`refunded.vip`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:1861^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:da28^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.24.97^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.218.40^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dakota.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c4f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c34f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dakota.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:234f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dakota.ns.cloudflare.com`
		A	108.162.195.79^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
		A	162.159.44.79^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
		A	172.64.35.79^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
NS	`ximena.ns.cloudflare.com`
		A	2606:4700:50::a29f:260a^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ximena.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c20a^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ximena.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:220a^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ximena.ns.cloudflare.com`
		A	108.162.194.10^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ximena.ns.cloudflare.com`
		A	162.159.38.10^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ximena.ns.cloudflare.com`
		A	172.64.34.10^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ximena.ns.cloudflare.com`
MX	`mx1.hostinger.com` ⭐
		A	2606:4700:90:0:c1f8:f874:2386:b61f^{🇺🇸 Cloudflare2606:4700:90::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.65.182.103^{🇺🇸 Cloudflare172.65.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
MX	`mx2.hostinger.com`⁽¹⁰⁾
		A	2606:4700:90:0:c1f8:f874:2386:b61f^{🇺🇸 Cloudflare2606:4700:90::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.65.182.103^{🇺🇸 Cloudflare172.65.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
TXT	`v=spf1 include:_spf.mail.hostinger.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.24.97, 172.67.218.40
		IPv6 hints	2606:4700:3032::6815:1861, 2606:4700:3037::ac43:da28
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=171, name=cloudflare-ech.com
SOA	`dakota.ns.cloudflare.com`dns@cloudflare.com serial=2406694257

`vip`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.nic.vip` ⭐
	NS	`b.nic.vip`
	NS	`c.nic.vip`
	NS	`x.nic.vip`
	NS	`y.nic.vip`
	NS	`z.nic.vip`
	SOA	`a.nic.vip`admin@tldns.godaddy serial=1784424786

Same first word

refunded.vip

refunded.co.uk

Similar names

underfed.com

defunder.com

erdfunde.de

DNS History

10 records (8 active, 2 former)

●NSdakota.ns.cloudflare.com2026-05-14 → 2026-07-19 · 2 obs

● 2026-05-14 11:46:58
● 2026-07-19 01:40:38

●NSximena.ns.cloudflare.com2026-05-14 → 2026-07-19 · 2 obs

● 2026-05-14 11:46:58
● 2026-07-19 01:40:38

●MXmx1.hostinger.com2026-05-14 → 2026-07-19 · 2 obs

● 2026-05-14 11:46:58
● 2026-07-19 01:40:38

●MXmx2.hostinger.com2026-05-14 → 2026-07-19 · 2 obs

● 2026-05-14 11:46:58
● 2026-07-19 01:40:38

●A104.21.24.972026-05-14 → 2026-07-19 · 2 obs

● 2026-05-14 11:46:58
● 2026-07-19 01:40:38

●A172.67.218.402026-05-14 → 2026-07-19 · 2 obs

● 2026-05-14 11:46:58
● 2026-07-19 01:40:38

○A2606:4700:3031::ac43:da282026-05-14 → 2026-06-11 · 4 obs

● 2026-05-14 11:46:58
● 2026-06-11 06:06:02
○ 2026-07-09 06:46:14
○ 2026-07-19 01:40:38

●A2606:4700:3032::6815:18612026-07-09 → 2026-07-19 · 3 obs

○ 2026-06-11 06:06:02
● 2026-07-09 06:46:14
● 2026-07-19 01:40:38

○A2606:4700:3033::6815:18612026-05-14 → 2026-06-11 · 4 obs

● 2026-05-14 11:46:58
● 2026-06-11 06:06:02
○ 2026-07-09 06:46:14
○ 2026-07-19 01:40:38

●A2606:4700:3037::ac43:da282026-07-09 → 2026-07-19 · 3 obs

○ 2026-06-11 06:06:02
● 2026-07-09 06:46:14
● 2026-07-19 01:40:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
vip	a.nic.vip, b.nic.vip, c.nic.vip, x.nic.vip...	12 records
refunded.vip	ximena.ns.cloudflare.com, dakota.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.10

NS records: ximena.ns.cloudflare.com, dakota.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for refunded.vip (unsigned zone)

⏱️ Timing

Total: 397ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.24.97, 172.67.218.40`
AAAA	2	`2606:4700:3037::ac43:da28, 2606:4700:3032::6815:1861`
NS	2	`dakota.ns.cloudflare.com, ximena.ns.cloudflare.com`
MX	2	`mx2.hostinger.com (pri: 10), mx1.hostinger.com (pri: 5)`
TXT	1	`v=spf1 include:_spf.mail.hostinger.com ~`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dakota.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.vip, b.nic.vip, c.nic.vip...)

Analysis

IP Addresses

refunded.vip points to the four IP addresses 104.21.24.97, 172.67.218.40, 2606:4700:3032::6815:1861 and 2606:4700:3037::ac43:da28.

propertypiper.co.uk, thinkbluemedia.com, yonza.com and two other host names share IP numbers with refunded.vip.

Name Servers

refunded.vip is served by two delegated name servers, dakota.ns.cloudflare.com and ximena.ns.cloudflare.com.

refunded.vip uses the same name servers as meowless.club, classifica.org, minthosting.net and theworkssvcs.com, among others.

The name servers of refunded.vip overlap at least partially with those of other domains — among them hxlhsp.com, ywoman.ru, rskgroup.eu and two more.

These name servers commonly co-occur with the name servers nadia.ns.cloudflare.com, elmo.ns.cloudflare.com, bristol.ns.cloudflare.com and izabella.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

dakota.ns.cloudflare.com carries IP addresses 108.162.195.79, 162.159.44.79 and 172.64.35.79, with 3 other addresses beyond those.

ximena.ns.cloudflare.com carries IP addresses 108.162.194.10, 162.159.38.10 and 172.64.34.10, with 3 other addresses beyond those.

Mail Servers

Mail for refunded.vip is handled by two mail servers — mx1.hostinger.com and mx2.hostinger.com.

refunded.vip uses an identical mail server configuration to several other domains — among them starfurniture.ae, greenyao.com.tw, hofficelicitacoes.com and two more.

refunded.vip has at least partial mail server overlap with other domains such as michianafamilydental.com, zfivem.com, semcoinfratech.com and two more.

The host names mx1.hostinger.com and mx2.hostinger.com both direct to 172.65.182.103 and 2606:4700:90:0:c1f8:f874:2386:b61f.

These two host names — mx1.hostinger.com and mx2.hostinger.com — each point to 2606:4700:90:0:c1f8:f874:2386:b61f IP addresses.

These two host names — mx1.hostinger.com and mx2.hostinger.com — each point to 172.65.182.103 IP addresses.

refunded.vip - robtex.com

refunded.vip

vip

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`refunded.vip`

`vip`