`download4all.run`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:9506^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:1d82^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.29.130^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.149.6^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bayan.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b48^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bayan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c148^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bayan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2148^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bayan.ns.cloudflare.com`
		A	108.162.193.72^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bayan.ns.cloudflare.com`
		A	172.64.33.72^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bayan.ns.cloudflare.com`
		A	173.245.59.72^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bayan.ns.cloudflare.com`
NS	`harleigh.ns.cloudflare.com`
		A	2606:4700:50::a29f:263a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c23a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`harleigh.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:223a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`harleigh.ns.cloudflare.com`
		A	108.162.194.58^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
		A	162.159.38.58^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
		A	172.64.34.58^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harleigh.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.29.130, 172.67.149.6
		IPv6 hints	2606:4700:3034::ac43:9506, 2606:4700:3037::6815:1d82
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=94, name=cloudflare-ech.com
SOA	`bayan.ns.cloudflare.com`dns@cloudflare.com serial=2410638640

`run`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.run` ⭐
	NS	`v0n1.nic.run`
	NS	`v0n2.nic.run`
	NS	`v0n3.nic.run`
	NS	`v2n0.nic.run`
	NS	`v2n1.nic.run`
	SOA	`v0n0.nic.run`hostmaster@donuts.email serial=1785166654

⚠️ On DNS blocklist: tif

Same first word

download4all.com

download4all.run

download4all.de

DNS History

8 records (6 active, 2 former)

●NSbayan.ns.cloudflare.com2026-05-29 → 2026-07-27 · 2 obs

● 2026-05-29 12:54:42
● 2026-07-27 16:20:10

●NSharleigh.ns.cloudflare.com2026-05-29 → 2026-07-27 · 2 obs

● 2026-05-29 12:54:42
● 2026-07-27 16:20:10

●A104.21.29.1302026-05-29 → 2026-07-27 · 2 obs

● 2026-05-29 12:54:42
● 2026-07-27 16:20:10

●A172.67.149.62026-05-29 → 2026-07-27 · 2 obs

● 2026-05-29 12:54:42
● 2026-07-27 16:20:10

○A2606:4700:3034::6815:1d822026-05-29 → 2026-05-29 · 2 obs

● 2026-05-29 12:54:42
○ 2026-07-27 16:20:10

●A2606:4700:3034::ac43:95062026-07-27 → 2026-07-27 · 2 obs

○ 2026-05-29 12:54:42
● 2026-07-27 16:20:10

○A2606:4700:3036::ac43:95062026-05-29 → 2026-05-29 · 2 obs

● 2026-05-29 12:54:42
○ 2026-07-27 16:20:10

●A2606:4700:3037::6815:1d822026-07-27 → 2026-07-27 · 2 obs

○ 2026-05-29 12:54:42
● 2026-07-27 16:20:10

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
run	v0n2.nic.run, v2n0.nic.run, v0n1.nic.run, v2n1.nic.run...	12 records
download4all.run	bayan.ns.cloudflare.com, harleigh.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.72

NS records: bayan.ns.cloudflare.com, harleigh.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for download4all.run (unsigned zone)

⏱️ Timing

Total: 336ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.29.130, 172.67.149.6`
AAAA	2	`2606:4700:3034::ac43:9506, 2606:4700:3037::6815:1d82`
NS	2	`bayan.ns.cloudflare.com, harleigh.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bayan.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n1.nic.run, v0n2.nic.run...)

Analysis

IP Addresses

download4all.run directs to four IP numbers, which are 104.21.29.130, 172.67.149.6, 2606:4700:3034::ac43:9506 and 2606:4700:3037::6815:1d82.

Among the host names that share IP numbers with download4all.run are pop303ini.vip, sacatulicencia.cl, relatie-vlaanderen.be and two others.

Name Servers

download4all.run uses two name servers for its delegation: bayan.ns.cloudflare.com and harleigh.ns.cloudflare.com.

download4all.run has the same name server delegation as a number of other domains, such as mainstreetads.com, downloadtopwin.run, downloadonwindows.run and two more.

There is at least partial name server overlap between download4all.run and other domains — trustcert.net, stlukesonline.org, 9465222.com and two more among them.

These name servers are routinely co-deployed with the name servers donna.ns.cloudflare.com, armando.ns.cloudflare.com, peyton.ns.cloudflare.com and two others.

Host names resolving to 6 IP numbers:

Hostname bayan.ns.cloudflare.com directs to 108.162.193.72, 172.64.33.72 and 173.245.59.72 along with 3 other IP addresses.

Hostname harleigh.ns.cloudflare.com directs to 108.162.194.58, 162.159.38.58 and 172.64.34.58 along with 3 other IP addresses.

download4all.run - robtex.com