.cloudflare.com and drew.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

mariah.ns.cloudflare.com resolves to 108.162.194.200, 162.159.38.200, 172.64.34.200 and 3 other IP addresses.

razvan.ns.cloudflare.com resolves to 108.162.195.77, 162.159.44.77, 172.64.35.77 and 3 other IP addresses.