`demonicscans.net`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:4725^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:8f13^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.71.37^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.143.19^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`rob.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b8c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c18c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rob.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:218c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rob.ns.cloudflare.com`
		A	108.162.193.140^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
		A	172.64.33.140^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
		A	173.245.59.140^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rob.ns.cloudflare.com`
NS	`ulla.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ulla.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ulla.ns.cloudflare.com`
		A	108.162.192.233^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	172.64.32.233^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	173.245.58.233^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.71.37, 172.67.143.19
		IPv6 hints	2606:4700:3034::6815:4725, 2606:4700:3035::ac43:8f13
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=85, name=cloudflare-ech.com
SOA	`rob.ns.cloudflare.com`dns@cloudflare.com serial=2402536372

`net`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778707436

Same first word

demonicscans.org

demonicscans.blogspot.com

demonicscans.net

demonicscans.com

DNS History

6 records (6 active, 0 former)

●NSrob.ns.cloudflare.com2026-02-25 → 2026-05-13 · 2 obs

● 2026-02-25 22:47:36
● 2026-05-13 21:40:40

●NSulla.ns.cloudflare.com2026-02-25 → 2026-05-13 · 2 obs

● 2026-02-25 22:47:36
● 2026-05-13 21:40:40

●A104.21.71.372026-02-25 → 2026-05-13 · 2 obs

● 2026-02-25 22:47:36
● 2026-05-13 21:40:40

●A172.67.143.192026-02-25 → 2026-05-13 · 2 obs

● 2026-02-25 22:47:36
● 2026-05-13 21:40:40

●A2606:4700:3034::6815:47252026-02-25 → 2026-05-13 · 2 obs

● 2026-02-25 22:47:36
● 2026-05-13 21:40:40

●A2606:4700:3035::ac43:8f132026-02-25 → 2026-05-13 · 2 obs

● 2026-02-25 22:47:36
● 2026-05-13 21:40:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
net	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
demonicscans.net	rob.ns.cloudflare.com, ulla.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.233

NS records: rob.ns.cloudflare.com, ulla.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for demonicscans.net (unsigned zone)

⏱️ Timing

Total: 366ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.143.19, 104.21.71.37`
AAAA	2	`2606:4700:3034::6815:4725, 2606:4700:3035::ac43:8f13`
NS	2	`rob.ns.cloudflare.com, ulla.ns.cloudflare.com`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`rob.ns.cloudflare.com dns.cloudflare.com`

Analysis

IP Addresses

demonicscans.net refers to four IP numbers: 2606:4700:3034::6815:4725, 2606:4700:3035::ac43:8f13, 104.21.71.37 and 172.67.143.19.

Other host names, for instance sweetbonanza-th.com, goagencyshop.live, justgoodglasses.co.uk, www.nourish-and-fete.com and link.gela1vor.surf share IP numbers with demonicscans.net.

Name Servers

demonicscans.net's delegation uses two name servers: rob.ns.cloudflare.com and ulla.ns.cloudflare.com.

demonicscans.net uses the same name server setup as other domains, such as 98c02c.xyz, sgvapeoutlet8.com, zamgame.com, satriolangit.com and yeetlab.net.

demonicscans.net at least partially shares name servers with other domains, including asimei.org.sv, abfenvironmental.com, gogoanime.org.vc, nexthomeheritage.com and nexthomeauthority.com.

These name servers are often used with clay.ns.cloudflare.com and lady.ns.cloudflare.com.

Host names with six IP numbers:

rob.ns.cloudflare.com points to 2606:4700:58::adf5:3b8c, 2803:f800:50::6ca2:c18c, 2a06:98c1:50::ac40:218c, 108.162.193.140, 172.64.33.140 and 173.245.59.140.

ulla.ns.cloudflare.com points to 2606:4700:50::adf5:3ae9, 2803:f800:50::6ca2:c0e9, 2a06:98c1:50::ac40:20e9, 108.162.192.233, 172.64.32.233 and 173.245.58.233.

demonicscans.net - robtex.com