🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`newopenai-proxy.normanwang628.workers.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:953d^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:b83^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.11.131^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.149.61^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.11.131, 172.67.149.61
		IPv6 hints	2606:4700:3032::ac43:953d, 2606:4700:3033::6815:b83
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=28, name=cloudflare-ech.com

`normanwang628.workers.dev`

	DNSSEC	⚠️ Not signed
	NS	`eleanor.ns.cloudflare.com` ⭐
	NS	`terin.ns.cloudflare.com`
	SOA	`eleanor.ns.cloudflare.com`dns@cloudflare.com serial=2411556909

DNS History

6 records (4 active, 2 former)

●A104.21.11.1312026-06-24 → 2026-08-17 · 2 obs

● 2026-06-24 15:57:28
● 2026-08-17 00:40:10

●A172.67.149.612026-06-24 → 2026-08-17 · 2 obs

● 2026-06-24 15:57:28
● 2026-08-17 00:40:10

○A2606:4700:3030::6815:b832026-06-24 → 2026-06-24 · 3 obs

● 2026-06-24 15:57:28
○ 2026-08-06 11:18:26
○ 2026-08-17 00:40:10

●A2606:4700:3032::ac43:953d2026-08-06 → 2026-08-17 · 3 obs

○ 2026-06-24 15:57:28
● 2026-08-06 11:18:26
● 2026-08-17 00:40:10

●A2606:4700:3033::6815:b832026-08-06 → 2026-08-17 · 3 obs

○ 2026-06-24 15:57:28
● 2026-08-06 11:18:26
● 2026-08-17 00:40:10

○A2606:4700:3037::ac43:953d2026-06-24 → 2026-06-24 · 3 obs

● 2026-06-24 15:57:28
○ 2026-08-06 11:18:26
○ 2026-08-17 00:40:10

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com...	-
workers.dev	sofia.ns.cloudflare.com, clyde.ns.cloudflare.com	-
normanwang628.workers.dev	eleanor.ns.cloudflare.com, terin.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.205

NS records: eleanor.ns.cloudflare.com, terin.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for workers.dev (unsigned zone)

⏱️ Timing

Total: 528ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.11.131, 172.67.149.61`
AAAA	2	`2606:4700:3032::ac43:953d, 2606:4700:3033::6815:b83`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`

Analysis

IP Addresses

newopenai-proxy.normanwang628.workers.dev points to the four IP addresses 104.21.11.131, 172.67.149.61, 2606:4700:3032::ac43:953d and 2606:4700:3033::6815:b83.

swiftmarinegh.com, forum.nikonrumors.com, smashingbuzz.com plus two other host names have IP numbers in common with newopenai-proxy.normanwang628.workers.dev.

newopenai-proxy.normanwang628.workers.dev - robtex.com