`sonomavalleyworms.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:13c^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:80b4^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.1.60^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.128.180^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`denver.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cc4^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`denver.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3c4^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`denver.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23c4^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`denver.ns.cloudflare.com`
		A	108.162.195.196^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`denver.ns.cloudflare.com`
		A	162.159.44.196^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`denver.ns.cloudflare.com`
		A	172.64.35.196^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`denver.ns.cloudflare.com`
NS	`nicole.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ad3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nicole.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0d3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`nicole.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20d3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`nicole.ns.cloudflare.com`
		A	108.162.192.211^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nicole.ns.cloudflare.com`
		A	172.64.32.211^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nicole.ns.cloudflare.com`
		A	173.245.58.211^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nicole.ns.cloudflare.com`
MX	`mx1-hosting.jellyfish.systems` ⭐
		A	162.255.118.28^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`oxse3a.privateemail.com`
MX	`mx2-hosting.jellyfish.systems`⁽¹⁰⁾
		A	162.255.118.29^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`oxse2b.privateemail.com`
MX	`mx3-hosting.jellyfish.systems`⁽²⁰⁾
		A	162.255.118.13^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`mx3-hosting.jellyfish.systems`
TXT	`v=spf1 +a +mx +ip4:66.29.141.239 include:spf.web-hosting.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.1.60, 172.67.128.180
		IPv6 hints	2606:4700:3030::6815:13c, 2606:4700:3034::ac43:80b4
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=65, name=cloudflare-ech.com
SOA	`denver.ns.cloudflare.com`dns@cloudflare.com serial=2410277139

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785837792

Same first word

sonomavalleyworms.com

DNS History

19 records (9 active, 10 former)

●NSdenver.ns.cloudflare.com2026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

●NSnicole.ns.cloudflare.com2026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

○NSns49.domaincontrol.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

○NSns50.domaincontrol.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

○MXalt1.aspmx.l.google.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

○MXalt2.aspmx.l.google.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

○MXaspmx.l.google.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

○MXaspmx2.googlemail.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

○MXaspmx3.googlemail.com2015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

●MXmx1-hosting.jellyfish.systems2026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

●MXmx2-hosting.jellyfish.systems2026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

●MXmx3-hosting.jellyfish.systems2026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

●A104.21.1.602026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

●A172.67.128.1802026-04-22 → 2026-08-04 · 3 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
● 2026-08-04 10:34:04

●A2606:4700:3030::6815:13c2026-07-17 → 2026-08-04 · 3 obs

○ 2026-04-22 02:35:56
● 2026-07-17 21:39:48
● 2026-08-04 10:34:04

○A2606:4700:3032::ac43:80b42026-04-22 → 2026-04-22 · 4 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
○ 2026-07-17 21:39:48
○ 2026-08-04 10:34:04

○A2606:4700:3034::6815:13c2026-04-22 → 2026-04-22 · 4 obs

○ 2020-02-21 23:59:22
● 2026-04-22 02:35:56
○ 2026-07-17 21:39:48
○ 2026-08-04 10:34:04

●A2606:4700:3034::ac43:80b42026-07-17 → 2026-08-04 · 3 obs

○ 2026-04-22 02:35:56
● 2026-07-17 21:39:48
● 2026-08-04 10:34:04

○A98.129.229.2322015-07-19 → 2020-02-21 · 4 obs

● 2015-07-19 18:04:38
● 2020-02-21 23:59:22
○ 2026-04-22 02:35:56
○ 2026-08-04 10:34:04

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, h.gtld-servers.net, j.gtld-servers.net, m.gtld-servers.net...	-
sonomavalleyworms.com	nicole.ns.cloudflare.com, denver.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.196

NS records: nicole.ns.cloudflare.com, denver.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for sonomavalleyworms.com (unsigned zone)

⏱️ Timing

Total: 137ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.128.180, 104.21.1.60`
AAAA	2	`2606:4700:3030::6815:13c, 2606:4700:3034::ac43:80b4`
NS	2	`denver.ns.cloudflare.com, nicole.ns.cloudflare.com`
MX	3	`mx2-hosting.jellyfish.systems (pri: 10), mx3-hosting.jellyfish.systems (pri: 20)...`
TXT	1	`v=spf1 +a +mx +ip4:66.29.141.239 include`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`denver.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (nicole.ns.cloudflare.com, nicole.ns.cloudflare.com, nicole.ns.cloudflare.com...)

Analysis

IP Addresses

sonomavalleyworms.com points to the four IP addresses 104.21.1.60, 172.67.128.180, 2606:4700:3030::6815:13c and 2606:4700:3034::ac43:80b4.

alephnodedet.co.il, m.ebbftjgx.cfd, tcor.cn plus two other host names have IP numbers in common with sonomavalleyworms.com.

Name Servers

The NS records for sonomavalleyworms.com delegate to denver.ns.cloudflare.com and nicole.ns.cloudflare.com.

The name server configuration of sonomavalleyworms.com is shared with other domains, for instance odonnell-green.com, thrive-quarrytrails.com, paologarrisi.com and two others.

There is at least partial name server overlap between sonomavalleyworms.com and other domains — tobaccovalleybusinesspark.com, wadhah.com, betarepo.com and two more among them.

The name servers susan.ns.cloudflare.com, kyree.ns.cloudflare.com and kinsley.ns.cloudflare.com are often found in combination with these name servers.

Hosts with 6 IP addresses each:

denver.ns.cloudflare.com maps to 108.162.195.196, 162.159.44.196, 172.64.35.196 and 3 additional IP addresses.

nicole.ns.cloudflare.com maps to 108.162.192.211, 172.64.32.211, 173.245.58.211 and 3 additional IP addresses.

Mail Servers

Incoming mail for sonomavalleyworms.com is delivered via three mail servers: mx1-hosting.jellyfish.systems, mx2-hosting.jellyfish.systems and mx3-hosting.jellyfish.systems.

At least some of the mail servers used by sonomavalleyworms.com are shared with other domains: netgot.com, kdjfjks.site, cosclan.org and two others among them.

mx1-hosting.jellyfish.systems has IP address 162.255.118.28, mx2-hosting.jellyfish.systems has IP address 162.255.118.29 and mx3-hosting.jellyfish.systems has IP address 162.255.118.13 — one address each.

sonomavalleyworms.com - robtex.com