when.do - dns.ninja

when.do

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:99d6🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3035::6815:48b4🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.72.180Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.153.214🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSmariah.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26c8🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A2803:f800:50::6ca2:c2c8🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmariah.ns.cloudflare.com
A2a06:98c1:50::ac40:22c8🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmariah.ns.cloudflare.com
A108.162.194.200🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A162.159.38.200Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
A172.64.34.200🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmariah.ns.cloudflare.com
NSrazvan.ns.cloudflare.com
A2606:4700:58::a29f:2c4d🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
A2803:f800:50::6ca2:c34d🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrazvan.ns.cloudflare.com
A2a06:98c1:50::ac40:234d🇺🇸 Cloudflare2a06:98c1:50::/45
PTRrazvan.ns.cloudflare.com
A108.162.195.77🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
A162.159.44.77Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
A172.64.35.77🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrazvan.ns.cloudflare.com
TXT_52ulf2otmynmgtqzjm86x60ehw8xizs
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.72.180, 172.67.153.214
IPv6 hints2606:4700:3032::ac43:99d6, 2606:4700:3035::6815:48b4
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=231, name=cloudflare-ech.com
SOAmariah.ns.cloudflare.comdns@cloudflare.com serial=2403840221

do

DNSSEC⚠️ Not signed
NSns2.nic.do ⭐
NSa.lactld.org ⚠️ Not in parent delegation
NSns.nic.do
NSns1.nic.do
NSns4.nic.do
NSns5.nic.do
NSphloem.uoregon.edu ⚠️ Not in parent delegation
TXTGeneration Time: 1781021114
SOAns1.nic.dohostmaster@nic.do 2026-06-09 #16
⚠️ On DNS blocklist: tif

Same first word

when.biz
when.network
when.fr
when.be
when.org
when.pl
when.se
when.cn
when.tv
when.eu
when.green
when.life
when.do
when.nl
when.pw
when.com.au
when.cc
when.com
when.co
when.works
when.guide
when.de
when.gay
when.dk
when.com.tw
when.live
when.markets
when.us
when.today
when.at
when.sale
when.care
when.me
when.ca
when.fm
when.info
when.es
when.in
when.com.br
when.mx
when.ltd
when.cl
when.ie
when.sg
when.ro
when.im
when.ma
when.net
when.org.gr
when.ru

Similar names

henw.nl
ehnw.net
wehn.de
hewn.com.au
hwen.net
nwhe.com
hnew.com.cn
ewhn.uk
wehn.org
ehwn.com
wehn.xyz
enhw.com
nhwe.com
wneh.cn
hnew.org.vn
hewn.de
hwen.cn
nehw.org
hnew.net
hnew.de
wenh.net
hnew.ru
newh.com.cn
nehw.de
wehn.no
nweh.com
hwen.org
whne.com
henw.org
hnew.com
newh.com.au
nhwe.de
hewn.co.uk
hewn.com
wenh.com
hewn.ru
newh.ru
enwh.com
hewn.ie
wnhe.gov.sd
ewhn.com
hewn.net
ewnh.cn
hewn.co
newh.org
ewnh.com
wenh.cn
hewn.org

DNS History

11 records (6 active, 5 former)

NSmariah.ns.cloudflare.comrazvan.ns.cloudflare.comns1.linode.comns2.linode.comns3.linode.comns4.linode.comns5.linode.comA104.21.72.180172.67.153.2142606:4700:3032::ac43:99d62606:4700:3035::6815:48b4
●NSmariah.ns.cloudflare.com2026-06-09 → 2026-06-09 · 2 obs
○ 2026-04-14 20:54:28
● 2026-06-09 17:47:30
○NSns1.linode.com2026-03-18 → 2026-04-14 · 3 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○NSns2.linode.com2026-03-18 → 2026-04-14 · 3 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○NSns3.linode.com2026-03-18 → 2026-04-14 · 3 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○NSns4.linode.com2026-03-18 → 2026-04-14 · 3 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
○NSns5.linode.com2026-03-18 → 2026-04-14 · 3 obs
● 2026-03-18 23:07:22
● 2026-04-14 20:54:28
○ 2026-06-09 17:47:30
●NSrazvan.ns.cloudflare.com2026-06-09 → 2026-06-09 · 2 obs
○ 2026-04-14 20:54:28
● 2026-06-09 17:47:30
●A104.21.72.1802026-06-09 → 2026-06-09 · 1 obs
● 2026-06-09 17:47:30
●A172.67.153.2142026-06-09 → 2026-06-09 · 1 obs
● 2026-06-09 17:47:30
●A2606:4700:3032::ac43:99d62026-06-09 → 2026-06-09 · 1 obs
● 2026-06-09 17:47:30
●A2606:4700:3035::6815:48b42026-06-09 → 2026-06-09 · 1 obs
● 2026-06-09 17:47:30

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
dons.nic.do, ns1.nic.do, ns2.nic.do, ns4.nic.do...-
when.dorazvan.ns.cloudflare.com, mariah.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.194.200

NS records: razvan.ns.cloudflare.com, mariah.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for do (unsigned zone)

⏱️ Timing

Total: 580ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.72.180, 172.67.153.214
AAAA22606:4700:3035::6815:48b4, 2606:4700:3032::ac43:99d6
NS2mariah.ns.cloudflare.com, razvan.ns.cloudflare.com
TXT1_52ulf2otmynmgtqzjm86x60ehw8xizs
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1mariah.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

when.do has 4 IP addresses: 104.21.72.180, 172.67.153.214, 2606:4700:3032::ac43:99d6 and 2606:4700:3035::6815:48b4.

veriffiedhotelstay.com, auridar.com, beruspugvywo.click and two other host names share IP numbers with when.do.

Name Servers

when.do is delegated to two name servers: mariah.ns.cloudflare.com and razvan.ns.cloudflare.com.

when.do uses the same name servers as several other domains — among them shopsellvia.shop, betmatchcasino.co.hu, limpiamur.es and two more.

At least some of when.do's name servers are shared with other domains, for example yjdm1260.com, ahmadwagdy.com, owalalifedanmark.com and two more.

These name servers tend to be deployed in combination with the name servers lucy.ns.cloudflare.com and mallory.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

mariah.ns.cloudflare.com directs to 108.162.194.200, 162.159.38.200, 172.64.34.200 and three others.

razvan.ns.cloudflare.com directs to 108.162.195.77, 162.159.44.77, 172.64.35.77 and three others.