`2but.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:92a^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:82cb^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.9.42^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.130.203^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brenda.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brenda.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brenda.ns.cloudflare.com`
		A	108.162.192.77^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
		A	172.64.32.77^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
		A	173.245.58.77^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brenda.ns.cloudflare.com`
NS	`henry.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bb0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1b0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`henry.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21b0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`henry.ns.cloudflare.com`
		A	108.162.193.176^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
		A	172.64.33.176^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
		A	173.245.59.176^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`henry.ns.cloudflare.com`
MX	`mx2.zoho.com.cn` ⭐
		A	163.53.93.28^{🇨🇳 BIH-CN163.53.92.0/22 Chinanet Shanghai}
			PTR	`mx1.zoho.com.cn`
			PTR	`mx2.zoho.com.cn`
			PTR	`mx.zoho.com.cn`
MX	`mx.zoho.com.cn`⁽²⁰⁾
		A	124.251.121.155^{🇨🇳 VNET-BACKBONE-HB124.251.120.0/23}
			PTR	`mx1.zoho.com.cn`
			PTR	`mx2.zoho.com.cn`
			PTR	`mx.zoho.com.cn`
		A	163.53.93.28^{🇨🇳 BIH-CN163.53.92.0/22 Chinanet Shanghai}
			PTR	`mx1.zoho.com.cn`
			PTR	`mx2.zoho.com.cn`
			PTR	`mx.zoho.com.cn`
TXT	`google-site-verification=FnGpSowP751yWlzDsU9L7P2LJQ0f5RTnftP798Sgfj0`
TXT	`google-site-verification=aQFaqPmhZ-QURgBNW9IDCCI96-v6WXXEkTCiEIyZ1EI`
TXT	`v=spf1 include:zoho.com.cn ~all`
TXT	`zoho-verification=zb63575403.zmverify.zoho.com.cn`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.9.42, 172.67.130.203
		IPv6	2606:4700:3031::6815:92a, 2606:4700:3037::ac43:82cb
SOA	`brenda.ns.cloudflare.com`dns@cloudflare.com serial=2397059515

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

WOT: SUSPICIOUS (1/100)

Same first word

2but.com

Similar names

tub2.eu

b2tu.ru

tub2.dk

t2ub.co.uk

DNS History

20 records (8 active, 12 former)

●NSbrenda.ns.cloudflare.com2026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

●NShenry.ns.cloudflare.com2026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

○NSns1.myhostadmin.net2015-06-18 → 2017-08-12 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○NSns2.myhostadmin.net2015-06-18 → 2017-08-12 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○NSns3.myhostadmin.net2015-06-18 → 2017-08-12 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○NSns4.myhostadmin.net2015-06-18 → 2017-08-12 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○NSns5.myhostadmin.net2015-06-18 → 2017-08-12 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○NSns6.myhostadmin.net2015-06-18 → 2017-08-12 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○MXmail.2but.com2015-06-18 → 2016-07-15 · 5 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
● 2016-07-15 20:13:46
○ 2017-08-12 16:23:08
○ 2026-03-23 03:15:26

●MXmx.zoho.com.cn2026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

●MXmx2.zoho.com.cn2026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

○MXmxn.mxhichina.com2017-08-12 → 2017-08-12 · 4 obs

○ 2016-07-15 20:13:46
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○MXmxw.mxhichina.com2017-08-12 → 2017-08-12 · 4 obs

○ 2016-07-15 20:13:46
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

●A104.21.9.422026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

○A162.210.96.542015-06-18 → 2015-06-18 · 4 obs

○ 2008-03-08 16:36:40
● 2015-06-18 08:14:10
○ 2015-10-25 14:25:14
○ 2026-03-23 03:15:26

●A172.67.130.2032026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

○A198.211.51.922017-08-12 → 2017-08-12 · 4 obs

○ 2016-07-15 20:13:46
● 2017-08-12 16:23:08
○ 2026-02-25 17:49:32
○ 2026-03-23 03:15:26

○A198.52.103.392015-10-25 → 2016-07-15 · 5 obs

○ 2008-03-08 16:36:40
● 2015-10-25 14:25:14
● 2016-07-15 20:13:46
○ 2017-08-12 16:23:08
○ 2026-03-23 03:15:26

●A2606:4700:3031::6815:92a2026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

●A2606:4700:3037::ac43:82cb2026-02-25 → 2026-03-23 · 3 obs

○ 2017-08-12 16:23:08
● 2026-02-25 17:49:32
● 2026-03-23 03:15:26

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	g.gtld-servers.net, j.gtld-servers.net, i.gtld-servers.net, h.gtld-servers.net...	-
2but.com	brenda.ns.cloudflare.com, henry.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.176

NS records: brenda.ns.cloudflare.com, henry.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 2but.com (unsigned zone)

⏱️ Timing

Total: 188ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.9.42, 172.67.130.203`
AAAA	2	`2606:4700:3031::6815:92a, 2606:4700:3037::ac43:82cb`
NS	2	`brenda.ns.cloudflare.com, henry.ns.cloudflare.com`
MX	2	`mx.zoho.com.cn (pri: 10), mx2.zoho.com.cn (pri: 20)`
TXT	4	`google-site-verification=FnGpSowP751yWlz, google-site-verification=aQFaqPmhZ-QURgB...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brenda.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (brenda.ns.cloudflare.com, brenda.ns.cloudflare.com, brenda.ns.cloudflare.com...)

Analysis

IP Addresses

2but.com maps to four IP numbers: 2606:4700:3031::6815:92a, 2606:4700:3037::ac43:82cb, 104.21.9.42 and 172.67.130.203.

Other host names, for instance deltaflow.ca, tevatronic.net, bennacer.ladromidre.workers.dev, mainte.cn and blogdeanimales.com share IP numbers with 2but.com.

Name Servers

Two name servers brenda.ns.cloudflare.com and henry.ns.cloudflare.com are delegated to 2but.com.

2but.com uses the same name server configuration as other domains, such as fantasydatatest.com, kosmo.com.mx, c-logix.com, dotz.link and infinityexhibits.com.

2but.com at least partially shares name servers with other domains such as foerpo.com, alsadu.org.kw, gdgcincy.com, cryptoalarm.net and npkita.net.

These name servers are commonly used alongside hans.ns.cloudflare.com, jade.ns.cloudflare.com and zainab.ns.cloudflare.com.

Host names with six IP numbers: Host name brenda.ns.cloudflare.com points to 2606:4700:50::adf5:3a4d, 2803:f800:50::6ca2:c04d, 2a06:98c1:50::ac40:204d, 108.162.192.77, 172.64.32.77 and 173.245.58.77; host name henry.ns.cloudflare.com points to 2606:4700:58::adf5:3bb0, 2803:f800:50::6ca2:c1b0, 2a06:98c1:50::ac40:21b0, 108.162.193.176, 172.64.33.176 and 173.245.59.176.

Mail Servers

Two mail servers handle 2but.com: mx2.zoho.com.cn and mx.zoho.com.cn.

2but.com shares the same mail server setup as other domains, including gzhyc.com, taotu.in, lovemen.cc, bobore.com and koeei.com.

2but.com shares mail servers with other domains at least in part, for instance zeptomail.com.cn, campaign-image.com.cn, ktaiballbearing.com, zohoprojects.com.cn and yunlogin.com.

these mail servers are commonly used alongside the mail servers mx1.zoho.com.cn.

Host name mx.zoho.com.cn has two IPs: 124.251.121.155 and 163.53.93.28.

Host name mx2.zoho.com.cn has one IP: 163.53.93.28.

Host names pointing to 163.53.93.28: mx.zoho.com.cn and mx2.zoho.com.cn.

2but.com - robtex.com

2but.com

com

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`2but.com`

`com`