botnode.io - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

botnode.io

DNSSEC⚠️ Not signed
A2606:4700:3034::6815:50c0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3036::ac43:994cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.80.192Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.153.76πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSfaye.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26b4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfaye.ns.cloudflare.com
A2803:f800:50::6ca2:c2b4πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRfaye.ns.cloudflare.com
A2a06:98c1:50::ac40:22b4πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRfaye.ns.cloudflare.com
A108.162.194.180πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfaye.ns.cloudflare.com
A162.159.38.180Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfaye.ns.cloudflare.com
A172.64.34.180πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfaye.ns.cloudflare.com
NSzeus.ns.cloudflare.com
A2606:4700:58::adf5:3bf9πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
A2803:f800:50::6ca2:c1f9πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRzeus.ns.cloudflare.com
A2a06:98c1:50::ac40:21f9πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRzeus.ns.cloudflare.com
A108.162.193.249πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
A172.64.33.249πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
A173.245.59.249πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzeus.ns.cloudflare.com
MXmx2.zoho.com ⭐
A204.141.33.44πŸ‡ΊπŸ‡Έ ZohoAS204.141.32.0/23 PNAP-DAL CASE00103239
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx6.zoho.com
PTRmx7.zoho.com
PTRmx8.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
MXmx3.zoho.com(20)
A204.141.43.44πŸ‡ΊπŸ‡Έ ZohoAS204.141.42.0/23 Zoho Corporation
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx6.zoho.com
PTRmx7.zoho.com
PTRmx8.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
MXmx.zoho.com(50)
A136.143.183.44πŸ‡ΊπŸ‡Έ ZohoAS136.143.182.0/23 Zoho
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
A204.141.43.44πŸ‡ΊπŸ‡Έ ZohoAS204.141.42.0/23 Zoho Corporation
PTRmx2.zoho.com
PTRmx3.zoho.com
PTRmx6.zoho.com
PTRmx7.zoho.com
PTRmx8.zoho.com
PTRmx.zoho.com
PTRmx2.zohomail.com
PTRmx3.zohomail.com
PTRmx.zohomail.com
TXTv=spf1 include:zohomail.com ~all
TXTzoho-verification=zb12614192.zmverify.zoho.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.80.192, 172.67.153.76
IPv6 hints2606:4700:3034::6815:50c0, 2606:4700:3036::ac43:994c
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=220, name=cloudflare-ech.com
SOAfaye.ns.cloudflare.comdns@cloudflare.com serial=2411489836

io

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.io ⭐
NSa2.nic.io
NSb0.nic.io
NSc0.nic.io
SOAa0.nic.iohostmaster@donuts.email serial=1788031536

Same first word

Similar names

Previous names

Next names

DNS History

9 records (9 active, 0 former)

NSfaye.ns.cloudflare.comzeus.ns.cloudflare.comMXmx.zoho.commx2.zoho.commx3.zoho.comA104.21.80.192172.67.153.762606:4700:3034::6815:50c02606:4700:3036::ac43:994c
●NSfaye.ns.cloudflare.com2026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●NSzeus.ns.cloudflare.com2026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●MXmx.zoho.com2026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●MXmx2.zoho.com2026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●MXmx3.zoho.com2026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●A104.21.80.1922026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●A172.67.153.762026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●A2606:4700:3034::6815:50c02026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50
●A2606:4700:3036::ac43:994c2026-08-19 β†’ 2026-08-29 Β· 2 obs
● 2026-08-19 13:30:00
● 2026-08-29 20:26:50

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ioa0.nic.io, a2.nic.io, b0.nic.io, c0.nic.io-
botnode.iofaye.ns.cloudflare.com, zeus.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.59.249

NS records: faye.ns.cloudflare.com, zeus.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for botnode.io (unsigned zone)

⏱️ Timing

Total: 765ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.153.76, 104.21.80.192
AAAA22606:4700:3034::6815:50c0, 2606:4700:3036::ac43:994c
NS2faye.ns.cloudflare.com, zeus.ns.cloudflare.com
MX3mx.zoho.com (pri: 10), mx2.zoho.com (pri: 20)...
TXT2v=spf1 include:zohomail.com ~all, zoho-verification=zb12614192.zmverify.zo
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1faye.ns.cloudflare.com dns.cloudflare.co

Analysis

IP Addresses

botnode.io directs to four IP numbers, which are 104.21.80.192, 172.67.153.76, 2606:4700:3034::6815:50c0 and 2606:4700:3036::ac43:994c.

Two other host names, along with hb1jueui.iduzz.ropwwigpau.com, sshfd11vd.ropwwigpau.com and www.http2.pro, also share IP numbers with botnode.io.

Name Servers

DNS delegation for botnode.io points to two name servers: faye.ns.cloudflare.com and zeus.ns.cloudflare.com.

botnode.io shares its NS records with other domains, for example forensisgroup.com, nova-9cd758.workers.dev, coxitservices.com and two others.

At least some of botnode.io's name servers are shared with other domains, for example oravomievara.com, kumar-vickysah72.workers.dev, dancewithfabi.pages.dev and two more.

These name servers tend to be deployed in combination with the name servers renan.ns.cloudflare.com and dylan.ns.cloudflare.com.

DNS names with 6 IP addresses:

faye.ns.cloudflare.com has IP addresses 108.162.194.180, 162.159.38.180 and 172.64.34.180, plus 3 other.

zeus.ns.cloudflare.com has IP addresses 108.162.193.249, 172.64.33.249 and 173.245.59.249, plus 3 other.

Mail Servers

The MX records for botnode.io list three mail servers: mx2.zoho.com, mx3.zoho.com and mx.zoho.com.

There is at least a partial MX overlap between botnode.io and other domains, including fidem.uz, oafflu.com, scentmaxai.com and two others.

Host names that have two IP addresses:

mx.zoho.com has two IP addresses: 136.143.183.44 and 204.141.43.44.

Host names that point to one IP address:

mx2.zoho.com directs to 204.141.33.44.

mx3.zoho.com directs to 204.141.43.44.

Host names pointing to 204.141.43.44 IP addresses: mx.zoho.com and mx3.zoho.com.