`whereweget.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:163c^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::ac43:cafc^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.22.60^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.202.252^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`lara.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a80^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c080^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lara.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2080^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lara.ns.cloudflare.com`
		A	108.162.192.128^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
		A	172.64.32.128^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
		A	173.245.58.128^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
NS	`leonard.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c36^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leonard.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c336^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`leonard.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2336^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`leonard.ns.cloudflare.com`
		A	108.162.195.54^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leonard.ns.cloudflare.com`
		A	162.159.44.54^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leonard.ns.cloudflare.com`
		A	172.64.35.54^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`leonard.ns.cloudflare.com`
MX	`_dc-mx.c718d51577ef.whereweget.com` ⭐
		A	159.198.37.97^{🇺🇸 NAMCHEAP-PH159.198.37.0/24}
			PTR	`entoblastic-demiassignation.vpsrdns.web-hosting.com`
TXT	`v=spf1 +a +mx +ip4:159.198.37.97 ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.22.60, 172.67.202.252
		IPv6 hints	2606:4700:3031::6815:163c, 2606:4700:3033::ac43:cafc
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=171, name=cloudflare-ech.com
SOA	`lara.ns.cloudflare.com`dns@cloudflare.com serial=2402167051

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778446961

WOT: SUSPICIOUS (59/100)

Previously MX for

whereweget.com

Same first word

whereweget.com

DNS History

20 records (7 active, 13 former)

●NSlara.ns.cloudflare.com2026-03-06 → 2026-05-10 · 3 obs

○ 2017-09-25 10:43:52
● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

●NSleonard.ns.cloudflare.com2026-03-06 → 2026-05-10 · 3 obs

○ 2017-09-25 10:43:52
● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

○NSns1.siaplagi.com2026-03-06 → 2026-05-10 · 2 obs

○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○NSns1kwy.name.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○NSns2.siaplagi.com2026-03-06 → 2026-05-10 · 2 obs

○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○NSns2dqr.name.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○NSns3ghw.name.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○NSns4ksy.name.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

●MX_dc-mx.c718d51577ef.whereweget.com2026-03-06 → 2026-05-10 · 3 obs

○ 2017-09-25 10:43:52
● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

○MXalt1.aspmx.l.google.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○MXalt2.aspmx.l.google.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○MXaspmx.l.google.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○MXaspmx2.googlemail.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○MXaspmx3.googlemail.com2015-08-26 → 2017-09-25 · 4 obs

● 2015-08-26 19:04:00
● 2017-09-25 10:43:52
○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

○MXwhereweget.com2026-03-06 → 2026-05-10 · 2 obs

○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

●A104.21.22.602026-03-06 → 2026-05-10 · 2 obs

● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

○A159.198.37.972026-03-06 → 2026-05-10 · 2 obs

○ 2026-03-06 09:51:44
○ 2026-05-10 21:30:44

●A172.67.202.2522026-03-06 → 2026-05-10 · 2 obs

● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

●A2606:4700:3031::6815:163c2026-03-06 → 2026-05-10 · 2 obs

● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

●A2606:4700:3033::ac43:cafc2026-03-06 → 2026-05-10 · 2 obs

● 2026-03-06 09:51:44
● 2026-05-10 21:30:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
whereweget.com	lara.ns.cloudflare.com, leonard.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.128

NS records: lara.ns.cloudflare.com, leonard.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for whereweget.com (unsigned zone)

⏱️ Timing

Total: 138ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.22.60, 172.67.202.252`
AAAA	2	`2606:4700:3031::6815:163c, 2606:4700:3033::ac43:cafc`
NS	2	`lara.ns.cloudflare.com, leonard.ns.cloudflare.com`
MX	1	`_dc-mx.c718d51577ef.whereweget.com (pri:`
TXT	1	`v=spf1 +a +mx +ip4:159.198.37.97 ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`lara.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (lara.ns.cloudflare.com, lara.ns.cloudflare.com, lara.ns.cloudflare.com...)

Analysis

IP Addresses

whereweget.com points to four IP numbers: 2606:4700:3031::6815:163c, 2606:4700:3033::ac43:cafc, 104.21.22.60 and 172.67.202.252.

Other host names including valuramic.digital, lineageproject.org, www.xn--albilet-b9a.126325g2.sbs, www.gc-saves.com and www.loewenthor.de share IP numbers with whereweget.com.

Name Servers

whereweget.com's delegation uses two name servers, lara.ns.cloudflare.com and leonard.ns.cloudflare.com.

whereweget.com shares the same name server setup as other domains, for example somersetcountymaine.org, fenoma.cl, eflyaway.com, infrastructureknowledge.site and fenoma.net.

whereweget.com at least partially shares name servers with other domains, including bioverti.com, bestappstrading.com, trustedapi.org, escapefromduckov.net and glaubeneinfach.co.at.

These name servers are often used together with tim.ns.cloudflare.com.

Host names with six IP numbers:

lara.ns.cloudflare.com points to: 2606:4700:50::adf5:3a80, 2803:f800:50::6ca2:c080, 2a06:98c1:50::ac40:2080, 108.162.192.128, 172.64.32.128 and 173.245.58.128.

leonard.ns.cloudflare.com points to: 2606:4700:58::a29f:2c36, 2803:f800:50::6ca2:c336, 2a06:98c1:50::ac40:2336, 108.162.195.54, 162.159.44.54 and 172.64.35.54.

Mail Servers

whereweget.com is handled by a single mail server, _dc-mx.c718d51577ef.whereweget.com.

_dc-mx.c718d51577ef.whereweget.com points to a single IP: 159.198.37.97.

whereweget.com - robtex.com

whereweget.com

com

Previously MX for

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`whereweget.com`

`com`