`whichdagent.shop`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:a5a2^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:1005^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.16.5^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.165.162^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dahlia.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a59^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dahlia.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c059^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dahlia.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2059^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dahlia.ns.cloudflare.com`
		A	108.162.192.89^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dahlia.ns.cloudflare.com`
		A	172.64.32.89^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dahlia.ns.cloudflare.com`
		A	173.245.58.89^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dahlia.ns.cloudflare.com`
NS	`wells.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c7d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wells.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c37d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`wells.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:237d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`wells.ns.cloudflare.com`
		A	108.162.195.125^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wells.ns.cloudflare.com`
		A	162.159.44.125^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wells.ns.cloudflare.com`
		A	172.64.35.125^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wells.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.16.5, 172.67.165.162
		IPv6	2606:4700:3032::ac43:a5a2, 2606:4700:3037::6815:1005
SOA	`dahlia.ns.cloudflare.com`dns@cloudflare.com serial=2396596564

`shop`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gmoregistry.net` ⭐
	NS	`b.gmoregistry.net`
	NS	`k.gmoregistry.net`
	NS	`l.gmoregistry.net`
	SOA	`a.gmoregistry.net`noc@gmoregistry.net serial=1774165612

⚠️ On DNS blocklist: tif

Subdomains

www.whichdagent.shop

Same first word

whichdagent.shop

DNS History

10 records (6 active, 4 former)

●NSdahlia.ns.cloudflare.com2026-02-16 → 2026-03-23 · 2 obs

● 2026-02-16 13:01:58
● 2026-03-23 09:04:26

●NSwells.ns.cloudflare.com2026-02-16 → 2026-03-23 · 2 obs

● 2026-02-16 13:01:58
● 2026-03-23 09:04:26

●A104.21.16.52026-02-16 → 2026-03-23 · 3 obs

● 2026-02-16 13:01:58
○ 2026-03-11 16:46:06
● 2026-03-23 09:04:26

●A172.67.165.1622026-02-16 → 2026-03-23 · 3 obs

● 2026-02-16 13:01:58
○ 2026-03-11 16:46:06
● 2026-03-23 09:04:26

○A188.114.96.02026-03-11 → 2026-03-11 · 3 obs

○ 2026-02-16 13:01:58
● 2026-03-11 16:46:06
○ 2026-03-23 09:04:26

○A188.114.97.02026-03-11 → 2026-03-11 · 3 obs

○ 2026-02-16 13:01:58
● 2026-03-11 16:46:06
○ 2026-03-23 09:04:26

●A2606:4700:3032::ac43:a5a22026-02-16 → 2026-03-23 · 3 obs

● 2026-02-16 13:01:58
○ 2026-03-11 16:46:06
● 2026-03-23 09:04:26

●A2606:4700:3037::6815:10052026-02-16 → 2026-03-23 · 3 obs

● 2026-02-16 13:01:58
○ 2026-03-11 16:46:06
● 2026-03-23 09:04:26

○A2a06:98c1:3120::2026-03-11 → 2026-03-11 · 3 obs

○ 2026-02-16 13:01:58
● 2026-03-11 16:46:06
○ 2026-03-23 09:04:26

○A2a06:98c1:3121::2026-03-11 → 2026-03-11 · 3 obs

○ 2026-02-16 13:01:58
● 2026-03-11 16:46:06
○ 2026-03-23 09:04:26

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
shop	l.gmoregistry.net, a.gmoregistry.net, b.gmoregistry.net, k.gmoregistry.net	7 records
whichdagent.shop	wells.ns.cloudflare.com, dahlia.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.89

NS records: wells.ns.cloudflare.com, dahlia.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for whichdagent.shop (unsigned zone)

⏱️ Timing

Total: 576ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.16.5, 172.67.165.162`
AAAA	2	`2606:4700:3037::6815:1005, 2606:4700:3032::ac43:a5a2`
NS	2	`dahlia.ns.cloudflare.com, wells.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dahlia.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 7

Out-of-bailiwick: 7 (l.gmoregistry.net, k.gmoregistry.net, b.gmoregistry.net...)

Analysis

Hierarchy

The parent of www.whichdagent.shop is whichdagent.shop.

IP Addresses

whichdagent.shop points to four IP numbers: 2606:4700:3032::ac43:a5a2, 2606:4700:3037::6815:1005, 104.21.16.5 and 172.67.165.162.

Other host names, for instance hilio.info, ouritguy.biz, vpkb.cn, aerner.com and hashtagprotocol.com share IP numbers with whichdagent.shop.

Name Servers

whichdagent.shop is delegated to two name servers: dahlia.ns.cloudflare.com and wells.ns.cloudflare.com.

whichdagent.shop uses the same name server setup as other domains, for instance skola.com, mod-ex.ru, myskola.com, retailerspalm.click and xformq.cfd.

whichdagent.shop shares name servers with other domains at least partially, for instance inveravante.com, htsbxw.cn, sjchambers.org, z849.cn and samuidiscgolf.com.

these name servers are commonly used together with desi.ns.cloudflare.com and sullivan.ns.cloudflare.com.

Host names with six IP numbers: dahlia.ns.cloudflare.com points to 2606:4700:50::adf5:3a59, 2803:f800:50::6ca2:c059, 2a06:98c1:50::ac40:2059, 108.162.192.89, 172.64.32.89 and 173.245.58.89; wells.ns.cloudflare.com points to 2606:4700:58::a29f:2c7d, 2803:f800:50::6ca2:c37d, 2a06:98c1:50::ac40:237d, 108.162.195.125, 162.159.44.125 and 172.64.35.125.

whichdagent.shop - robtex.com