# DNS Resolution Analysis — Feb 28, 2026

> Checked against Google DNS (8.8.8.8) and Cloudflare DNS (1.1.1.1)

## Findings

DNS resolution is SPLIT — some domains resolve to IPs but their servers don't respond, others have NO DNS records at all.

### Domains That RESOLVE (DNS works, server unreachable)

| Domain | IP | Notes |
|--------|-----|-------|
| irna.ir | 185.143.234.235 | ArvanCloud IP — CDN still has DNS but origin is down |
| irib.ir | 77.36.149.173 | Domestic Iranian IP — resolves but server unreachable |
| khamenei.ir | 5.160.10.200 | ArvanCloud IP — CDN serving content |
| president.ir | 185.143.234.235 | Same ArvanCloud IP as IRNA |
| cbi.ir | 2a04:2680:8000::26 | IPv6 only — interesting |
| tci.ir | 217.218.86.185 | Domestic IP — resolves but server unreachable |
| farsnews.ir | 45.157.244.26 | Non-Iranian IP — resolves, geo-blocks clearnet |

### Domains With NO DNS Records

| Domain | Status | Implication |
|--------|--------|-------------|
| irgc.ir | NO RECORD | DNS completely removed/unresolvable |
| artesh.ir | NO RECORD | DNS completely removed/unresolvable |
| basij.ir | NO RECORD | DNS completely removed/unresolvable |
| mellat.ir | NO RECORD | DNS completely removed/unresolvable |
| judiciary.ir | NO RECORD | DNS completely removed/unresolvable |
| tehran.ir | DNS TIMEOUT | Authoritative nameserver unresponsive |

### Domains That Resolve But Return Different Errors

| Domain | Resolution | HTTP Status | Pattern |
|--------|-----------|-------------|---------|
| mod.ir | Resolves (name only) | 000 | Server unreachable |
| president.ir | 185.143.234.235 | 200 | ArvanCloud serving |
| cbi.ir | IPv6 2a04:2680 | 200 | Different CDN/infra |

## Analysis

**Two distinct failure modes detected:**

1. **DNS Deletion/Failure**: irgc.ir, artesh.ir, basij.ir, mellat.ir, judiciary.ir — these domains have had their DNS records removed or their authoritative nameservers are offline. This is consistent with deliberate defensive action (removing DNS to prevent targeting) or authoritative nameserver infrastructure being down.

2. **Server Unreachable (DNS intact)**: irib.ir, tci.ir — DNS still resolves to domestic Iranian IPs but the servers don't respond. This points to either the servers being offline or the network path being broken.

3. **CDN-Protected (still working)**: khamenei.ir, president.ir, irna.ir — resolve to ArvanCloud edge IPs and are still serving content from CDN cache/edge nodes.

## Key Insight

The fact that military domains (irgc.ir, artesh.ir, basij.ir) have NO DNS records at all — while civilian CDN-fronted sites still resolve — suggests the military may have **deliberately pulled their DNS** as a defensive measure during the Israeli strikes.

---

*Checked: Feb 28, 2026*