`1.iweisen.workers.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:a5f4^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:b73^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.11.115^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.165.244^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.11.115, 172.67.165.244
		IPv6 hints	2606:4700:3033::ac43:a5f4, 2606:4700:3035::6815:b73
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=124, name=cloudflare-ech.com

`iweisen.workers.dev`

	DNSSEC	⚠️ Not signed
	NS	`paislee.ns.cloudflare.com` ⭐
	NS	`stan.ns.cloudflare.com`
	SOA	`paislee.ns.cloudflare.com`dns@cloudflare.com serial=2408655172

Same first word

1.life

1.live

1.dating

1.com.co

1.gold

1.dev

1.de

1.new

1.world

1.gy

1.ph

1.rw

1.casa

1.cz

1.club

1.mk

1.group

1.je

1.ht

1.email

1.best

1.azurewebsites.net

1.zt.ua

1.st

1.se

1.my

1.wiki

1.rsc.cdn77.org

1.dk

1.gx.cn

1.in-addr.arpa

1.express

1.fit

1.pics

1.io

1.hr

1.nf

1.ee

1.com.cn

1.mba

1.net.cn

1.org

1.xyz

1.info

1.abogado

1.sv

1.fitness

1.blogspot.com

1.co.kr

1.hn

1.canva-apps.cn

1.gg

1.cafe

1.rodeo

1.mcdir.ru

1.agency

1.care

1.com.mk

1.crimea.ua

1.vg

1.biz

1.plus

1.berlin

1.irish

1.academy

1.edu.pl

1.dance

1.gd.cn

1.githubusercontent.com

1.is

1.wedding

1.ro

1.gmbh

1.org.ee

1.gz.cn

1.cm

1.com.hr

1.day

1.run

1.sc

1.movie

1.com.pl

1.gs

1.app

1.pro

1.blogspot.ae

1.od.ua

1.et

1.ly

1.googlecode.com

1.bet

1.s3.amazonaws.com

1.blogspot.be

1.wtf

1.com.ua

1.ha.cn

1.serveftp.com

1.lol

1.pl.ua

1.s3-website-us-east-1.amazonaws.com

1.help

1.cx

1.team

1.events

1.kz

1.(0x736578)y

1.cards

1.bj.cn

1.london

1.sh

1.hm

1.xj.cn

1.digital

1.fund

1.am

1.hopto.org

1.uy

1.gs.cn

1.org.mx

1.com.ar

1.fish

1.vet

1.com.vn

1.fashion

1.kg

1.wine

1.fr

1.tt

1.cleaning

1.cn

1.nz

1.city

1.house

1.country

1.la

DNS History

6 records (4 active, 2 former)

●A104.21.11.1152026-02-20 → 2026-08-01 · 2 obs

● 2026-02-20 22:19:02
● 2026-08-01 09:03:02

●A172.67.165.2442026-02-20 → 2026-08-01 · 2 obs

● 2026-02-20 22:19:02
● 2026-08-01 09:03:02

●A2606:4700:3033::ac43:a5f42026-08-01 → 2026-08-01 · 2 obs

○ 2026-04-19 19:42:24
● 2026-08-01 09:03:02

●A2606:4700:3035::6815:b732026-08-01 → 2026-08-01 · 2 obs

○ 2026-04-19 19:42:24
● 2026-08-01 09:03:02

○A2606:4700:3035::ac43:a5f42026-02-20 → 2026-04-19 · 3 obs

● 2026-02-20 22:19:02
● 2026-04-19 19:42:24
○ 2026-08-01 09:03:02

○A2606:4700:3036::6815:b732026-02-20 → 2026-04-19 · 3 obs

● 2026-02-20 22:19:02
● 2026-04-19 19:42:24
○ 2026-08-01 09:03:02

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...	10 records
workers.dev	sofia.ns.cloudflare.com, clyde.ns.cloudflare.com	-
iweisen.workers.dev	paislee.ns.cloudflare.com, stan.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.183

NS records: paislee.ns.cloudflare.com, stan.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for workers.dev (unsigned zone)

⏱️ Timing

Total: 747ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.165.244, 104.21.11.115`
AAAA	2	`2606:4700:3033::ac43:a5f4, 2606:4700:3035::6815:b73`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`

📌 Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)

Analysis

IP Addresses

1.iweisen.workers.dev directs to four IP numbers, which are 104.21.11.115, 172.67.165.244, 2606:4700:3033::ac43:a5f4 and 2606:4700:3035::6815:b73.

bigwinxe.com, youke360.com.cn, www.altoner.com plus two other host names have IP numbers in common with 1.iweisen.workers.dev.

1.iweisen.workers.dev - robtex.com