`auth-ms-service.com`

DNSSEC	⚠️ Not signed
A	104.21.16.20^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.165.246^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dalary.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26dc^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dalary.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2dc^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dalary.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22dc^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dalary.ns.cloudflare.com`
		A	108.162.194.220^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dalary.ns.cloudflare.com`
		A	162.159.38.220^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dalary.ns.cloudflare.com`
		A	172.64.34.220^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dalary.ns.cloudflare.com`
NS	`tosana.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c2b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c32b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`tosana.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:232b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`tosana.ns.cloudflare.com`
		A	108.162.195.43^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
		A	162.159.44.43^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
		A	172.64.35.43^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`tosana.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.16.20, 172.67.165.246
SOA	`dalary.ns.cloudflare.com`dns@cloudflare.com serial=2397088243

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1774409337

⚠️ On DNS blocklist: tif

Same first word

auth-ms-service.com

auth-ms-service.online

DNS History

4 records (4 active, 0 former)

●NSdalary.ns.cloudflare.com2026-03-21 → 2026-03-25 · 2 obs

● 2026-03-21 13:03:44
● 2026-03-25 03:44:22

●NStosana.ns.cloudflare.com2026-03-21 → 2026-03-25 · 2 obs

● 2026-03-21 13:03:44
● 2026-03-25 03:44:22

●A104.21.16.202026-03-21 → 2026-03-25 · 2 obs

● 2026-03-21 13:03:44
● 2026-03-25 03:44:22

●A172.67.165.2462026-03-21 → 2026-03-25 · 2 obs

● 2026-03-21 13:03:44
● 2026-03-25 03:44:22

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
auth-ms-service.com	dalary.ns.cloudflare.com, tosana.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.43

NS records: dalary.ns.cloudflare.com, tosana.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for auth-ms-service.com (unsigned zone)

⏱️ Timing

Total: 135ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.16.20, 172.67.165.246`
NS	2	`dalary.ns.cloudflare.com, tosana.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dalary.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (dalary.ns.cloudflare.com, dalary.ns.cloudflare.com, dalary.ns.cloudflare.com...)

Analysis

IP Addresses

Two IP numbers are pointed to by auth-ms-service.com: 104.21.16.20 and 172.67.165.246.

other host names include lysoc.com, theevilwithin.com, api.gdapp.io, towerwatchtech.com and bco-adguard.pro; they share IP numbers with auth-ms-service.com.

Name Servers

Two name servers dalary.ns.cloudflare.com and tosana.ns.cloudflare.com handle the delegation for auth-ms-service.com.

auth-ms-service.com shares the same name server setup as other domains, for instance rollsupreme.com, facilplanuy.com, fumetsu.co.uk, vorotokappsolution.com and fumetsu.eu.

auth-ms-service.com at least partially shares name servers with other domains, for instance mostbetz.com, fs-kenfor.com, numpangpak.site, overbdecat.rest and antidciles.rest.

These name servers are commonly used with jermaine.ns.cloudflare.com and amanda.ns.cloudflare.com.

Six IP addresses per host:

dalary.ns.cloudflare.com points to 2606:4700:50::a29f:26dc, 2803:f800:50::6ca2:c2dc, 2a06:98c1:50::ac40:22dc, 108.162.194.220, 162.159.38.220 and 172.64.34.220; tosana.ns.cloudflare.com points to 2606:4700:58::a29f:2c2b, 2803:f800:50::6ca2:c32b, 2a06:98c1:50::ac40:232b, 108.162.195.43, 162.159.44.43 and 172.64.35.43

auth-ms-service.com - robtex.com