`dark-torzon.net`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:5e9d^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:89cc^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.94.157^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.137.204^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`arnold.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b45^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arnold.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c145^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`arnold.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2145^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`arnold.ns.cloudflare.com`
		A	108.162.193.69^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arnold.ns.cloudflare.com`
		A	172.64.33.69^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arnold.ns.cloudflare.com`
		A	173.245.59.69^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arnold.ns.cloudflare.com`
NS	`lila.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aba^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lila.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0ba^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lila.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20ba^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lila.ns.cloudflare.com`
		A	108.162.192.186^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lila.ns.cloudflare.com`
		A	172.64.32.186^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lila.ns.cloudflare.com`
		A	173.245.58.186^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lila.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.94.157, 172.67.137.204
		IPv6 hints	2606:4700:3031::6815:5e9d, 2606:4700:3037::ac43:89cc
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=181, name=cloudflare-ech.com
SOA	`arnold.ns.cloudflare.com`dns@cloudflare.com serial=2406751374

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1783316291

⚠️ On DNS blocklist: tif

Same first word

dark-torzon.net

DNS History

15 records (11 active, 4 former)

●NSarnold.ns.cloudflare.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●NSlila.ns.cloudflare.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●MXeforward1.registrar-servers.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●MXeforward2.registrar-servers.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●MXeforward3.registrar-servers.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●MXeforward4.registrar-servers.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●MXeforward5.registrar-servers.com2026-05-23 → 2026-07-06 · 2 obs

● 2026-05-23 06:05:26
● 2026-07-06 05:38:32

●A104.21.94.1572026-05-23 → 2026-07-06 · 6 obs

● 2026-05-23 06:05:26
○ 2026-06-04 07:37:58
○ 2026-06-04 14:39:32
● 2026-06-05 08:20:40
○ 2026-07-05 10:28:52
● 2026-07-06 05:38:32

●A172.67.137.2042026-05-23 → 2026-07-06 · 6 obs

● 2026-05-23 06:05:26
○ 2026-06-04 07:37:58
○ 2026-06-04 14:39:32
● 2026-06-05 08:20:40
○ 2026-07-05 10:28:52
● 2026-07-06 05:38:32

○A188.114.96.02026-06-04 → 2026-07-05 · 6 obs

○ 2026-05-23 06:05:26
● 2026-06-04 07:37:58
● 2026-06-04 14:39:32
○ 2026-06-05 08:20:40
● 2026-07-05 10:28:52
○ 2026-07-06 05:38:32

○A188.114.97.02026-06-04 → 2026-07-05 · 6 obs

○ 2026-05-23 06:05:26
● 2026-06-04 07:37:58
● 2026-06-04 14:39:32
○ 2026-06-05 08:20:40
● 2026-07-05 10:28:52
○ 2026-07-06 05:38:32

●A2606:4700:3031::6815:5e9d2026-05-23 → 2026-07-06 · 6 obs

● 2026-05-23 06:05:26
○ 2026-06-04 07:37:58
○ 2026-06-04 14:39:32
● 2026-06-05 08:20:40
○ 2026-07-05 10:28:52
● 2026-07-06 05:38:32

●A2606:4700:3037::ac43:89cc2026-05-23 → 2026-07-06 · 6 obs

● 2026-05-23 06:05:26
○ 2026-06-04 07:37:58
○ 2026-06-04 14:39:32
● 2026-06-05 08:20:40
○ 2026-07-05 10:28:52
● 2026-07-06 05:38:32

○A2a06:98c1:3120::2026-06-04 → 2026-07-05 · 6 obs

○ 2026-05-23 06:05:26
● 2026-06-04 07:37:58
● 2026-06-04 14:39:32
○ 2026-06-05 08:20:40
● 2026-07-05 10:28:52
○ 2026-07-06 05:38:32

○A2a06:98c1:3121::2026-06-04 → 2026-07-05 · 6 obs

○ 2026-05-23 06:05:26
● 2026-06-04 07:37:58
● 2026-06-04 14:39:32
○ 2026-06-05 08:20:40
● 2026-07-05 10:28:52
○ 2026-07-06 05:38:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	g.gtld-servers.net, f.gtld-servers.net, b.gtld-servers.net, h.gtld-servers.net...	-
dark-torzon.net	arnold.ns.cloudflare.com, lila.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.186

NS records: arnold.ns.cloudflare.com, lila.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for dark-torzon.net (unsigned zone)

⏱️ Timing

Total: 841ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.94.157, 172.67.137.204`
AAAA	2	`2606:4700:3037::ac43:89cc, 2606:4700:3031::6815:5e9d`
NS	2	`arnold.ns.cloudflare.com, lila.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`arnold.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

dark-torzon.net directs to four IP numbers, which are 104.21.94.157, 172.67.137.204, 2606:4700:3031::6815:5e9d and 2606:4700:3037::ac43:89cc.

i3.qwbkw.com, dailyvidette.org, predatorthailand.com plus two other host names have IP numbers in common with dark-torzon.net.

Name Servers

dark-torzon.net is delegated to two name servers: arnold.ns.cloudflare.com and lila.ns.cloudflare.com.

The name server configuration of dark-torzon.net is shared with other domains, for instance pr-businessinsider.com, daytiengthaitructuyen.edu.vn, dayngoaingu.edu.vn and two others.

There is at least partial name server overlap between dark-torzon.net and other domains — mischiefmakersmanual.com, diversityprep.net, adoptdontshop.xyz and two more among them.

These name servers frequently co-occur with the name servers ivy.ns.cloudflare.com and alexis.ns.cloudflare.com.

Hosts with 6 IP addresses each:

arnold.ns.cloudflare.com resolves to 108.162.193.69, 172.64.33.69, 173.245.59.69 and 3 other IP addresses.

lila.ns.cloudflare.com resolves to 108.162.192.186, 172.64.32.186, 173.245.58.186 and 3 other IP addresses.

Mail Servers

Five mail servers handle dark-torzon.net: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

At least some of the mail servers used by dark-torzon.net are shared with other domains: go123bet.pro, israeld.com, reece.co and two others among them.

These mail servers often appear in conjunction with the mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names resolving to a single IP address:

eforward1.registrar-servers.com points to 162.255.118.51.

eforward2.registrar-servers.com points to 162.255.118.52.

eforward3.registrar-servers.com points to 162.255.118.51.

eforward4.registrar-servers.com points to 162.255.118.52.

eforward5.registrar-servers.com points to 162.255.118.51.

Three host names point to 162.255.118.51: eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com.

eforward2.registrar-servers.com and eforward4.registrar-servers.com are host names that each point to 162.255.118.52 IP addresses.