cf-captcha.sd.workers.dev - dns.ninja

`cf-captcha.sd.workers.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::ac43:9753^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:c1a^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.12.26^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.151.83^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.12.26, 172.67.151.83
		IPv6 hints	2606:4700:3035::ac43:9753, 2606:4700:3036::6815:c1a
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=15, name=cloudflare-ech.com

`sd.workers.dev`

	DNSSEC	⚠️ Not signed
	NS	`dina.ns.cloudflare.com` ⭐
	NS	`tom.ns.cloudflare.com`
	SOA	`dina.ns.cloudflare.com`dns@cloudflare.com serial=2403628446

DNS History

8 records (4 active, 4 former)

●A104.21.12.262026-02-16 → 2026-06-04 · 11 obs

● 2026-02-16 14:11:10
● 2026-02-28 07:10:16
○ 2026-03-02 22:07:12
○ 2026-03-23 22:12:56
● 2026-03-30 05:42:42
○ 2026-04-01 03:42:18
● 2026-05-01 11:35:08
● 2026-05-02 15:31:48
○ 2026-05-02 20:46:38
● 2026-06-01 07:35:26
● 2026-06-04 09:44:00

●A172.67.151.832026-02-16 → 2026-06-04 · 11 obs

○A188.114.96.02026-03-02 → 2026-05-02 · 10 obs

○ 2026-02-28 07:10:16
● 2026-03-02 22:07:12
● 2026-03-23 22:12:56
○ 2026-03-30 05:42:42
● 2026-04-01 03:42:18
○ 2026-05-01 11:35:08
○ 2026-05-02 15:31:48
● 2026-05-02 20:46:38
○ 2026-06-01 07:35:26
○ 2026-06-04 09:44:00

○A188.114.97.02026-03-02 → 2026-05-02 · 10 obs

●A2606:4700:3035::ac43:97532026-02-16 → 2026-06-04 · 11 obs

●A2606:4700:3036::6815:c1a2026-02-16 → 2026-06-04 · 11 obs

○A2a06:98c1:3120::2026-03-02 → 2026-05-02 · 10 obs

○A2a06:98c1:3121::2026-03-02 → 2026-05-02 · 10 obs

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	10 records
workers.dev	sofia.ns.cloudflare.com, clyde.ns.cloudflare.com	-
sd.workers.dev	dina.ns.cloudflare.com, tom.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.107

NS records: dina.ns.cloudflare.com, tom.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for workers.dev (unsigned zone)

⏱️ Timing

Total: 621ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.12.26, 172.67.151.83`
AAAA	2	`2606:4700:3036::6815:c1a, 2606:4700:3035::ac43:9753`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)

Analysis

IP Addresses

cf-captcha.sd.workers.dev maps to 4 IP numbers, specifically 104.21.12.26, 172.67.151.83, 2606:4700:3035::ac43:9753 and 2606:4700:3036::6815:c1a.

Two other host names, along with xyzj945.com, rejuvenate.co.ke and backoffice.mentimeter.org, also share IP numbers with cf-captcha.sd.workers.dev.