`tornadocash1.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3037::6815:2558^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:ce51^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.37.88^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.206.81^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`bella.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a4a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`bella.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`bella.ns.cloudflare.com`
		A	108.162.192.74^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
		A	172.64.32.74^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
		A	173.245.58.74^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`bella.ns.cloudflare.com`
NS	`troy.ns.cloudflare.com`
		A	2606:4700:58::a29f:2cda^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`troy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3da^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`troy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23da^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`troy.ns.cloudflare.com`
		A	108.162.195.218^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`troy.ns.cloudflare.com`
		A	162.159.44.218^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`troy.ns.cloudflare.com`
		A	172.64.35.218^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`troy.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.37.88, 172.67.206.81
		IPv6 hints	2606:4700:3037::6815:2558, 2606:4700:3037::ac43:ce51
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=113, name=cloudflare-ech.com
SOA	`bella.ns.cloudflare.com`dns@cloudflare.com serial=2409931964

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785716217

⚠️ On DNS blocklist: tif

Same first word

tornadocash1.com

DNS History

6 records (6 active, 0 former)

●NSbella.ns.cloudflare.com2026-07-24 → 2026-08-03 · 2 obs

● 2026-07-24 18:42:02
● 2026-08-03 00:35:48

●NStroy.ns.cloudflare.com2026-07-24 → 2026-08-03 · 2 obs

● 2026-07-24 18:42:02
● 2026-08-03 00:35:48

●A104.21.37.882026-07-24 → 2026-08-03 · 2 obs

● 2026-07-24 18:42:02
● 2026-08-03 00:35:48

●A172.67.206.812026-07-24 → 2026-08-03 · 2 obs

● 2026-07-24 18:42:02
● 2026-08-03 00:35:48

●A2606:4700:3037::6815:25582026-07-24 → 2026-08-03 · 2 obs

● 2026-07-24 18:42:02
● 2026-08-03 00:35:48

●A2606:4700:3037::ac43:ce512026-07-24 → 2026-08-03 · 2 obs

● 2026-07-24 18:42:02
● 2026-08-03 00:35:48

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
tornadocash1.com	bella.ns.cloudflare.com, troy.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.74

NS records: bella.ns.cloudflare.com, troy.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for tornadocash1.com (unsigned zone)

⏱️ Timing

Total: 146ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.37.88, 172.67.206.81`
AAAA	2	`2606:4700:3037::6815:2558, 2606:4700:3037::ac43:ce51`
NS	2	`bella.ns.cloudflare.com, troy.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`bella.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (bella.ns.cloudflare.com, bella.ns.cloudflare.com, bella.ns.cloudflare.com...)

Analysis

IP Addresses

tornadocash1.com points to the four IP addresses 104.21.37.88, 172.67.206.81, 2606:4700:3037::6815:2558 and 2606:4700:3037::ac43:ce51.

xxbyjc.com, ohparent.com, startadvancedrecruiting.info and two other host names share IP numbers with tornadocash1.com.

Name Servers

Two name servers handle the delegation for tornadocash1.com: bella.ns.cloudflare.com and troy.ns.cloudflare.com.

tornadocash1.com uses the same name servers as several other domains — among them anonymixerbitcoin.com, btc2mixers.com, cssboxshadow.com and two more.

There is at least partial name server overlap between tornadocash1.com and other domains — windsurfingnz.org, fashionpk.pk, nyfco.net and two more among them.

These name servers are routinely deployed together with the name servers rachel.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

bella.ns.cloudflare.com resolves to 108.162.192.74, 172.64.32.74 and 173.245.58.74 among others, with 3 other IP addresses in total.

troy.ns.cloudflare.com resolves to 108.162.195.218, 162.159.44.218 and 172.64.35.218 among others, with 3 other IP addresses in total.

tornadocash1.com - robtex.com