`1111down.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:1468^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:c056^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.20.104^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.192.86^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`cesar.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c77^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cesar.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c377^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`cesar.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2377^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`cesar.ns.cloudflare.com`
		A	108.162.195.119^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cesar.ns.cloudflare.com`
		A	162.159.44.119^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cesar.ns.cloudflare.com`
		A	172.64.35.119^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`cesar.ns.cloudflare.com`
NS	`teresa.ns.cloudflare.com`
		A	2606:4700:50::a29f:26d8^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`teresa.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2d8^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`teresa.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22d8^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`teresa.ns.cloudflare.com`
		A	108.162.194.216^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`teresa.ns.cloudflare.com`
		A	162.159.38.216^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`teresa.ns.cloudflare.com`
		A	172.64.34.216^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`teresa.ns.cloudflare.com`
MX	`mx1.qiye.aliyun.com` ⭐
		A	47.246.137.47^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
MX	`mx2.qiye.aliyun.com`⁽¹⁰⁾
		A	47.246.136.231^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
			PTR	`cz-clare.com`
			PTR	`reachsmartdwell.com`
			PTR	`wevolt.tech`
MX	`mx3.qiye.aliyun.com`⁽¹⁵⁾
		A	47.246.136.231^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
			PTR	`cz-clare.com`
			PTR	`reachsmartdwell.com`
			PTR	`wevolt.tech`
		A	47.246.137.47^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
TXT	`google-site-verification=C98gqSaUKgy0KeZ8v-o2S1prt32RGv-bOBLYhrFvlg8`
TXT	`v=spf1 include:spf.qiye.aliyun.com -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.20.104, 172.67.192.86
		IPv6 hints	2606:4700:3033::6815:1468, 2606:4700:3035::ac43:c056
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=158, name=cloudflare-ech.com
SOA	`cesar.ns.cloudflare.com`dns@cloudflare.com serial=2401367412

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1776266517

Subdomains

image.1111down.com

Same first word

1111down.com

DNS History

9 records (9 active, 0 former)

●NScesar.ns.cloudflare.com2026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●NSteresa.ns.cloudflare.com2026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●MXmx1.qiye.aliyun.com2026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●MXmx2.qiye.aliyun.com2026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●MXmx3.qiye.aliyun.com2026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●A104.21.20.1042026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●A172.67.192.862026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●A2606:4700:3033::6815:14682026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

●A2606:4700:3035::ac43:c0562026-02-17 → 2026-04-15 · 2 obs

● 2026-02-17 03:35:56
● 2026-04-15 15:22:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, j.gtld-servers.net...	-
1111down.com	teresa.ns.cloudflare.com, cesar.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.216

NS records: teresa.ns.cloudflare.com, cesar.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 1111down.com (unsigned zone)

⏱️ Timing

Total: 160ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.192.86, 104.21.20.104`
AAAA	2	`2606:4700:3033::6815:1468, 2606:4700:3035::ac43:c056`
NS	2	`cesar.ns.cloudflare.com, teresa.ns.cloudflare.com`
MX	3	`mx2.qiye.aliyun.com (pri: 10), mx3.qiye.aliyun.com (pri: 15)...`
TXT	2	`google-site-verification=C98gqSaUKgy0KeZ, v=spf1 include:spf.qiye.aliyun.com -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`cesar.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (teresa.ns.cloudflare.com, teresa.ns.cloudflare.com, teresa.ns.cloudflare.com...)

Analysis

Hierarchy

The parent of image.1111down.com is 1111down.com.

IP Addresses

1111down.com resolves to four IP numbers: 2606:4700:3033::6815:1468, 2606:4700:3035::ac43:c056, 104.21.20.104 and 172.67.192.86.

Other host names such as teqazw.com, quendara.click, naa.com.eg, yanengcc.com and flowfutureconsulting.digital share IPs with 1111down.com.

Name Servers

1111down.com is delegated to two name servers: cesar.ns.cloudflare.com and teresa.ns.cloudflare.com.

1111down.com shares the same name server setup as dmuuc.org, sunoptic.com, scriptsclones.com, bcpoprad.sk and tickets-loisirs-caf-indre.fr.

1111down.com at least partially shares name servers with other domains, for instance 024fan.com, bedrocksg.com, superpositionkitty.com, meryemzakri.com and vectorconnect.co.uk.

These name servers are commonly used together with jason.ns.cloudflare.com, sydney.ns.cloudflare.com and cody.ns.cloudflare.com.

Host names with six IP numbers:

cesar.ns.cloudflare.com points to 2606:4700:58::a29f:2c77, 2803:f800:50::6ca2:c377, 2a06:98c1:50::ac40:2377, 108.162.195.119, 162.159.44.119 and 172.64.35.119.

teresa.ns.cloudflare.com points to 2606:4700:50::a29f:26d8, 2803:f800:50::6ca2:c2d8, 2a06:98c1:50::ac40:22d8, 108.162.194.216, 162.159.38.216 and 172.64.34.216.

Mail Servers

Three mail servers handle 1111down.com: mx1.qiye.aliyun.com, mx2.qiye.aliyun.com and mx3.qiye.aliyun.com.

1111down.com shares at least partially some mail servers with other domains, including tobsmart.com, ifishgame.com, sumaopai.com, hmkx.cn and shengbangjixie.cn.

these mail servers are commonly used with mxn.mxhichina.com and mxw.mxhichina.com.

Two-IP host names: mx3.qiye.aliyun.com points to 47.246.136.231 and 47.246.137.47.

One-IP host names: mx1.qiye.aliyun.com points to 47.246.137.47 and mx2.qiye.aliyun.com points to 47.246.136.231.

Hosts pointing to 47.246.136.231: mx3.qiye.aliyun.com and mx2.qiye.aliyun.com.

Hosts pointing to 47.246.137.47: mx3.qiye.aliyun.com and mx1.qiye.aliyun.com.

1111down.com - robtex.com

1111down.com

com

Subdomains

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

Hierarchy

IP Addresses

Name Servers

Mail Servers

`1111down.com`

`com`