handler.run - dns.ninja
handler.run
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| A | 2606:4700:3030::ac43:c56a🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 2606:4700:3036::6815:5a51🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 104.21.90.81Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 172.67.197.106🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| NS | alan.ns.cloudflare.com ⭐ | ||||||
| A | 2606:4700:58::adf5:3b39🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | alan.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c139🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | alan.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2139🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | alan.ns.cloudflare.com | ||||||
| A | 108.162.193.57🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | alan.ns.cloudflare.com | ||||||
| A | 172.64.33.57🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | alan.ns.cloudflare.com | ||||||
| A | 173.245.59.57🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | alan.ns.cloudflare.com | ||||||
| NS | etta.ns.cloudflare.com | ||||||
| A | 2606:4700:50::adf5:3a9c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | etta.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c09c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | etta.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:209c🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | etta.ns.cloudflare.com | ||||||
| A | 108.162.192.156🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | etta.ns.cloudflare.com | ||||||
| A | 172.64.32.156🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | etta.ns.cloudflare.com | ||||||
| A | 173.245.58.156🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | etta.ns.cloudflare.com | ||||||
| TXT | hosting-site=handler-run | ||||||
| TXT | v=spf1 -all | ||||||
| HTTPS | HTTP/3, HTTP/2 ✓ hints match | ||||||
| IPv4 hints | 104.21.90.81, 172.67.197.106 | ||||||
| IPv6 hints | 2606:4700:3030::ac43:c56a, 2606:4700:3036::6815:5a51 | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=142, name=cloudflare-ech.com | ||||||
| SOA | alan.ns.cloudflare.comdns@cloudflare.com serial=2414993253 | ||||||
run
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.run ⭐ | ||||||
| NS | v0n1.nic.run | ||||||
| NS | v0n2.nic.run | ||||||
| NS | v0n3.nic.run | ||||||
| NS | v2n0.nic.run | ||||||
| NS | v2n1.nic.run | ||||||
| SOA | v0n0.nic.runhostmaster@donuts.email serial=1791087402 | ||||||
Same first word
Similar names
Previous names
Next names
DNS History
10 records (6 active, 4 former)
●NSalan.ns.cloudflare.com2026-09-04 → 2026-10-04 · 2 obs
● 2026-10-04 04:47:32
●NSetta.ns.cloudflare.com2026-09-04 → 2026-10-04 · 2 obs
● 2026-10-04 04:47:32
●A104.21.90.812026-09-13 → 2026-10-04 · 7 obs
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
●A172.67.197.1062026-09-13 → 2026-10-04 · 7 obs
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
○A188.114.96.02026-09-04 → 2026-09-27 · 7 obs
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
○A188.114.97.02026-09-04 → 2026-09-27 · 7 obs
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
●A2606:4700:3030::ac43:c56a2026-09-13 → 2026-10-04 · 7 obs
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
●A2606:4700:3036::6815:5a512026-09-13 → 2026-10-04 · 7 obs
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
○A2a06:98c1:3120::2026-09-04 → 2026-09-27 · 7 obs
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
○A2a06:98c1:3121::2026-09-04 → 2026-09-27 · 7 obs
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| run | v0n3.nic.run, v0n2.nic.run, v0n0.nic.run, v0n1.nic.run... | 12 records |
| handler.run | alan.ns.cloudflare.com, etta.ns.cloudflare.com | - |
✅ Authoritative Response
Server:173.245.58.156
NS records: alan.ns.cloudflare.com, etta.ns.cloudflare.com
🔒 DNSSEC Status
🔐 Secure (DNSSEC validated)
Chain of trust verified from root to domain
⏱️ Timing
Total: 1970ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.197.106, 104.21.90.81 |
| AAAA | 2 | 2606:4700:3030::ac43:c56a, 2606:4700:3036::6815:5a51 |
| NS | 2 | alan.ns.cloudflare.com, etta.ns.cloudflare.com |
| TXT | 2 | hosting-site=handler-run, v=spf1 -all |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | alan.ns.cloudflare.com dns.cloudflare.co |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v0n0.nic.run, v0n1.nic.run, v0n2.nic.run...)
Analysis
IP Addresses
handler.run points to the four IP addresses 104.21.90.81, 172.67.197.106, 2606:4700:3030::ac43:c56a and 2606:4700:3036::6815:5a51.
Additional host names — rajakeren800.com, penabandung.com, ongkir-express.com and two others — share IP numbers with handler.run.
Name Servers
handler.run is delegated to two name servers: alan.ns.cloudflare.com and etta.ns.cloudflare.com.
handler.run shares its name server setup with other domains, including dehydratedleaf.com, moleculestore.com, arena-top-soccer-demo.pages.dev and two others.
At least some of handler.run's name servers are shared with other domains, for example geartothrill777.com, (0x626f6e64616765)loving.com, cloudflare-rally584.workers.dev and two more.
These name servers tend to be deployed in combination with the name servers albert.ns.cloudflare.com and woz.ns.cloudflare.com.
Host names with 6 IP numbers:
alan.ns.cloudflare.com resolves to 108.162.193.57, 172.64.33.57, 173.245.59.57 and 3 other IP addresses.
etta.ns.cloudflare.com resolves to 108.162.192.156, 172.64.32.156, 173.245.58.156 and 3 other IP addresses.