refund.sh - robtex.com

refund.sh

DNSSECπŸ”’ Signed (DS record present)
A44.233.250.75πŸ‡ΊπŸ‡Έ Amazon44.224.0.0/11 EC2 PDX prefix
PTRec2-44-233-250-75.us-west-2.compute.amazonaws.com
A52.38.196.63πŸ‡ΊπŸ‡Έ Amazon52.36.0.0/14 EC2 PDX prefix
NSlaunch1.spaceship.net ⭐
A2400:cb00:2049:1::a29f:1a26πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.26.38Cloudflare162.159.26.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSlaunch2.spaceship.net
A2400:cb00:2049:1::a29f:1b20πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.27.32Cloudflare162.159.27.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
SOAlaunch1.spaceship.netsupport@spaceship.com serial=1785512789

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1786585210
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

10 records (4 active, 6 former)

NSlaunch1.spaceship.netlaunch2.spaceship.neta.2ns.netb.2ns.netns4.dnsauthority.comns5.dnsauthority.comMXmail.hope-mail.comA44.233.250.7552.38.196.63CNAMEpltraffic7.com
β—‹NSa.2ns.net2026-07-24 β†’ 2026-07-24 Β· 3 obs
● 2026-07-24 16:42:10
β—‹ 2026-08-05 17:59:18
β—‹ 2026-08-13 02:12:02
β—‹NSb.2ns.net2026-07-24 β†’ 2026-07-24 Β· 3 obs
● 2026-07-24 16:42:10
β—‹ 2026-08-05 17:59:18
β—‹ 2026-08-13 02:12:02
●NSlaunch1.spaceship.net2026-08-05 β†’ 2026-08-13 Β· 3 obs
β—‹ 2026-07-24 16:42:10
● 2026-08-05 17:59:18
● 2026-08-13 02:12:02
●NSlaunch2.spaceship.net2026-08-05 β†’ 2026-08-13 Β· 3 obs
β—‹ 2026-07-24 16:42:10
● 2026-08-05 17:59:18
● 2026-08-13 02:12:02
β—‹NSns4.dnsauthority.com2026-07-24 β†’ 2026-07-24 Β· 3 obs
● 2026-07-24 16:42:10
β—‹ 2026-08-05 17:59:18
β—‹ 2026-08-13 02:12:02
β—‹NSns5.dnsauthority.com2026-07-24 β†’ 2026-07-24 Β· 3 obs
● 2026-07-24 16:42:10
β—‹ 2026-08-05 17:59:18
β—‹ 2026-08-13 02:12:02
β—‹MXmail.hope-mail.com2026-07-24 β†’ 2026-07-24 Β· 3 obs
● 2026-07-24 16:42:10
β—‹ 2026-08-05 17:59:18
β—‹ 2026-08-13 02:12:02
●A44.233.250.752026-08-05 β†’ 2026-08-13 Β· 2 obs
● 2026-08-05 17:59:18
● 2026-08-13 02:12:02
●A52.38.196.632026-08-05 β†’ 2026-08-13 Β· 2 obs
● 2026-08-05 17:59:18
● 2026-08-13 02:12:02
β—‹CNAMEpltraffic7.com2026-07-24 β†’ 2026-07-24 Β· 3 obs
● 2026-07-24 16:42:10
β—‹ 2026-08-05 17:59:18
β—‹ 2026-08-13 02:12:02

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
shb0.nic.sh, a0.nic.sh, c0.nic.sh, a2.nic.sh8 records
refund.shlaunch1.spaceship.net, launch2.spaceship.net-

βœ… Authoritative Response

Server:162.159.27.32

NS records: launch1.spaceship.net, launch2.spaceship.net

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 477ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A252.38.196.63, 44.233.250.75
NS2launch1.spaceship.net, launch2.spaceship.net
SOA1launch1.spaceship.net support.spaceship.

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (b0.nic.sh, b0.nic.sh, a0.nic.sh...)

Analysis

IP Addresses

refund.sh has two IP addresses: 44.233.250.75 and 52.38.196.63

qoochbip.shop, cekipolen.com, eosdevcon.io plus two other host names have IP numbers in common with refund.sh.

Name Servers

Two name servers handle the delegation for refund.sh: launch1.spaceship.net and launch2.spaceship.net.

The name server configuration of refund.sh is shared with other domains, for instance mediacockpit.pro, cosy.pro, payments.quest and two others.

refund.sh is at least partially co-delegated on name servers with other domains, such as boom.ly.

launch1.spaceship.net and launch2.spaceship.net both carry two IP addresses. The A records for launch1.spaceship.net are 162.159.26.38 and 2400:cb00:2049:1::a29f:1a26; the A records for launch2.spaceship.net are 162.159.27.32 and 2400:cb00:2049:1::a29f:1b20.