🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`claudeapi.agicmoon-dff.workers.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:20a2^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:98df^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.32.162^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.152.223^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.32.162, 172.67.152.223
		IPv6 hints	2606:4700:3033::6815:20a2, 2606:4700:3036::ac43:98df
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=12, name=cloudflare-ech.com

`agicmoon-dff.workers.dev`

	DNSSEC	⚠️ Not signed
	NS	`anna.ns.cloudflare.com` ⭐
	NS	`chip.ns.cloudflare.com`
	SOA	`anna.ns.cloudflare.com`dns@cloudflare.com serial=2411970741

Same first word

Similar names

apiclaude.cc

apiclaude.ru

apiclaude.org

apiclaude.space

apiclaude.workers.dev

apiclaude.net

ilapeduca.net

DNS History

10 records (4 active, 6 former)

●A104.21.32.1622026-04-12 → 2026-08-15 · 9 obs

● 2026-04-12 06:40:22
● 2026-05-02 17:52:00
○ 2026-05-02 20:46:56
○ 2026-05-15 11:51:58
● 2026-05-15 12:22:36
● 2026-05-25 15:09:50
○ 2026-05-28 08:44:08
● 2026-05-29 11:41:18
● 2026-08-15 06:53:36

●A172.67.152.2232026-04-12 → 2026-08-15 · 9 obs

○A188.114.96.02026-05-02 → 2026-05-28 · 8 obs

○ 2026-05-02 17:52:00
● 2026-05-02 20:46:56
● 2026-05-15 11:51:58
○ 2026-05-15 12:22:36
○ 2026-05-25 15:09:50
● 2026-05-28 08:44:08
○ 2026-05-29 11:41:18
○ 2026-08-15 06:53:36

○A188.114.97.02026-05-02 → 2026-05-28 · 8 obs

○ 2026-05-02 17:52:00
● 2026-05-02 20:46:56
● 2026-05-15 11:51:58
○ 2026-05-15 12:22:36
○ 2026-05-25 15:09:50
● 2026-05-28 08:44:08
○ 2026-05-29 11:41:18
○ 2026-08-15 06:53:36

○A2606:4700:3032::6815:20a22026-04-12 → 2026-05-29 · 10 obs

●A2606:4700:3033::6815:20a22026-07-01 → 2026-08-15 · 3 obs

○ 2026-05-29 11:41:18
● 2026-07-01 02:24:56
● 2026-08-15 06:53:36

○A2606:4700:3034::ac43:98df2026-04-12 → 2026-05-29 · 10 obs

●A2606:4700:3036::ac43:98df2026-07-01 → 2026-08-15 · 3 obs

○ 2026-05-29 11:41:18
● 2026-07-01 02:24:56
● 2026-08-15 06:53:36

○A2a06:98c1:3120::2026-05-02 → 2026-05-28 · 8 obs

○ 2026-05-02 17:52:00
● 2026-05-02 20:46:56
● 2026-05-15 11:51:58
○ 2026-05-15 12:22:36
○ 2026-05-25 15:09:50
● 2026-05-28 08:44:08
○ 2026-05-29 11:41:18
○ 2026-08-15 06:53:36

○A2a06:98c1:3121::2026-05-02 → 2026-05-28 · 8 obs

○ 2026-05-02 17:52:00
● 2026-05-02 20:46:56
● 2026-05-15 11:51:58
○ 2026-05-15 12:22:36
○ 2026-05-25 15:09:50
● 2026-05-28 08:44:08
○ 2026-05-29 11:41:18
○ 2026-08-15 06:53:36

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld4.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...	-
workers.dev	sofia.ns.cloudflare.com, clyde.ns.cloudflare.com	-
agicmoon-dff.workers.dev	anna.ns.cloudflare.com, chip.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.102

NS records: anna.ns.cloudflare.com, chip.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for workers.dev (unsigned zone)

⏱️ Timing

Total: 374ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.32.162, 172.67.152.223`
AAAA	2	`2606:4700:3033::6815:20a2, 2606:4700:3036::ac43:98df`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`

Analysis

IP Addresses

claudeapi.agicmoon-dff.workers.dev points to the four IP addresses 104.21.32.162, 172.67.152.223, 2606:4700:3033::6815:20a2 and 2606:4700:3036::ac43:98df.

xbksp05.xyz, coatesdatastrategies.com, morflax.com plus two other host names have IP numbers in common with claudeapi.agicmoon-dff.workers.dev.

claudeapi.agicmoon-dff.workers.dev - robtex.com