`s3posh-payment.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::6815:549b^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:c290^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.84.155^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.194.144^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`harvey.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c98^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harvey.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c398^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`harvey.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2398^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`harvey.ns.cloudflare.com`
		A	108.162.195.152^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harvey.ns.cloudflare.com`
		A	162.159.44.152^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harvey.ns.cloudflare.com`
		A	172.64.35.152^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`harvey.ns.cloudflare.com`
NS	`ingrid.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aa5^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ingrid.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0a5^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ingrid.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20a5^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ingrid.ns.cloudflare.com`
		A	108.162.192.165^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ingrid.ns.cloudflare.com`
		A	172.64.32.165^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ingrid.ns.cloudflare.com`
		A	173.245.58.165^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ingrid.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.84.155, 172.67.194.144
		IPv6 hints	2606:4700:3035::6815:549b, 2606:4700:3036::ac43:c290
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=163, name=cloudflare-ech.com
SOA	`harvey.ns.cloudflare.com`dns@cloudflare.com serial=2402414534

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1778817411

⚠️ On DNS blocklist: tif

Subdomains

www.s3posh-payment.com

Same first word

s3posh-payment.com

DNS History

6 records (6 active, 0 former)

●NSharvey.ns.cloudflare.com2026-04-22 → 2026-05-15 · 2 obs

● 2026-04-22 01:24:02
● 2026-05-15 04:15:44

●NSingrid.ns.cloudflare.com2026-04-22 → 2026-05-15 · 2 obs

● 2026-04-22 01:24:02
● 2026-05-15 04:15:44

●A104.21.84.1552026-04-22 → 2026-05-15 · 2 obs

● 2026-04-22 01:24:02
● 2026-05-15 04:15:44

●A172.67.194.1442026-04-22 → 2026-05-15 · 2 obs

● 2026-04-22 01:24:02
● 2026-05-15 04:15:44

●A2606:4700:3035::6815:549b2026-04-22 → 2026-05-15 · 2 obs

● 2026-04-22 01:24:02
● 2026-05-15 04:15:44

●A2606:4700:3036::ac43:c2902026-04-22 → 2026-05-15 · 2 obs

● 2026-04-22 01:24:02
● 2026-05-15 04:15:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	f.gtld-servers.net, a.gtld-servers.net, l.gtld-servers.net, h.gtld-servers.net...	-
s3posh-payment.com	ingrid.ns.cloudflare.com, harvey.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.165

NS records: ingrid.ns.cloudflare.com, harvey.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for s3posh-payment.com (unsigned zone)

⏱️ Timing

Total: 363ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.194.144, 104.21.84.155`
AAAA	2	`2606:4700:3036::ac43:c290, 2606:4700:3035::6815:549b`
NS	2	`harvey.ns.cloudflare.com, ingrid.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`harvey.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ingrid.ns.cloudflare.com, ingrid.ns.cloudflare.com, ingrid.ns.cloudflare.com...)

Analysis

Hierarchy

s3posh-payment.com is a parent of www.s3posh-payment.com.

IP Addresses

s3posh-payment.com resolves to four IPs: 2606:4700:3035::6815:549b, 2606:4700:3036::ac43:c290, 104.21.84.155 and 172.67.194.144.

Other host names such as lionsurf.net, novenanews.com, allegro.oferta849302.click, barsawood.com and mse.ie share IP numbers with s3posh-payment.com.

Name Servers

s3posh-payment.com is delegated to two name servers: harvey.ns.cloudflare.com and ingrid.ns.cloudflare.com.

s3posh-payment.com uses the same name server setup as other domains, including s39492948.forum, radebit.com, a-on.cn, 118198.xyz and ahicommerce.com.

At least part of the name servers for s3posh-payment.com are shared with other domains, for instance dphotoworld.net, spotcap.nl, kacerins.com, mario-kart-8-nintendo.com and acpublic.com.

these name servers are commonly used with laylah.ns.cloudflare.com, mariah.ns.cloudflare.com, noel.ns.cloudflare.com, alexandra.ns.cloudflare.com and elisa.ns.cloudflare.com.

Host names with six IP numbers:

harvey.ns.cloudflare.com points to: 2606:4700:58::a29f:2c98, 2803:f800:50::6ca2:c398, 2a06:98c1:50::ac40:2398, 108.162.195.152, 162.159.44.152 and 172.64.35.152.

ingrid.ns.cloudflare.com points to: 2606:4700:50::adf5:3aa5, 2803:f800:50::6ca2:c0a5, 2a06:98c1:50::ac40:20a5, 108.162.192.165, 172.64.32.165 and 173.245.58.165.

s3posh-payment.com - robtex.com