`thunderfang.info`

DNSSEC	⚠️ Not signed
A	104.21.32.58^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.56^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brad.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b69^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c169^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brad.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2169^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brad.ns.cloudflare.com`
		A	108.162.193.105^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	172.64.33.105^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	173.245.59.105^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
NS	`emma.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a70^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c070^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`emma.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2070^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`emma.ns.cloudflare.com`
		A	108.162.192.112^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
		A	172.64.32.112^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
		A	173.245.58.112^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.32.58, 172.67.184.56
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=82, name=cloudflare-ech.com
SOA	`brad.ns.cloudflare.com`dns@cloudflare.com serial=2401195205

`info`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.info.afilias-nst.info` ⭐
	NS	`a2.info.afilias-nst.info`
	NS	`b0.info.afilias-nst.org` ⚠️ Not in parent delegation
	NS	`b2.info.afilias-nst.org` ⚠️ Not in parent delegation
	NS	`c0.info.afilias-nst.info`
	NS	`d0.info.afilias-nst.org` ⚠️ Not in parent delegation
	SOA	`a0.info.afilias-nst.info`hostmaster@donuts.email serial=1778539054

⚠️ On DNS blocklist: tif

Same first word

thunderfang.info

DNS History

4 records (4 active, 0 former)

●NSbrad.ns.cloudflare.com2026-04-09 → 2026-05-11 · 2 obs

● 2026-04-09 19:07:00
● 2026-05-11 22:58:46

●NSemma.ns.cloudflare.com2026-04-09 → 2026-05-11 · 2 obs

● 2026-04-09 19:07:00
● 2026-05-11 22:58:46

●A104.21.32.582026-04-09 → 2026-05-11 · 2 obs

● 2026-04-09 19:07:00
● 2026-05-11 22:58:46

●A172.67.184.562026-04-09 → 2026-05-11 · 2 obs

● 2026-04-09 19:07:00
● 2026-05-11 22:58:46

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
info	a0.info.afilias-nst.info, a2.info.afilias-nst.info, c0.info.afilias-nst.info	-
thunderfang.info	brad.ns.cloudflare.com, emma.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.112

NS records: brad.ns.cloudflare.com, emma.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for thunderfang.info (unsigned zone)

⏱️ Timing

Total: 623ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.32.58, 172.67.184.56`
NS	2	`brad.ns.cloudflare.com, emma.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brad.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

Two IP numbers are pointed to by thunderfang.info: 104.21.32.58 and 172.67.184.56.

other host names include dipronline.org, view-pictures.sportfreund.free-blog.biz, bd333bd333.com, goldgames.io and rollarenaprime.com; they share IP numbers with thunderfang.info.

Name Servers

Two name servers brad.ns.cloudflare.com and emma.ns.cloudflare.com handle the delegation for thunderfang.info.

thunderfang.info shares the same name server setup as other domains, for instance plasticstem.info, toegrain.xyz, nighthospital.space, creatureicicle.xyz and sizeafternoon.info.

thunderfang.info at least partially shares name servers with other domains, for instance 2ozo.com, edenrepaircentre.co.uk, tundratech.net, geosmartasia.org and luckyjet-kasino.ru.

Six IP addresses per host:

brad.ns.cloudflare.com points to 2606:4700:58::adf5:3b69, 2803:f800:50::6ca2:c169, 2a06:98c1:50::ac40:2169, 108.162.193.105, 172.64.33.105 and 173.245.59.105; emma.ns.cloudflare.com points to 2606:4700:50::adf5:3a70, 2803:f800:50::6ca2:c070, 2a06:98c1:50::ac40:2070, 108.162.192.112, 172.64.32.112 and 173.245.58.112

thunderfang.info - robtex.com