`heybytedance.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:8ac6^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:46bb^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.70.187^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.138.198^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`danica.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26bb^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`danica.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2bb^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`danica.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22bb^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`danica.ns.cloudflare.com`
		A	108.162.194.187^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`danica.ns.cloudflare.com`
		A	162.159.38.187^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`danica.ns.cloudflare.com`
		A	172.64.34.187^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`danica.ns.cloudflare.com`
NS	`ganz.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c28^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ganz.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c328^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ganz.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2328^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ganz.ns.cloudflare.com`
		A	108.162.195.40^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ganz.ns.cloudflare.com`
		A	162.159.44.40^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ganz.ns.cloudflare.com`
		A	172.64.35.40^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ganz.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.70.187, 172.67.138.198
		IPv6 hints	2606:4700:3034::ac43:8ac6, 2606:4700:3036::6815:46bb
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=184, name=cloudflare-ech.com
SOA	`danica.ns.cloudflare.com`dns@cloudflare.com serial=2399175019

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775946302

Subdomains

www.heybytedance.com

Same first word

heybytedance.com

DNS History

6 records (6 active, 0 former)

●NSdanica.ns.cloudflare.com2026-03-21 → 2026-04-11 · 2 obs

● 2026-03-21 23:33:44
● 2026-04-11 22:44:12

●NSganz.ns.cloudflare.com2026-03-21 → 2026-04-11 · 2 obs

● 2026-03-21 23:33:44
● 2026-04-11 22:44:12

●A104.21.70.1872026-03-21 → 2026-04-11 · 2 obs

● 2026-03-21 23:33:44
● 2026-04-11 22:44:12

●A172.67.138.1982026-03-21 → 2026-04-11 · 2 obs

● 2026-03-21 23:33:44
● 2026-04-11 22:44:12

●A2606:4700:3034::ac43:8ac62026-03-21 → 2026-04-11 · 2 obs

● 2026-03-21 23:33:44
● 2026-04-11 22:44:12

●A2606:4700:3036::6815:46bb2026-03-21 → 2026-04-11 · 2 obs

● 2026-03-21 23:33:44
● 2026-04-11 22:44:12

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
heybytedance.com	danica.ns.cloudflare.com, ganz.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.40

NS records: danica.ns.cloudflare.com, ganz.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for heybytedance.com (unsigned zone)

⏱️ Timing

Total: 119ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.138.198, 104.21.70.187`
AAAA	2	`2606:4700:3036::6815:46bb, 2606:4700:3034::ac43:8ac6`
NS	2	`danica.ns.cloudflare.com, ganz.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`danica.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (danica.ns.cloudflare.com, danica.ns.cloudflare.com, danica.ns.cloudflare.com...)

Analysis

Hierarchy

heybytedance.com is the parent of www.heybytedance.com.

IP Addresses

heybytedance.com resolves to four IPs: 2606:4700:3034::ac43:8ac6, 2606:4700:3036::6815:46bb, 104.21.70.187 and 172.67.138.198.

Other host names, for instance acushlab.cheap, onirata.gr, kdax.net, praisefm.net and ccthn.cn share IP numbers with heybytedance.com.

Name Servers

heybytedance.com has two name servers: danica.ns.cloudflare.com and ganz.ns.cloudflare.com.

heybytedance.com shares the same name server setup as other domains, for example yuheqi.com, zhuohongzhizhou.com, deyuanlx.com, ancelbio.cn and 346858.com.

heybytedance.com shares some name servers with other domains, for example 231.33.199.in-addr.arpa, expresstrip.lt, compilation.cc, latrota.com and giant-shop.ru.

These name servers are commonly used together with natasha.ns.cloudflare.com and nile.ns.cloudflare.com.

Host names with six IP numbers: danica.ns.cloudflare.com points to: 2606:4700:50::a29f:26bb, 2803:f800:50::6ca2:c2bb, 2a06:98c1:50::ac40:22bb, 108.162.194.187, 162.159.38.187 and 172.64.34.187; ganz.ns.cloudflare.com points to: 2606:4700:58::a29f:2c28, 2803:f800:50::6ca2:c328, 2a06:98c1:50::ac40:2328, 108.162.195.40, 162.159.44.40 and 172.64.35.40.

heybytedance.com - robtex.com