user.run - dns.ninja
user.run
| DNSSEC | ⚠️ Not signed | ||||||
| A | 2606:4700:3032::ac43:c720🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 2606:4700:3037::6815:1591🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 104.21.21.145Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 172.67.199.32🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| NS | carl.ns.cloudflare.com ⭐ | ||||||
| A | 2606:4700:58::adf5:3b6a🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | carl.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c16a🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | carl.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:216a🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | carl.ns.cloudflare.com | ||||||
| A | 108.162.193.106🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | carl.ns.cloudflare.com | ||||||
| A | 172.64.33.106🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | carl.ns.cloudflare.com | ||||||
| A | 173.245.59.106🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | carl.ns.cloudflare.com | ||||||
| NS | venus.ns.cloudflare.com | ||||||
| A | 2606:4700:50::adf5:3aeb🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | venus.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c0eb🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | venus.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:20eb🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | venus.ns.cloudflare.com | ||||||
| A | 108.162.192.235🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | venus.ns.cloudflare.com | ||||||
| A | 172.64.32.235🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | venus.ns.cloudflare.com | ||||||
| A | 173.245.58.235🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | venus.ns.cloudflare.com | ||||||
| MX | eforward1.registrar-servers.com ⭐ | ||||||
| A | 162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES | ||||||
| PTR | eforward1.registrar-servers.com | ||||||
| PTR | eforward3.registrar-servers.com | ||||||
| MX | eforward2.registrar-servers.com ⭐ | ||||||
| A | 162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES | ||||||
| PTR | eforward2.registrar-servers.com | ||||||
| MX | eforward4.registrar-servers.com(15) | ||||||
| A | 162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES | ||||||
| PTR | eforward2.registrar-servers.com | ||||||
| MX | eforward5.registrar-servers.com(20) | ||||||
| A | 162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES | ||||||
| PTR | eforward1.registrar-servers.com | ||||||
| PTR | eforward3.registrar-servers.com | ||||||
| TXT | v=spf1 include:spf.efwd.registrar-servers.com ~all | ||||||
| HTTPS | HTTP/3, HTTP/2 ✓ hints match | ||||||
| IPv4 hints | 104.21.21.145, 172.67.199.32 | ||||||
| IPv6 hints | 2606:4700:3032::ac43:c720, 2606:4700:3037::6815:1591 | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=3, name=cloudflare-ech.com | ||||||
| SOA | carl.ns.cloudflare.comdns@cloudflare.com serial=2406430399 | ||||||
run
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.run ⭐ | ||||||
| NS | v0n1.nic.run | ||||||
| NS | v0n2.nic.run | ||||||
| NS | v0n3.nic.run | ||||||
| NS | v2n0.nic.run | ||||||
| NS | v2n1.nic.run | ||||||
| SOA | v0n0.nic.runhostmaster@donuts.email serial=1785954827 | ||||||
Same first word
Similar names
DNS History
15 records (10 active, 5 former)
●NScarl.ns.cloudflare.com2026-02-19 → 2026-08-05 · 3 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
○NSns1.vultr.com2016-12-10 → 2016-12-10 · 3 obs
○ 2026-02-19 18:43:02
○ 2026-08-05 19:06:20
○NSns2.vultr.com2016-12-10 → 2016-12-10 · 3 obs
○ 2026-02-19 18:43:02
○ 2026-08-05 19:06:20
●NSvenus.ns.cloudflare.com2026-02-19 → 2026-08-05 · 3 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
●MXeforward1.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-08-05 19:06:20
●MXeforward2.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-08-05 19:06:20
●MXeforward4.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-08-05 19:06:20
●MXeforward5.registrar-servers.com2026-02-19 → 2026-08-05 · 2 obs
● 2026-08-05 19:06:20
●A104.21.21.1452026-02-19 → 2026-08-05 · 3 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
○A127.7.7.72016-12-10 → 2016-12-10 · 3 obs
○ 2026-02-19 18:43:02
○ 2026-08-05 19:06:20
●A172.67.199.322026-02-19 → 2026-08-05 · 3 obs
● 2026-02-19 18:43:02
● 2026-08-05 19:06:20
○A2606:4700:3031::6815:15912026-02-19 → 2026-06-13 · 5 obs
● 2026-02-19 18:43:02
● 2026-06-13 03:51:18
○ 2026-07-07 16:59:12
○ 2026-08-05 19:06:20
○A2606:4700:3031::ac43:c7202026-02-19 → 2026-06-13 · 5 obs
● 2026-02-19 18:43:02
● 2026-06-13 03:51:18
○ 2026-07-07 16:59:12
○ 2026-08-05 19:06:20
●A2606:4700:3032::ac43:c7202026-07-07 → 2026-08-05 · 3 obs
● 2026-07-07 16:59:12
● 2026-08-05 19:06:20
●A2606:4700:3037::6815:15912026-07-07 → 2026-08-05 · 3 obs
● 2026-07-07 16:59:12
● 2026-08-05 19:06:20
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| run | v0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run... | 12 records |
| user.run | carl.ns.cloudflare.com, venus.ns.cloudflare.com | - |
✅ Authoritative Response
Server:172.64.33.106
NS records: carl.ns.cloudflare.com, venus.ns.cloudflare.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for user.run (unsigned zone)
⏱️ Timing
Total: 1710ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.199.32, 104.21.21.145 |
| AAAA | 2 | 2606:4700:3037::6815:1591, 2606:4700:3032::ac43:c720 |
| NS | 2 | carl.ns.cloudflare.com, venus.ns.cloudflare.com |
| MX | 4 | eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10... |
| TXT | 1 | v=spf1 include:spf.efwd.registrar-server |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | carl.ns.cloudflare.com dns.cloudflare.co |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v0n0.nic.run, v0n0.nic.run, v0n1.nic.run...)
Analysis
IP Addresses
user.run has four IP addresses: 104.21.21.145, 172.67.199.32, 2606:4700:3032::ac43:c720 and 2606:4700:3037::6815:1591.
Additional host names — www.ossjd.icu, iaipgh.org.mx, beta.teeta.cz and two others — share IP numbers with user.run.
Name Servers
DNS delegation for user.run points to two name servers: carl.ns.cloudflare.com and venus.ns.cloudflare.com.
user.run shares its name server setup with other domains, including theartneon.com, dedo.tv, yumfoody.com and two others.
user.run partially shares its NS delegation with several other domains, including 069(0x706f726e).com, alp.consulting, thebigeasy.at and two others.
These name servers are regularly seen alongside memphis.ns.cloudflare.com and olga.ns.cloudflare.com as name servers.
Host names with 6 IP numbers:
carl.ns.cloudflare.com has IP addresses 108.162.193.106, 172.64.33.106 and 173.245.59.106, plus 3 other.
venus.ns.cloudflare.com has IP addresses 108.162.192.235, 172.64.32.235 and 173.245.58.235, plus 3 other.
Mail Servers
Four mail servers handle email for user.run: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward4.registrar-servers.com and eforward5.registrar-servers.com.
user.run shares mail servers — at least in part — with other domains, including splyne.net, boardwealth.com, adlocum.com and two others.
The mail servers eforward3.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com frequently co-occur with these mail servers.
Each of eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward4.registrar-servers.com and eforward5.registrar-servers.com has one IP address. eforward1.registrar-servers.com → 162.255.118.51, eforward2.registrar-servers.com → 162.255.118.52, eforward4.registrar-servers.com → 162.255.118.52, eforward5.registrar-servers.com → 162.255.118.51.
Host names pointing to 162.255.118.51 IP addresses: eforward1.registrar-servers.com and eforward5.registrar-servers.com.
Host names pointing to 162.255.118.52 IP addresses: eforward2.registrar-servers.com and eforward4.registrar-servers.com.