user.run - dns.ninja

user.run

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:c720🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:1591🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.21.145Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.199.32🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NScarl.ns.cloudflare.com
A2606:4700:58::adf5:3b6a🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcarl.ns.cloudflare.com
A2803:f800:50::6ca2:c16a🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcarl.ns.cloudflare.com
A2a06:98c1:50::ac40:216a🇺🇸 Cloudflare2a06:98c1:50::/45
PTRcarl.ns.cloudflare.com
A108.162.193.106🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcarl.ns.cloudflare.com
A172.64.33.106🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcarl.ns.cloudflare.com
A173.245.59.106🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcarl.ns.cloudflare.com
NSvenus.ns.cloudflare.com
A2606:4700:50::adf5:3aeb🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvenus.ns.cloudflare.com
A2803:f800:50::6ca2:c0eb🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRvenus.ns.cloudflare.com
A2a06:98c1:50::ac40:20eb🇺🇸 Cloudflare2a06:98c1:50::/45
PTRvenus.ns.cloudflare.com
A108.162.192.235🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvenus.ns.cloudflare.com
A172.64.32.235🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvenus.ns.cloudflare.com
A173.245.58.235🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvenus.ns.cloudflare.com
MXeforward1.registrar-servers.com
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.21.145, 172.67.199.32
IPv6 hints2606:4700:3032::ac43:c720, 2606:4700:3037::6815:1591
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=3, name=cloudflare-ech.com
SOAcarl.ns.cloudflare.comdns@cloudflare.com serial=2406430399

run

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.run
NSv0n1.nic.run
NSv0n2.nic.run
NSv0n3.nic.run
NSv2n0.nic.run
NSv2n1.nic.run
SOAv0n0.nic.runhostmaster@donuts.email serial=1785954827

Same first word

Similar names

DNS History

15 records (10 active, 5 former)

2017201820192020202120222023202420252026NScarl.ns.cloudflare.comvenus.ns.cloudflare.comns1.vultr.comns2.vultr.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA104.21.21.145172.67.199.322606:4700:3032::ac43:c7202606:4700:3037::6815:1591127.7.7.72606:4700:3031::6815:15912606:4700:3031::ac43:c720
NScarl.ns.cloudflare.com2026-02-19 → 2026-08-05 · 3 obs
○ 2016-12-10 22:59:32
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
NSns1.vultr.com2016-12-10 → 2016-12-10 · 3 obs
● 2016-12-10 22:59:32
○ 2026-02-19 18:43:02
○ 2026-08-05 19:06:20
NSns2.vultr.com2016-12-10 → 2016-12-10 · 3 obs
● 2016-12-10 22:59:32
○ 2026-02-19 18:43:02
○ 2026-08-05 19:06:20
NSvenus.ns.cloudflare.com2026-02-19 → 2026-08-05 · 3 obs
○ 2016-12-10 22:59:32
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
MXeforward1.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
MXeforward2.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
MXeforward4.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
MXeforward5.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
A104.21.21.1452026-02-19 → 2026-08-05 · 3 obs
○ 2016-12-10 22:59:32
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
A127.7.7.72016-12-10 → 2016-12-10 · 3 obs
● 2016-12-10 22:59:32
○ 2026-02-19 18:43:02
○ 2026-08-05 19:06:20
A172.67.199.322026-02-19 → 2026-08-05 · 3 obs
○ 2016-12-10 22:59:32
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
A2606:4700:3031::6815:15912026-02-19 → 2026-06-13 · 5 obs
○ 2016-12-10 22:59:32
● 2026-02-19 18:43:02
● 2026-06-13 03:51:18
○ 2026-07-07 16:59:12
○ 2026-08-05 19:06:20
A2606:4700:3031::ac43:c7202026-02-19 → 2026-06-13 · 5 obs
○ 2016-12-10 22:59:32
● 2026-02-19 18:43:02
● 2026-06-13 03:51:18
○ 2026-07-07 16:59:12
○ 2026-08-05 19:06:20
A2606:4700:3032::ac43:c7202026-07-07 → 2026-08-05 · 3 obs
○ 2026-06-13 03:51:18
● 2026-07-07 16:59:12
● 2026-08-05 19:06:20
A2606:4700:3037::6815:15912026-07-07 → 2026-08-05 · 3 obs
○ 2026-06-13 03:51:18
● 2026-07-07 16:59:12
● 2026-08-05 19:06:20

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
runv0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run...12 records
user.runcarl.ns.cloudflare.com, venus.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.33.106

NS records: carl.ns.cloudflare.com, venus.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for user.run (unsigned zone)

⏱️ Timing

Total: 1710ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.199.32, 104.21.21.145
AAAA22606:4700:3037::6815:1591, 2606:4700:3032::ac43:c720
NS2carl.ns.cloudflare.com, venus.ns.cloudflare.com
MX4eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1carl.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n0.nic.run, v0n1.nic.run...)

Analysis

IP Addresses

user.run has four IP addresses: 104.21.21.145, 172.67.199.32, 2606:4700:3032::ac43:c720 and 2606:4700:3037::6815:1591.

Additional host names — www.ossjd.icu, iaipgh.org.mx, beta.teeta.cz and two others — share IP numbers with user.run.

Name Servers

DNS delegation for user.run points to two name servers: carl.ns.cloudflare.com and venus.ns.cloudflare.com.

user.run shares its name server setup with other domains, including theartneon.com, dedo.tv, yumfoody.com and two others.

user.run partially shares its NS delegation with several other domains, including 069(0x706f726e).com, alp.consulting, thebigeasy.at and two others.

These name servers are regularly seen alongside memphis.ns.cloudflare.com and olga.ns.cloudflare.com as name servers.

Host names with 6 IP numbers:

carl.ns.cloudflare.com has IP addresses 108.162.193.106, 172.64.33.106 and 173.245.59.106, plus 3 other.

venus.ns.cloudflare.com has IP addresses 108.162.192.235, 172.64.32.235 and 173.245.58.235, plus 3 other.

Mail Servers

Four mail servers handle email for user.run: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward4.registrar-servers.com and eforward5.registrar-servers.com.

user.run shares mail servers — at least in part — with other domains, including splyne.net, boardwealth.com, adlocum.com and two others.

The mail servers eforward3.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com frequently co-occur with these mail servers.

Each of eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward4.registrar-servers.com and eforward5.registrar-servers.com has one IP address. eforward1.registrar-servers.com162.255.118.51, eforward2.registrar-servers.com162.255.118.52, eforward4.registrar-servers.com162.255.118.52, eforward5.registrar-servers.com162.255.118.51.

Host names pointing to 162.255.118.51 IP addresses: eforward1.registrar-servers.com and eforward5.registrar-servers.com.

Host names pointing to 162.255.118.52 IP addresses: eforward2.registrar-servers.com and eforward4.registrar-servers.com.