`openai-billing.ishadows.workers.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:c82a^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:4a43^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.74.67^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.200.42^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.74.67, 172.67.200.42
		IPv6 hints	2606:4700:3031::ac43:c82a, 2606:4700:3035::6815:4a43
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=180, name=cloudflare-ech.com

`ishadows.workers.dev`

	DNSSEC	⚠️ Not signed
	NS	`harlee.ns.cloudflare.com` ⭐
	NS	`simon.ns.cloudflare.com`
	SOA	`harlee.ns.cloudflare.com`dns@cloudflare.com serial=2407894730

Same first word

openai-billing.pages.dev

openai-billing.es

DNS History

8 records (4 active, 4 former)

●A104.21.74.672026-06-25 → 2026-07-16 · 4 obs

● 2026-06-25 14:15:28
○ 2026-07-14 20:16:34
● 2026-07-16 01:01:50
● 2026-07-16 01:01:52

●A172.67.200.422026-06-25 → 2026-07-16 · 4 obs

● 2026-06-25 14:15:28
○ 2026-07-14 20:16:34
● 2026-07-16 01:01:50
● 2026-07-16 01:01:52

○A188.114.96.02026-07-14 → 2026-07-14 · 4 obs

○ 2026-06-25 14:15:28
● 2026-07-14 20:16:34
○ 2026-07-16 01:01:50
○ 2026-07-16 01:01:52

○A188.114.97.02026-07-14 → 2026-07-14 · 4 obs

○ 2026-06-25 14:15:28
● 2026-07-14 20:16:34
○ 2026-07-16 01:01:50
○ 2026-07-16 01:01:52

●A2606:4700:3031::ac43:c82a2026-06-25 → 2026-07-16 · 4 obs

● 2026-06-25 14:15:28
○ 2026-07-14 20:16:34
● 2026-07-16 01:01:50
● 2026-07-16 01:01:52

●A2606:4700:3035::6815:4a432026-06-25 → 2026-07-16 · 4 obs

● 2026-06-25 14:15:28
○ 2026-07-14 20:16:34
● 2026-07-16 01:01:50
● 2026-07-16 01:01:52

○A2a06:98c1:3120::2026-07-14 → 2026-07-14 · 4 obs

○ 2026-06-25 14:15:28
● 2026-07-14 20:16:34
○ 2026-07-16 01:01:50
○ 2026-07-16 01:01:52

○A2a06:98c1:3121::2026-07-14 → 2026-07-14 · 4 obs

○ 2026-06-25 14:15:28
● 2026-07-14 20:16:34
○ 2026-07-16 01:01:50
○ 2026-07-16 01:01:52

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	-
workers.dev	sofia.ns.cloudflare.com, clyde.ns.cloudflare.com	-
ishadows.workers.dev	harlee.ns.cloudflare.com, simon.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.232

NS records: harlee.ns.cloudflare.com, simon.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for workers.dev (unsigned zone)

⏱️ Timing

Total: 2081ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.200.42, 104.21.74.67`
AAAA	2	`2606:4700:3031::ac43:c82a, 2606:4700:3035::6815:4a43`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`

Analysis

IP Addresses

openai-billing.ishadows.workers.dev resolves to four IP addresses: 104.21.74.67, 172.67.200.42, 2606:4700:3031::ac43:c82a and 2606:4700:3035::6815:4a43.

mccarterhiggins.com, cnlifeng.com, www.efurawa.top and two other host names share IP numbers with openai-billing.ishadows.workers.dev.

openai-billing.ishadows.workers.dev - robtex.com