handler.run - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

handler.run

DNSSEC🔒 Signed (DS record present)
A2606:4700:3030::ac43:c56a🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:5a51🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.90.81Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.197.106🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSalan.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b39🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalan.ns.cloudflare.com
A2803:f800:50::6ca2:c139🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRalan.ns.cloudflare.com
A2a06:98c1:50::ac40:2139🇺🇸 Cloudflare2a06:98c1:50::/45
PTRalan.ns.cloudflare.com
A108.162.193.57🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalan.ns.cloudflare.com
A172.64.33.57🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalan.ns.cloudflare.com
A173.245.59.57🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalan.ns.cloudflare.com
NSetta.ns.cloudflare.com
A2606:4700:50::adf5:3a9c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
A2803:f800:50::6ca2:c09c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRetta.ns.cloudflare.com
A2a06:98c1:50::ac40:209c🇺🇸 Cloudflare2a06:98c1:50::/45
PTRetta.ns.cloudflare.com
A108.162.192.156🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
A172.64.32.156🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
A173.245.58.156🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRetta.ns.cloudflare.com
TXThosting-site=handler-run
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.90.81, 172.67.197.106
IPv6 hints2606:4700:3030::ac43:c56a, 2606:4700:3036::6815:5a51
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=142, name=cloudflare-ech.com
SOAalan.ns.cloudflare.comdns@cloudflare.com serial=2414993253

run

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.run ⭐
NSv0n1.nic.run
NSv0n2.nic.run
NSv0n3.nic.run
NSv2n0.nic.run
NSv2n1.nic.run
SOAv0n0.nic.runhostmaster@donuts.email serial=1791087402

Same first word

Similar names

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSalan.ns.cloudflare.cometta.ns.cloudflare.comA104.21.90.81172.67.197.1062606:4700:3030::ac43:c56a2606:4700:3036::6815:5a51188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSalan.ns.cloudflare.com2026-09-04 → 2026-10-04 · 2 obs
● 2026-09-04 15:44:12
● 2026-10-04 04:47:32
●NSetta.ns.cloudflare.com2026-09-04 → 2026-10-04 · 2 obs
● 2026-09-04 15:44:12
● 2026-10-04 04:47:32
●A104.21.90.812026-09-13 → 2026-10-04 · 7 obs
○ 2026-09-04 15:44:12
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
●A172.67.197.1062026-09-13 → 2026-10-04 · 7 obs
○ 2026-09-04 15:44:12
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
○A188.114.96.02026-09-04 → 2026-09-27 · 7 obs
● 2026-09-04 15:44:12
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
○A188.114.97.02026-09-04 → 2026-09-27 · 7 obs
● 2026-09-04 15:44:12
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
●A2606:4700:3030::ac43:c56a2026-09-13 → 2026-10-04 · 7 obs
○ 2026-09-04 15:44:12
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
●A2606:4700:3036::6815:5a512026-09-13 → 2026-10-04 · 7 obs
○ 2026-09-04 15:44:12
● 2026-09-13 19:29:16
○ 2026-09-18 17:28:58
● 2026-09-22 06:04:50
○ 2026-09-27 18:18:04
● 2026-09-28 19:32:10
● 2026-10-04 04:47:32
○A2a06:98c1:3120::2026-09-04 → 2026-09-27 · 7 obs
● 2026-09-04 15:44:12
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32
○A2a06:98c1:3121::2026-09-04 → 2026-09-27 · 7 obs
● 2026-09-04 15:44:12
○ 2026-09-13 19:29:16
● 2026-09-18 17:28:58
○ 2026-09-22 06:04:50
● 2026-09-27 18:18:04
○ 2026-09-28 19:32:10
○ 2026-10-04 04:47:32

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
runv0n3.nic.run, v0n2.nic.run, v0n0.nic.run, v0n1.nic.run...12 records
handler.runalan.ns.cloudflare.com, etta.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.156

NS records: alan.ns.cloudflare.com, etta.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 1970ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.197.106, 104.21.90.81
AAAA22606:4700:3030::ac43:c56a, 2606:4700:3036::6815:5a51
NS2alan.ns.cloudflare.com, etta.ns.cloudflare.com
TXT2hosting-site=handler-run, v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1alan.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n1.nic.run, v0n2.nic.run...)

Analysis

IP Addresses

handler.run points to the four IP addresses 104.21.90.81, 172.67.197.106, 2606:4700:3030::ac43:c56a and 2606:4700:3036::6815:5a51.

Additional host names — rajakeren800.com, penabandung.com, ongkir-express.com and two others — share IP numbers with handler.run.

Name Servers

handler.run is delegated to two name servers: alan.ns.cloudflare.com and etta.ns.cloudflare.com.

handler.run shares its name server setup with other domains, including dehydratedleaf.com, moleculestore.com, arena-top-soccer-demo.pages.dev and two others.

At least some of handler.run's name servers are shared with other domains, for example geartothrill777.com, (0x626f6e64616765)loving.com, cloudflare-rally584.workers.dev and two more.

These name servers tend to be deployed in combination with the name servers albert.ns.cloudflare.com and woz.ns.cloudflare.com.

Host names with 6 IP numbers:

alan.ns.cloudflare.com resolves to 108.162.193.57, 172.64.33.57, 173.245.59.57 and 3 other IP addresses.

etta.ns.cloudflare.com resolves to 108.162.192.156, 172.64.32.156, 173.245.58.156 and 3 other IP addresses.