`dotheone.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3036::ac43:dfea^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:2696^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.38.150^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.223.234^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`matt.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b83^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matt.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c183^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`matt.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2183^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`matt.ns.cloudflare.com`
		A	108.162.193.131^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matt.ns.cloudflare.com`
		A	172.64.33.131^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matt.ns.cloudflare.com`
		A	173.245.59.131^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`matt.ns.cloudflare.com`
NS	`stevie.ns.cloudflare.com`
		A	2606:4700:50::a29f:266a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stevie.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c26a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`stevie.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:226a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`stevie.ns.cloudflare.com`
		A	108.162.194.106^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stevie.ns.cloudflare.com`
		A	162.159.38.106^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stevie.ns.cloudflare.com`
		A	172.64.34.106^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`stevie.ns.cloudflare.com`
MX	`fwd1.porkbun.com` ⭐
		A	44.226.226.6^{🇺🇸 Amazon44.224.0.0/11 EC2 PDX prefix}
			PTR	`fwd1.porkbun.com`
MX	`fwd2.porkbun.com`⁽²⁰⁾
		A	52.10.201.111^{🇺🇸 Amazon52.10.0.0/15 EC2 PDX Prefix}
			PTR	`fwd2.porkbun.com`
TXT	`v=spf1 include:_spf.porkbun.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.38.150, 172.67.223.234
		IPv6	2606:4700:3036::ac43:dfea, 2606:4700:3037::6815:2696
SOA	`matt.ns.cloudflare.com`dns@cloudflare.com serial=2395012470

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1771291435

WOT: SUSPICIOUS (1/100)

Same first word

dotheone.com

Similar names

theodeon.de

DNS History

15 records (8 active, 7 former)

○NSdns10.hichina.com2015-10-17 → 2016-04-01 · 4 obs

● 2015-10-17 17:57:28
● 2016-04-01 12:57:06
○ 2016-09-14 22:56:56
○ 2026-03-09 09:57:46

○NSdns9.hichina.com2015-10-17 → 2016-04-01 · 4 obs

● 2015-10-17 17:57:28
● 2016-04-01 12:57:06
○ 2016-09-14 22:56:56
○ 2026-03-09 09:57:46

●NSmatt.ns.cloudflare.com2026-03-02 → 2026-03-09 · 3 obs

○ 2016-09-14 22:56:56
● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

●NSstevie.ns.cloudflare.com2026-03-02 → 2026-03-09 · 3 obs

○ 2016-09-14 22:56:56
● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

●MXfwd1.porkbun.com2026-03-02 → 2026-03-09 · 2 obs

● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

●MXfwd2.porkbun.com2026-03-02 → 2026-03-09 · 2 obs

● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

●A104.21.38.1502026-03-02 → 2026-03-09 · 3 obs

○ 2016-09-14 22:56:56
● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

○A113.10.170.462015-12-24 → 2016-04-01 · 5 obs

○ 2015-10-17 17:57:28
● 2015-12-24 14:35:08
● 2016-04-01 12:57:06
○ 2016-09-14 22:56:56
○ 2026-03-09 09:57:46

●A172.67.223.2342026-03-02 → 2026-03-09 · 3 obs

○ 2016-09-14 22:56:56
● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

○A173.194.67.1212015-10-17 → 2015-10-17 · 3 obs

● 2015-10-17 17:57:28
○ 2015-12-24 14:35:08
○ 2026-03-09 09:57:46

●A2606:4700:3036::ac43:dfea2026-03-02 → 2026-03-09 · 3 obs

○ 2016-09-14 22:56:56
● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

●A2606:4700:3037::6815:26962026-03-02 → 2026-03-09 · 3 obs

○ 2016-09-14 22:56:56
● 2026-03-02 08:16:38
● 2026-03-09 09:57:46

○CNAME125471.vhost86.boxcdn.cn2015-12-24 → 2016-04-01 · 5 obs

○ 2015-10-17 17:57:28
● 2015-12-24 14:35:08
● 2016-04-01 12:57:06
○ 2016-09-14 22:56:56
○ 2026-03-09 09:57:46

○CNAMEghs.google.com2015-10-17 → 2015-10-17 · 3 obs

● 2015-10-17 17:57:28
○ 2015-12-24 14:35:08
○ 2026-03-09 09:57:46

○CNAMEghs.l.google.com2015-10-17 → 2015-10-17 · 3 obs

● 2015-10-17 17:57:28
○ 2015-12-24 14:35:08
○ 2026-03-09 09:57:46

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	i.gtld-servers.net, g.gtld-servers.net, c.gtld-servers.net, k.gtld-servers.net...	-
dotheone.com	matt.ns.cloudflare.com, stevie.ns.cloudflare.com	12 records

✅ Authoritative Response

Server: 108.162.193.131

NS records: matt.ns.cloudflare.com, stevie.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for dotheone.com (unsigned zone)

⏱️ Timing

Total: 289ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.38.150, 172.67.223.234`
AAAA	2	`2606:4700:3036::ac43:dfea, 2606:4700:3037::6815:2696`
NS	2	`matt.ns.cloudflare.com, stevie.ns.cloudflare.com`
MX	2	`fwd1.porkbun.com (pri: 10), fwd2.porkbun.com (pri: 20)`
TXT	1	`v=spf1 include:_spf.porkbun.com ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`matt.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (matt.ns.cloudflare.com, matt.ns.cloudflare.com, matt.ns.cloudflare.com...)

Analysis

IP Addresses

dotheone.com resolves to four IP numbers: 2606:4700:3036::ac43:dfea, 2606:4700:3037::6815:2696, 104.21.38.150 and 172.67.223.234.

Other host names such as 72dns.com.bjbhlm.com, fascinately.com, thisdemotel.com, com.bjbhlm.com and bjbhlm.com share IPs with dotheone.com.

Name Servers

dotheone.com is delegated to two name servers: matt.ns.cloudflare.com and stevie.ns.cloudflare.com.

dotheone.com shares the same name server setup as bizeem.com, mult.love, cc-fan.ru, fg-fan.ru and straightfinance.co.uk.

dotheone.com at least partially shares name servers with other domains, for instance ptv.gm, wozhaocai.com, kcplush.com, brearley.net and foxbonus.com.

these name servers are commonly used with ian.ns.cloudflare.com, kaiser.ns.cloudflare.com, coco.ns.cloudflare.com and ivy.ns.cloudflare.com.

Host names with six IP numbers:

matt.ns.cloudflare.com points to 2606:4700:58::adf5:3b83, 2803:f800:50::6ca2:c183, 2a06:98c1:50::ac40:2183, 108.162.193.131, 172.64.33.131 and 173.245.59.131.

stevie.ns.cloudflare.com points to 2606:4700:50::a29f:266a, 2803:f800:50::6ca2:c26a, 2a06:98c1:50::ac40:226a, 108.162.194.106, 162.159.38.106 and 172.64.34.106.

Mail Servers

dotheone.com is handled by two mail servers: fwd1.porkbun.com and fwd2.porkbun.com.

The mail server setup for dotheone.com matches that of other domains, for instance beanteam.org, thefreepour.com, micneumann.com, psychologyhelp.net and somestart.com.

dotheone.com shares some mail servers with other domains, at least in part, for instance intl.education.

Host names with a single IP:

fwd1.porkbun.com points to 44.226.226.6.

fwd2.porkbun.com points to 52.10.201.111.

dotheone.com - robtex.com

dotheone.com

com

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`dotheone.com`

`com`