ref.leadz.cash - robtex.com

ref.leadz.cash

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:8934🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:1aa4🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.26.164Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.137.52🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.26.164, 172.67.137.52
IPv6 hints2606:4700:3031::ac43:8934, 2606:4700:3036::6815:1aa4
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=130, name=cloudflare-ech.com

leadz.cash

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:8934🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:1aa4🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.26.164Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.137.52🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NShaley.ns.cloudflare.com ⭐
NSmatias.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.26.164, 172.67.137.52
IPv6 hints2606:4700:3031::ac43:8934, 2606:4700:3036::6815:1aa4
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=130, name=cloudflare-ech.com
SOAhaley.ns.cloudflare.comdns@cloudflare.com serial=2411269143

Same first word

ref.tc
ref.lv
ref.biz
ref.it
ref.li
ref.ua
ref.ms
ref.asia
ref.com.ua
ref.my
ref.world
ref.vn
ref.me
ref.pt
ref.gs
ref.net
ref.kr
ref.center
ref.lt
ref.org.uk
ref.am
ref.sh
ref.direct
ref.at
ref.dk
ref.de
ref.is
ref.moe
ref.ee
ref.com.tw
ref.gv.at
ref.ge
ref.fm
ref.finance
ref.gr
ref.agency
ref.ly
ref.sg
ref.by
ref.com.br
ref.im
ref.nhs.uk
ref.wang
ref.scot
ref.box
ref.cards
ref.info
ref.management
ref.es
ref.cn
ref.hu
ref.com
ref.co
ref.org
ref.today
ref.az
ref.re
ref.org.au
ref.pl
ref.ru
ref.com.hk
ref.or.kr
ref.plus
ref.or.jp
ref.expert
ref.in.ua
ref.training
ref.tips
ref.ng
ref.mx
ref.hk
ref.so
ref.eu
ref.house
ref.readthedocs.io
ref.ch
ref.us
ref.se
ref.ac.uk
ref.tools
ref.no
ref.to

Similar names

fer.org.mx
fer.si
fer.name
erf.be
fer.org.br
rfe.hu
fre.jp
fer.hr
rfe.mobi
fre.es
efr.app
fer.co
erf.org.uk
efr.com
fre.dk
fer.hu
fer.or.kr
efr.io
fer.ca
fer.dk
fer.com.br
fer.uz
fre.agency
rfe.cc
fer.se
fer.network
rfe.net
efr.es
rfe.eu
rfe.ca
fer.com
fer.co.uk
erf.in
rfe.com.br
fer.us
erf.co.jp
erf.hr
fer.ch
fer.cc
fer.gy
erf.com
fre.fr
erf.co.nz
efr.eu
fer.ci
efr.cz
rfe.org
fre.co.il
fer.cz
rfe.no
fer.info
erf.dk
fer.digital
erf.or.jp
erf.uz
efr.fr
rfe.ie
rfe.com.tw
fre.ca
efr.com.my
erf.ru
erf.ch
efr.info
fer.id.au
rfe.es
fer.fr
efr.dk
fer.pt
rfe.co.th
fer.com.tr
efr.us
fre.kr

DNS History

10 records (4 active, 6 former)

A104.21.26.164172.67.137.522606:4700:3031::ac43:89342606:4700:3036::6815:1aa4188.114.96.0188.114.96.4188.114.97.0188.114.97.42a06:98c1:3120::42a06:98c1:3121::4
●A104.21.26.1642026-08-10 → 2026-08-10 · 3 obs
○ 2026-08-09 16:21:16
● 2026-08-10 04:32:12
● 2026-08-10 10:14:46
●A172.67.137.522026-08-10 → 2026-08-10 · 3 obs
○ 2026-08-09 16:21:16
● 2026-08-10 04:32:12
● 2026-08-10 10:14:46
○A188.114.96.02026-08-09 → 2026-08-09 · 4 obs
○ 2026-08-09 15:29:36
● 2026-08-09 16:21:16
○ 2026-08-10 04:32:12
○ 2026-08-10 10:14:46
○A188.114.96.42026-08-09 → 2026-08-09 · 3 obs
● 2026-08-09 15:29:36
○ 2026-08-09 16:21:16
○ 2026-08-10 10:14:46
○A188.114.97.02026-08-09 → 2026-08-09 · 4 obs
○ 2026-08-09 15:29:36
● 2026-08-09 16:21:16
○ 2026-08-10 04:32:12
○ 2026-08-10 10:14:46
○A188.114.97.42026-08-09 → 2026-08-09 · 3 obs
● 2026-08-09 15:29:36
○ 2026-08-09 16:21:16
○ 2026-08-10 10:14:46
●A2606:4700:3031::ac43:89342026-08-10 → 2026-08-10 · 3 obs
○ 2026-08-09 16:21:16
● 2026-08-10 04:32:12
● 2026-08-10 10:14:46
●A2606:4700:3036::6815:1aa42026-08-10 → 2026-08-10 · 3 obs
○ 2026-08-09 16:21:16
● 2026-08-10 04:32:12
● 2026-08-10 10:14:46
○A2a06:98c1:3120::42026-08-09 → 2026-08-09 · 3 obs
● 2026-08-09 15:29:36
○ 2026-08-10 04:32:12
○ 2026-08-10 10:14:46
○A2a06:98c1:3121::42026-08-09 → 2026-08-09 · 3 obs
● 2026-08-09 15:29:36
○ 2026-08-10 04:32:12
○ 2026-08-10 10:14:46

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
cashv0n0.nic.cash, v0n1.nic.cash, v0n2.nic.cash, v0n3.nic.cash...12 records
leadz.cashmatias.ns.cloudflare.com, haley.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.34.15

NS records: matias.ns.cloudflare.com, haley.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for leadz.cash (unsigned zone)

⏱️ Timing

Total: 324ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.26.164, 172.67.137.52
AAAA22606:4700:3036::6815:1aa4, 2606:4700:3031::ac43:8934
HTTPS1{"priority":1,"target":".","alpn":["h3",

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.cash, v0n0.nic.cash, v0n1.nic.cash...)

Analysis

IP Addresses

ref.leadz.cash points to the four IP addresses 104.21.26.164, 172.67.137.52, 2606:4700:3031::ac43:8934 and 2606:4700:3036::6815:1aa4.

www.sturmsrange.com, ftcsgw.diutrcop.workers.dev, jeem.sa plus two other host names have IP numbers in common with ref.leadz.cash.