`clhhid.run`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:564f^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:d8e9^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.86.79^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.216.233^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brett.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b4c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c14c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brett.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:214c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brett.ns.cloudflare.com`
		A	108.162.193.76^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
		A	172.64.33.76^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
		A	173.245.59.76^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
NS	`phoenix.ns.cloudflare.com`
		A	2606:4700:50::a29f:26c9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`phoenix.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2c9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`phoenix.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22c9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`phoenix.ns.cloudflare.com`
		A	108.162.194.201^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`phoenix.ns.cloudflare.com`
		A	162.159.38.201^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`phoenix.ns.cloudflare.com`
		A	172.64.34.201^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`phoenix.ns.cloudflare.com`
TXT	`google-site-verification=J-pI3Lxg1TJZrDq_5kYw0zvkYqn4hPTW4x1GI1Qzk18`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.86.79, 172.67.216.233
		IPv6 hints	2606:4700:3031::6815:564f, 2606:4700:3036::ac43:d8e9
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=16, name=cloudflare-ech.com
SOA	`brett.ns.cloudflare.com`dns@cloudflare.com serial=2400181720

`run`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.run` ⭐
	NS	`v0n1.nic.run`
	NS	`v0n2.nic.run`
	NS	`v0n3.nic.run`
	NS	`v2n0.nic.run`
	NS	`v2n1.nic.run`
	SOA	`v0n0.nic.run`hostmaster@donuts.email serial=1775939121

⚠️ On DNS blocklist: tif

Subdomains

rz.clhhid.run

Same first word

clhhid.run

DNS History

8 records (6 active, 2 former)

●NSbrett.ns.cloudflare.com2026-02-22 → 2026-04-11 · 2 obs

● 2026-02-22 22:03:26
● 2026-04-11 20:51:28

●NSphoenix.ns.cloudflare.com2026-02-22 → 2026-04-11 · 2 obs

● 2026-02-22 22:03:26
● 2026-04-11 20:51:28

●A104.21.86.792026-02-22 → 2026-04-11 · 5 obs

● 2026-02-22 22:03:26
● 2026-03-20 10:31:34
○ 2026-03-23 02:15:34
● 2026-03-30 18:59:38
● 2026-04-11 20:51:28

○A172.64.80.12026-03-23 → 2026-03-23 · 4 obs

○ 2026-03-20 10:31:34
● 2026-03-23 02:15:34
○ 2026-03-30 18:59:38
○ 2026-04-11 20:51:28

●A172.67.216.2332026-02-22 → 2026-04-11 · 5 obs

● 2026-02-22 22:03:26
● 2026-03-20 10:31:34
○ 2026-03-23 02:15:34
● 2026-03-30 18:59:38
● 2026-04-11 20:51:28

○A2606:4700:130:436c:6f75:6466:6c61:72652026-02-22 → 2026-03-23 · 6 obs

● 2026-02-22 22:03:26
○ 2026-02-23 12:56:48
○ 2026-03-20 10:31:34
● 2026-03-23 02:15:34
○ 2026-03-30 18:59:38
○ 2026-04-11 20:51:28

●A2606:4700:3031::6815:564f2026-02-23 → 2026-04-11 · 6 obs

○ 2026-02-22 22:03:26
● 2026-02-23 12:56:48
● 2026-03-20 10:31:34
○ 2026-03-23 02:15:34
● 2026-03-30 18:59:38
● 2026-04-11 20:51:28

●A2606:4700:3036::ac43:d8e92026-02-23 → 2026-04-11 · 6 obs

○ 2026-02-22 22:03:26
● 2026-02-23 12:56:48
● 2026-03-20 10:31:34
○ 2026-03-23 02:15:34
● 2026-03-30 18:59:38
● 2026-04-11 20:51:28

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
run	v0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run...	12 records
clhhid.run	phoenix.ns.cloudflare.com, brett.ns.cloudflare.com	-

✅ Authoritative Response

Server:162.159.38.201

NS records: phoenix.ns.cloudflare.com, brett.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for clhhid.run (unsigned zone)

⏱️ Timing

Total: 428ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.86.79, 172.67.216.233`
AAAA	2	`2606:4700:3036::ac43:d8e9, 2606:4700:3031::6815:564f`
NS	2	`brett.ns.cloudflare.com, phoenix.ns.cloudflare.com`
TXT	1	`google-site-verification=J-pI3Lxg1TJZrDq`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brett.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n0.nic.run, v0n1.nic.run...)

Analysis

Hierarchy

The parent of rz.clhhid.run is clhhid.run.

IP Addresses

clhhid.run maps to four IP numbers: 2606:4700:3031::6815:564f, 2606:4700:3036::ac43:d8e9, 104.21.86.79 and 172.67.216.233.

other host names include lfbwgy.com, www.ccn-week.com, www.pholfoodmafia.com, host7.autogeekonline.net and old-credit-4e56.wwwdkz6026.workers.dev; they share IP numbers with clhhid.run.

Name Servers

Two name servers brett.ns.cloudflare.com and phoenix.ns.cloudflare.com handle the delegation for clhhid.run.

clhhid.run shares the same name server setup as other domains, for instance hyperonline.dev, verifycam.com, mejadokter.com, dkkckf.live and talas89kece.com.

clhhid.run at least partially shares name servers with other domains, for instance metasdn.net, whitehartservicestation.co.uk, pafikisaran.org, knotsdesktop.org and shopbilet.ru.

These name servers are commonly used with the following: lamar.ns.cloudflare.com, cortney.ns.cloudflare.com, titan.ns.cloudflare.com and dawn.ns.cloudflare.com.

Six IP addresses per host:

brett.ns.cloudflare.com points to 2606:4700:58::adf5:3b4c, 2803:f800:50::6ca2:c14c, 2a06:98c1:50::ac40:214c, 108.162.193.76, 172.64.33.76 and 173.245.59.76; phoenix.ns.cloudflare.com points to 2606:4700:50::a29f:26c9, 2803:f800:50::6ca2:c2c9, 2a06:98c1:50::ac40:22c9, 108.162.194.201, 162.159.38.201 and 172.64.34.201

clhhid.run - robtex.com

clhhid.run

run