🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`helloo.bot`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:5e9f^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:89ce^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.94.159^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.137.206^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`sarah.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26da^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2da^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sarah.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22da^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sarah.ns.cloudflare.com`
		A	108.162.194.218^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
		A	162.159.38.218^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
		A	172.64.34.218^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sarah.ns.cloudflare.com`
NS	`sterling.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c8f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sterling.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c38f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sterling.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:238f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sterling.ns.cloudflare.com`
		A	108.162.195.143^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sterling.ns.cloudflare.com`
		A	162.159.44.143^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sterling.ns.cloudflare.com`
		A	172.64.35.143^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sterling.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.94.159, 172.67.137.206
		IPv6 hints	2606:4700:3032::6815:5e9f, 2606:4700:3034::ac43:89ce
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=233, name=cloudflare-ech.com
SOA	`sarah.ns.cloudflare.com`dns@cloudflare.com serial=2417229505

`bot`

	DNSSEC	🔒 Signed (DS record present)
	NS	`dns1.nic.bot` ⭐
	NS	`dns2.nic.bot`
	NS	`dns3.nic.bot`
	NS	`dns4.nic.bot`
	NS	`dnsa.nic.bot`
	NS	`dnsb.nic.bot`
	NS	`dnsc.nic.bot`
	NS	`dnsd.nic.bot`
	TXT	`#Timestamp: 1793368800`
	SOA	`dns1.nic.bot`hostmaster@nominet.org.uk serial=1793368510

Same first word

helloo.net

helloo.tech

helloo.bond

helloo.id.vn

helloo.tel

helloo.it

helloo.work

helloo.com.au

helloo.ae

helloo.bot

helloo.co

helloo.be

helloo.click

helloo.co.uk

helloo.dk

helloo.fun

helloo.dev

helloo.live

helloo.workers.dev

helloo.store

helloo.cloud

helloo.page

helloo.uk

helloo.de

helloo.mx

helloo.in

helloo.com.br

helloo.io

helloo.cc

helloo.lima-city.de

helloo.digital

helloo.ooo

helloo.ph

helloo.lk

helloo.im

helloo.us

helloo.fr

helloo.ru

helloo.website

helloo.man

helloo.cn

helloo.co.in

helloo.online

helloo.com.ph

helloo.pages.dev

helloo.app

helloo.one

helloo.com

helloo.shop

helloo.xyz

helloo.org

helloo.club

helloo.nl

helloo.eu

helloo.at

helloo.org.uk

helloo.pl

Similar names

ohello.us

oohell.com

ohello.com

heollo.cc

ohello.ai

olheol.com

looleh.xyz

elholo.com

ohello.io

looleh.net

olleho.com

holole.rest

ohello.be

leholo.click

ohello.earth

lolhoe.com

holole.com

ellooh.be

looleh.co

holole.digital

ohello.space

holleo.com

helool.cfd

ellooh.info

holole.my

ellooh.com

looleh.workers.dev

holelo.com

ohello.click

olleho.bet

ohello.co

ohello.co.kr

holloe.com

ellooh.biz

leoloh.workers.dev

helool.net

heollo.ph

ohello.im

ohello.icu

ohello.org

ohello.cn

leoloh.com

ohello.chat

ohello.co.uk

holleo.co.uk

ohello.eu

ohello.net

helool.com

helolo.be

holole.store

ehooll.com

ohello.biz

holelo.top

holoel.se

ellooh.org

ohello.de

ohello.xyz

ohello.in

helolo.pages.dev

Previous names

heineken.bot

heinen-construction.bot

heisenberg.bot

held.bot

helena.bot

heli.bot

helicopter.bot

helio.bot

helios.bot

helium.bot

helix.bot

helixtensor.bot

hell.bot

helldivers.bot

hello.bot

hello88.bot

helloakira.bot

helloam.bot

hellochat.bot

hellodj.bot

Next names

helloworld.bot

helm.bot

helpa.bot

helpcenter.bot

helper-internet.bot

helper.bot

helpful.bot

helpi.bot

helping.bot

helpinghands.bot

helpme.bot

helpr.bot

helpscout.bot

helpy.bot

hema.bot

hemp.bot

henchman.bot

henchmen.bot

(0x68656e746169).bot

DNS History

15 records (11 active, 4 former)

●NSsarah.ns.cloudflare.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●NSsterling.ns.cloudflare.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●MXeforward1.registrar-servers.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●MXeforward2.registrar-servers.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●MXeforward3.registrar-servers.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●MXeforward4.registrar-servers.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●MXeforward5.registrar-servers.com2026-09-28 → 2026-10-30 · 2 obs

● 2026-09-28 03:22:18
● 2026-10-30 14:23:44

●A104.21.94.1592026-10-10 → 2026-10-30 · 3 obs

○ 2026-09-28 03:22:18
● 2026-10-10 08:43:40
● 2026-10-30 14:23:44

●A172.67.137.2062026-10-10 → 2026-10-30 · 3 obs

○ 2026-09-28 03:22:18
● 2026-10-10 08:43:40
● 2026-10-30 14:23:44

○A188.114.96.02026-09-28 → 2026-09-28 · 3 obs

● 2026-09-28 03:22:18
○ 2026-10-10 08:43:40
○ 2026-10-30 14:23:44

○A188.114.97.02026-09-28 → 2026-09-28 · 3 obs

● 2026-09-28 03:22:18
○ 2026-10-10 08:43:40
○ 2026-10-30 14:23:44

●A2606:4700:3032::6815:5e9f2026-10-10 → 2026-10-30 · 3 obs

○ 2026-09-28 03:22:18
● 2026-10-10 08:43:40
● 2026-10-30 14:23:44

●A2606:4700:3034::ac43:89ce2026-10-10 → 2026-10-30 · 3 obs

○ 2026-09-28 03:22:18
● 2026-10-10 08:43:40
● 2026-10-30 14:23:44

○A2a06:98c1:3120::2026-09-28 → 2026-09-28 · 3 obs

● 2026-09-28 03:22:18
○ 2026-10-10 08:43:40
○ 2026-10-30 14:23:44

○A2a06:98c1:3121::2026-09-28 → 2026-09-28 · 3 obs

● 2026-09-28 03:22:18
○ 2026-10-10 08:43:40
○ 2026-10-30 14:23:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
bot	dnsb.nic.bot, dnsd.nic.bot, dns4.nic.bot, dns2.nic.bot...	16 records
helloo.bot	sterling.ns.cloudflare.com, sarah.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.35.143

NS records: sterling.ns.cloudflare.com, sarah.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for helloo.bot (unsigned zone)

⏱️ Timing

Total: 591ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.94.159, 172.67.137.206`
AAAA	2	`2606:4700:3034::ac43:89ce, 2606:4700:3032::6815:5e9f`
NS	2	`sarah.ns.cloudflare.com, sterling.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`sarah.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 16

In-bailiwick: 16 (dnsb.nic.bot, dnsb.nic.bot, dnsd.nic.bot...)

Analysis

IP Addresses

helloo.bot resolves to four IP addresses: 104.21.94.159, 172.67.137.206, 2606:4700:3032::6815:5e9f and 2606:4700:3034::ac43:89ce.

Two other host names, along with piphunter.vip, enterprisenetwork.africa and translatum.gr, also share IP numbers with helloo.bot.

Name Servers

helloo.bot has two authoritative name servers — sarah.ns.cloudflare.com and sterling.ns.cloudflare.com.

helloo.bot shares its NS records with other domains, for example finreader.ru, charlieconnect.com, uytrdyfyy.pages.dev and two others.

helloo.bot has at least partial name server overlap with other domains, such as weddingnavigator.xyz, goldpplje.shop, perez-1-susan-47.pages.dev and two others.

These name servers tend to appear together with the name servers opal.ns.cloudflare.com, chelsea.ns.cloudflare.com and candy.ns.cloudflare.com.

DNS names with 6 IP addresses:

sarah.ns.cloudflare.com points to 108.162.194.218, 162.159.38.218, 172.64.34.218 and 3 other IP addresses.

sterling.ns.cloudflare.com points to 108.162.195.143, 162.159.44.143, 172.64.35.143 and 3 other IP addresses.

Mail Servers

helloo.bot is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between helloo.bot and other domains, including emailbend.com, arthurmortlock.com, librarystorebooks.xyz and two others.

These mail servers tend to be used in combination with the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Host names that point to one IP address:

eforward1.registrar-servers.com resolves to 162.255.118.51.

eforward2.registrar-servers.com resolves to 162.255.118.52.

eforward3.registrar-servers.com resolves to 162.255.118.51.

eforward4.registrar-servers.com resolves to 162.255.118.52.

eforward5.registrar-servers.com resolves to 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

The host names eforward2.registrar-servers.com and eforward4.registrar-servers.com both resolve to 162.255.118.52 IP addresses.