`sandbehavior.xyz`

DNSSEC	⚠️ Not signed
A	104.21.4.249^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.132.168^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brad.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b69^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c169^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brad.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2169^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brad.ns.cloudflare.com`
		A	108.162.193.105^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	172.64.33.105^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	173.245.59.105^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
NS	`emma.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a70^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c070^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`emma.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2070^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`emma.ns.cloudflare.com`
		A	108.162.192.112^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
		A	172.64.32.112^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
		A	173.245.58.112^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`emma.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.4.249, 172.67.132.168
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=212, name=cloudflare-ech.com
SOA	`brad.ns.cloudflare.com`dns@cloudflare.com serial=2401177256

`xyz`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns0.centralnic.net` ⭐
	NS	`generationxyz.nic.xyz`
	NS	`x.nic.xyz`
	NS	`y.nic.xyz`
	NS	`z.nic.xyz`
	SOA	`ns0.centralnic.net`hostmaster@centralnic.net serial=3000847500

⚠️ On DNS blocklist: tif

Same first word

sandbehavior.xyz

DNS History

4 records (4 active, 0 former)

●NSbrad.ns.cloudflare.com2026-03-28 → 2026-05-14 · 2 obs

● 2026-03-28 09:47:04
● 2026-05-14 09:54:40

●NSemma.ns.cloudflare.com2026-03-28 → 2026-05-14 · 2 obs

● 2026-03-28 09:47:04
● 2026-05-14 09:54:40

●A104.21.4.2492026-03-28 → 2026-05-14 · 2 obs

● 2026-03-28 09:47:04
● 2026-05-14 09:54:40

●A172.67.132.1682026-03-28 → 2026-05-14 · 2 obs

● 2026-03-28 09:47:04
● 2026-05-14 09:54:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
xyz	x.nic.xyz, y.nic.xyz, z.nic.xyz, generationxyz.nic.xyz	8 records
sandbehavior.xyz	emma.ns.cloudflare.com, brad.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.112

NS records: emma.ns.cloudflare.com, brad.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for sandbehavior.xyz (unsigned zone)

⏱️ Timing

Total: 2523ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.4.249, 172.67.132.168`
NS	2	`brad.ns.cloudflare.com, emma.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brad.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (x.nic.xyz, x.nic.xyz, y.nic.xyz...)

Analysis

IP Addresses

sandbehavior.xyz points to two IP numbers: 104.21.4.249 and 172.67.132.168.

Other host names such as kancelariadyja.pl, teamas.net, www.newyorkhalalpizza.com, svitovederevo.ua and mail2.unriddleit.com share IPs with sandbehavior.xyz.

Name Servers

Two name servers brad.ns.cloudflare.com and emma.ns.cloudflare.com handle the delegation for sandbehavior.xyz.

sandbehavior.xyz shares the same name server setup as other domains, for example tubvalue.xyz, horseswatch.xyz, zincapproval.info, hairteeth.icu and kittensgrade.cfd.

sandbehavior.xyz at least partially shares name servers with other domains, for example casbau.com, roundup.org, 277jili.info, appaltipubblici.it and stolution.com.

Host names with six IP numbers:

brad.ns.cloudflare.com points to 2606:4700:58::adf5:3b69, 2803:f800:50::6ca2:c169, 2a06:98c1:50::ac40:2169, 108.162.193.105, 172.64.33.105 and 173.245.59.105.

emma.ns.cloudflare.com points to 2606:4700:50::adf5:3a70, 2803:f800:50::6ca2:c070, 2a06:98c1:50::ac40:2070, 108.162.192.112, 172.64.32.112 and 173.245.58.112.

sandbehavior.xyz - robtex.com