`norivanthurexa.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:3dfe^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:d977^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.61.254^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.217.119^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`candy.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`candy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`candy.ns.cloudflare.com`
		A	108.162.192.79^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	172.64.32.79^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	173.245.58.79^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
NS	`nikon.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cb0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nikon.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3b0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`nikon.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23b0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`nikon.ns.cloudflare.com`
		A	108.162.195.176^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nikon.ns.cloudflare.com`
		A	162.159.44.176^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nikon.ns.cloudflare.com`
		A	172.64.35.176^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`nikon.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.61.254, 172.67.217.119
		IPv6 hints	2606:4700:3033::6815:3dfe, 2606:4700:3034::ac43:d977
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=124, name=cloudflare-ech.com
SOA	`candy.ns.cloudflare.com`dns@cloudflare.com serial=2398665558

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1777055112

⚠️ On DNS blocklist: tif

Same first word

norivanthurexa.com

DNS History

6 records (6 active, 0 former)

●NScandy.ns.cloudflare.com2026-03-28 → 2026-04-24 · 2 obs

● 2026-03-28 12:18:22
● 2026-04-24 18:39:22

●NSnikon.ns.cloudflare.com2026-03-28 → 2026-04-24 · 2 obs

● 2026-03-28 12:18:22
● 2026-04-24 18:39:22

●A104.21.61.2542026-03-28 → 2026-04-24 · 2 obs

● 2026-03-28 12:18:22
● 2026-04-24 18:39:22

●A172.67.217.1192026-03-28 → 2026-04-24 · 2 obs

● 2026-03-28 12:18:22
● 2026-04-24 18:39:22

●A2606:4700:3033::6815:3dfe2026-03-28 → 2026-04-24 · 2 obs

● 2026-03-28 12:18:22
● 2026-04-24 18:39:22

●A2606:4700:3034::ac43:d9772026-03-28 → 2026-04-24 · 2 obs

● 2026-03-28 12:18:22
● 2026-04-24 18:39:22

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
norivanthurexa.com	candy.ns.cloudflare.com, nikon.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.79

NS records: candy.ns.cloudflare.com, nikon.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for norivanthurexa.com (unsigned zone)

⏱️ Timing

Total: 111ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.217.119, 104.21.61.254`
AAAA	2	`2606:4700:3034::ac43:d977, 2606:4700:3033::6815:3dfe`
NS	2	`candy.ns.cloudflare.com, nikon.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`candy.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (candy.ns.cloudflare.com, candy.ns.cloudflare.com, candy.ns.cloudflare.com...)

Analysis

IP Addresses

norivanthurexa.com resolves to four IP numbers: 2606:4700:3033::6815:3dfe, 2606:4700:3034::ac43:d977, 104.21.61.254 and 172.67.217.119.

Other host names such as vegasplay.sbs, aurigabee.xyz, hdyaqian.com, tiquetes.coomotor.com.co and rolinocasino.lt share IPs with norivanthurexa.com.

Name Servers

norivanthurexa.com is delegated to two name servers: candy.ns.cloudflare.com and nikon.ns.cloudflare.com.

norivanthurexa.com shares the same name server setup as internal-gravikon-meta-vendrix-archive.pages.dev, internal-holtrix-meta-validation-folder.pages.dev, internal-gronivex-meta-tellium-archive.pages.dev, internal-grandol-meta-hortril-archive.pages.dev and internal-jinthol-meta-control-database.pages.dev.

norivanthurexa.com at least partially shares name servers with other domains, for instance controlbox.com.br, traderadiators.com, rvvwqxwq221.pages.dev, bartendingonline.com and ugj5.com.

these name servers are often used in conjunction with the name servers henry.ns.cloudflare.com.

Host names with six IP numbers:

candy.ns.cloudflare.com points to 2606:4700:50::adf5:3a4f, 2803:f800:50::6ca2:c04f, 2a06:98c1:50::ac40:204f, 108.162.192.79, 172.64.32.79 and 173.245.58.79.

nikon.ns.cloudflare.com points to 2606:4700:58::a29f:2cb0, 2803:f800:50::6ca2:c3b0, 2a06:98c1:50::ac40:23b0, 108.162.195.176, 162.159.44.176 and 172.64.35.176.

norivanthurexa.com - robtex.com