`refresh-auth.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:83a1^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:427^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.4.39^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.131.161^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`julian.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c5e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`julian.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c35e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`julian.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:235e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`julian.ns.cloudflare.com`
		A	108.162.195.94^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`julian.ns.cloudflare.com`
		A	162.159.44.94^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`julian.ns.cloudflare.com`
		A	172.64.35.94^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`julian.ns.cloudflare.com`
NS	`raphaela.ns.cloudflare.com`
		A	2606:4700:50::a29f:26c0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`raphaela.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2c0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`raphaela.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22c0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`raphaela.ns.cloudflare.com`
		A	108.162.194.192^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`raphaela.ns.cloudflare.com`
		A	162.159.38.192^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`raphaela.ns.cloudflare.com`
		A	172.64.34.192^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`raphaela.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.4.39, 172.67.131.161
		IPv6 hints	2606:4700:3032::ac43:83a1, 2606:4700:3033::6815:427
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=148, name=cloudflare-ech.com
SOA	`julian.ns.cloudflare.com`dns@cloudflare.com serial=2404875206

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784063347

⚠️ On DNS blocklist: tif, ultimate

Same first word

refresh-auth.com

DNS History

16 records (6 active, 10 former)

●NSjulian.ns.cloudflare.com2026-05-29 → 2026-07-14 · 2 obs

● 2026-05-29 13:40:46
● 2026-07-14 21:27:34

●NSraphaela.ns.cloudflare.com2026-05-29 → 2026-07-14 · 2 obs

● 2026-05-29 13:40:46
● 2026-07-14 21:27:34

●A104.21.4.392026-05-29 → 2026-07-14 · 6 obs

● 2026-05-29 13:40:46
○ 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
● 2026-06-11 02:27:40
○ 2026-06-14 08:31:14
● 2026-07-14 21:27:34

●A172.67.131.1612026-05-29 → 2026-07-14 · 6 obs

● 2026-05-29 13:40:46
○ 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
● 2026-06-11 02:27:40
○ 2026-06-14 08:31:14
● 2026-07-14 21:27:34

○A188.114.96.02026-06-04 → 2026-06-14 · 5 obs

○ 2026-06-04 00:03:52
● 2026-06-04 06:05:36
○ 2026-06-11 02:27:40
● 2026-06-14 08:31:14
○ 2026-07-14 21:27:34

○A188.114.96.42026-06-04 → 2026-06-04 · 4 obs

○ 2026-05-29 13:40:46
● 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
○ 2026-07-14 21:27:34

○A188.114.97.02026-06-04 → 2026-06-14 · 5 obs

○ 2026-06-04 00:03:52
● 2026-06-04 06:05:36
○ 2026-06-11 02:27:40
● 2026-06-14 08:31:14
○ 2026-07-14 21:27:34

○A188.114.97.42026-06-04 → 2026-06-04 · 4 obs

○ 2026-05-29 13:40:46
● 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
○ 2026-07-14 21:27:34

○A2606:4700:3031::6815:4272026-05-29 → 2026-06-11 · 6 obs

● 2026-05-29 13:40:46
○ 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
● 2026-06-11 02:27:40
○ 2026-06-14 08:31:14
○ 2026-07-14 21:27:34

○A2606:4700:3031::ac43:83a12026-05-29 → 2026-06-11 · 6 obs

● 2026-05-29 13:40:46
○ 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
● 2026-06-11 02:27:40
○ 2026-06-14 08:31:14
○ 2026-07-14 21:27:34

●A2606:4700:3032::ac43:83a12026-07-14 → 2026-07-14 · 2 obs

○ 2026-06-14 08:31:14
● 2026-07-14 21:27:34

●A2606:4700:3033::6815:4272026-07-14 → 2026-07-14 · 2 obs

○ 2026-06-14 08:31:14
● 2026-07-14 21:27:34

○A2a06:98c1:3120::2026-06-04 → 2026-06-14 · 5 obs

○ 2026-06-04 00:03:52
● 2026-06-04 06:05:36
○ 2026-06-11 02:27:40
● 2026-06-14 08:31:14
○ 2026-07-14 21:27:34

○A2a06:98c1:3120::42026-06-04 → 2026-06-04 · 4 obs

○ 2026-05-29 13:40:46
● 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
○ 2026-07-14 21:27:34

○A2a06:98c1:3121::2026-06-04 → 2026-06-14 · 5 obs

○ 2026-06-04 00:03:52
● 2026-06-04 06:05:36
○ 2026-06-11 02:27:40
● 2026-06-14 08:31:14
○ 2026-07-14 21:27:34

○A2a06:98c1:3121::42026-06-04 → 2026-06-04 · 4 obs

○ 2026-05-29 13:40:46
● 2026-06-04 00:03:52
○ 2026-06-04 06:05:36
○ 2026-07-14 21:27:34

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	f.gtld-servers.net, b.gtld-servers.net, j.gtld-servers.net, a.gtld-servers.net...	-
refresh-auth.com	raphaela.ns.cloudflare.com, julian.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.94

NS records: raphaela.ns.cloudflare.com, julian.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for refresh-auth.com (unsigned zone)

⏱️ Timing

Total: 309ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.131.161, 104.21.4.39`
AAAA	2	`2606:4700:3032::ac43:83a1, 2606:4700:3033::6815:427`
NS	2	`julian.ns.cloudflare.com, raphaela.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`julian.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (raphaela.ns.cloudflare.com, raphaela.ns.cloudflare.com, raphaela.ns.cloudflare.com...)

Analysis

IP Addresses

refresh-auth.com points to the four IP addresses 104.21.4.39, 172.67.131.161, 2606:4700:3032::ac43:83a1 and 2606:4700:3033::6815:427.

mostbet-mx-club.mx, tianzihu.cn, www.geeforce.net and two other host names share IP numbers with refresh-auth.com.

Name Servers

refresh-auth.com uses two name servers for its delegation: julian.ns.cloudflare.com and raphaela.ns.cloudflare.com.

refresh-auth.com uses the same name servers as several other domains — among them pintuba.cc, wss-auth.com, wsconnectwp.com and two more.

At least some of refresh-auth.com's name servers are shared with other domains, for example oztekfen.com.tr, oliverco.ca, pepperplantation.net and two more.

These name servers tend to be deployed in combination with the name servers alexia.ns.cloudflare.com and asa.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname julian.ns.cloudflare.com directs to 108.162.195.94, 162.159.44.94 and 172.64.35.94 along with 3 other IP addresses.

Hostname raphaela.ns.cloudflare.com directs to 108.162.194.192, 162.159.38.192 and 172.64.34.192 along with 3 other IP addresses.

refresh-auth.com - robtex.com

refresh-auth.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`refresh-auth.com`

`com`