2fa.bot - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

2fa.bot

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:9c8d🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:7f9🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.7.249Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.156.141🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSjillian.ns.cloudflare.com ⭐
A2606:4700:50::a29f:262c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjillian.ns.cloudflare.com
A2803:f800:50::6ca2:c22c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjillian.ns.cloudflare.com
A2a06:98c1:50::ac40:222c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRjillian.ns.cloudflare.com
A108.162.194.44🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A162.159.38.44Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.34.44🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSnorman.ns.cloudflare.com
A2606:4700:58::adf5:3bd9🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorman.ns.cloudflare.com
A2803:f800:50::6ca2:c1d9🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnorman.ns.cloudflare.com
A2a06:98c1:50::ac40:21d9🇺🇸 Cloudflare2a06:98c1:50::/45
PTRnorman.ns.cloudflare.com
A108.162.193.217🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorman.ns.cloudflare.com
A172.64.33.217🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorman.ns.cloudflare.com
A173.245.59.217🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorman.ns.cloudflare.com
TXTgoogle-site-verification=YUBiprpa38u4RVR660RvAOS6EZoM9Z86h_vVsdrR9Wc
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.7.249, 172.67.156.141
IPv6 hints2606:4700:3032::ac43:9c8d, 2606:4700:3037::6815:7f9
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=241, name=cloudflare-ech.com
SOAjillian.ns.cloudflare.comdns@cloudflare.com serial=2416393579

bot

DNSSEC🔒 Signed (DS record present)
NSdns1.nic.bot ⭐
NSdns2.nic.bot
NSdns3.nic.bot
NSdns4.nic.bot
NSdnsa.nic.bot
NSdnsb.nic.bot
NSdnsc.nic.bot
NSdnsd.nic.bot
TXT#Timestamp: 1792605900
SOAdns1.nic.bothostmaster@nominet.org.uk serial=1792605912

Same first word

2fa.co.id
2fa.show
2fa.art
2fa.how
2fa.hzc.io
2fa.money
2fa.nl
2fa.beer
2fa.no
2fa.life
2fa.org
2fa.pink
2fa.com
2fa.jetzt
2fa.skin
2fa.lc
2fa.f5.si
2fa.icu
2fa.tm
2fa.ca
2fa.work
2fa.sbs
2fa.place
2fa.workers.dev
2fa.free
2fa.org.cn
2fa.ink
2fa.ws
2fa.lt
2fa.ge
2fa.quest
2fa.dedyn.io
2fa.ceo
2fa.bio
2fa.tv
2fa.me
2fa.cz
2fa.co.il
2fa.living
2fa.rip
2fa.zone
2fa.su
2fa.hair
2fa.ee
2fa.rsvp
2fa.fans
2fa.pl
2fa.cx
2fa.tokyo
2fa.tax
2fa.co
2fa.pics
2fa.blue
2fa.channel
2fa.us.org
2fa.codes
2fa.mom
2fa.au
2fa.link
2fa.software
2fa.lu
2fa.gold
2fa.do
2fa.moe
2fa.homes
2fa.xyz
2fa.mov
2fa.tel
2fa.ru.eu.org
2fa.cards
2fa.info
2fa.jp
2fa.ru
2fa.net
2fa.ph
2fa.video
2fa.llc
2fa.help
2fa.pet
2fa.rest
2fa.uno
2fa.kim
2fa.club
2fa.run
2fa.pp.ua
2fa.live
2fa.pages.dev
2fa.you
2fa.biz
2fa.food
2fa.world
2fa.so
2fa.ir
2fa.page
2fa.services
2fa.yoga
2fa.wtf
2fa.makeup
2fa.plus
2fa.dev

Similar names

2fa.vn
2fa.sk
2fa.ren
a2f.co
2fa.finance
f2a.ph
af2.nl
a2f.ai
a2f.info
af2.ru
a2f.workers.dev
2af.pt
f2a.bet
f2a.dev
f2a.sa.com
f2a.it
af2.org
f2a.si
a2f.io
f2a.ar
a2f.net
f2a.info
a2f.cc
fa2.org
2af.ph
2af.org
2af.it
f2a.top
fa2.net
f2a.ru
2af.pages.dev
f2a.fr
a2f.us
af2.pro
fa2.me
fa2.co.nz
f2a.pro
a2f.cn
fa2.store
f2a.zip
af2.cn
a2f.ind.br
af2.com.br

Previous names

1wn.bot
1x.bot
1x2.bot
1xbet.bot
2060.bot
20bet.bot
20sec.bot
20x.bot
21ai.bot
2222.bot
247365.bot
247agent.bot
247agents.bot
24h.bot
24hr.bot
2b2t.bot
2be.bot
2do.bot
2dot0.bot

Next names

2go.bot
2krn.bot
2nd.bot
2ro.bot
2see.bot
303.bot
314.bot
32win.bot
32win12.bot
33.bot
333.bot
33win.bot
36.bot
360.bot
3636.bot
365.bot
37e.bot
388bet.bot
3bet.bot
3dprint.bot

DNS History

6 records (6 active, 0 former)

NSjillian.ns.cloudflare.comnorman.ns.cloudflare.comA104.21.7.249172.67.156.1412606:4700:3032::ac43:9c8d2606:4700:3037::6815:7f9
●NSjillian.ns.cloudflare.com2026-09-04 → 2026-10-21 · 2 obs
● 2026-09-04 12:34:32
● 2026-10-21 18:31:46
●NSnorman.ns.cloudflare.com2026-09-04 → 2026-10-21 · 2 obs
● 2026-09-04 12:34:32
● 2026-10-21 18:31:46
●A104.21.7.2492026-09-04 → 2026-10-21 · 2 obs
● 2026-09-04 12:34:32
● 2026-10-21 18:31:46
●A172.67.156.1412026-09-04 → 2026-10-21 · 2 obs
● 2026-09-04 12:34:32
● 2026-10-21 18:31:46
●A2606:4700:3032::ac43:9c8d2026-09-04 → 2026-10-21 · 2 obs
● 2026-09-04 12:34:32
● 2026-10-21 18:31:46
●A2606:4700:3037::6815:7f92026-09-04 → 2026-10-21 · 2 obs
● 2026-09-04 12:34:32
● 2026-10-21 18:31:46

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
botdns1.nic.bot, dnsc.nic.bot, dnsa.nic.bot, dnsb.nic.bot...15 records
2fa.botnorman.ns.cloudflare.com, jillian.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.193.217

NS records: norman.ns.cloudflare.com, jillian.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 2fa.bot (unsigned zone)

⏱️ Timing

Total: 559ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.156.141, 104.21.7.249
AAAA22606:4700:3037::6815:7f9, 2606:4700:3032::ac43:9c8d
NS2jillian.ns.cloudflare.com, norman.ns.cloudflare.com
TXT1google-site-verification=YUBiprpa38u4RVR
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1jillian.ns.cloudflare.com dns.cloudflare

📌 Glue Records Collected

Total: 15

In-bailiwick: 15 (dns1.nic.bot, dns2.nic.bot, dns3.nic.bot...)

Analysis

IP Addresses

2fa.bot directs to four IP numbers, which are 104.21.7.249, 172.67.156.141, 2606:4700:3032::ac43:9c8d and 2606:4700:3037::6815:7f9.

faskjfasju11.shop, ridebaltic.com, alenaveber.ru plus two other host names have IP numbers in common with 2fa.bot.

Name Servers

The NS records for 2fa.bot delegate to jillian.ns.cloudflare.com and norman.ns.cloudflare.com.

The name server configuration of 2fa.bot is shared with other domains, for instance biletykabarety.pl, komunia24.pl, remontdomu.pl and two others.

At least some of 2fa.bot's name servers are shared with other domains, for example ferryquill.live, 4aazrti.bond, outdoorfever.de and two more.

These name servers tend to be deployed in combination with the name servers adel.ns.cloudflare.com and lennox.ns.cloudflare.com.

Hosts with 6 IP addresses each:

jillian.ns.cloudflare.com maps to 108.162.194.44, 162.159.38.44, 172.64.34.44 and 3 additional IP addresses.

norman.ns.cloudflare.com maps to 108.162.193.217, 172.64.33.217, 173.245.59.217 and 3 additional IP addresses.