refa.dev - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

refa.dev

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:1a95πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::ac43:8886πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.26.149Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.136.134πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSpam.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a8aπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
A2803:f800:50::6ca2:c08aπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRpam.ns.cloudflare.com
A2a06:98c1:50::ac40:208aπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRpam.ns.cloudflare.com
A108.162.192.138πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
A172.64.32.138πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
A173.245.58.138πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpam.ns.cloudflare.com
NSreese.ns.cloudflare.com
A2606:4700:58::a29f:2c75πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRreese.ns.cloudflare.com
A2803:f800:50::6ca2:c375πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRreese.ns.cloudflare.com
A2a06:98c1:50::ac40:2375πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRreese.ns.cloudflare.com
A108.162.195.117πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRreese.ns.cloudflare.com
A162.159.44.117Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRreese.ns.cloudflare.com
A172.64.35.117πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRreese.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.26.149, 172.67.136.134
IPv6 hints2606:4700:3032::6815:1a95, 2606:4700:3033::ac43:8886
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=65, name=cloudflare-ech.com
SOApam.ns.cloudflare.comdns@cloudflare.com serial=2412978229

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSpam.ns.cloudflare.comreese.ns.cloudflare.comA104.21.26.149172.67.136.1342606:4700:3032::6815:1a952606:4700:3033::ac43:8886
●NSpam.ns.cloudflare.com2026-08-25 β†’ 2026-08-31 Β· 2 obs
● 2026-08-25 20:26:52
● 2026-08-31 06:20:28
●NSreese.ns.cloudflare.com2026-08-25 β†’ 2026-08-31 Β· 2 obs
● 2026-08-25 20:26:52
● 2026-08-31 06:20:28
●A104.21.26.1492026-08-25 β†’ 2026-08-31 Β· 2 obs
● 2026-08-25 20:26:52
● 2026-08-31 06:20:28
●A172.67.136.1342026-08-25 β†’ 2026-08-31 Β· 2 obs
● 2026-08-25 20:26:52
● 2026-08-31 06:20:28
●A2606:4700:3032::6815:1a952026-08-25 β†’ 2026-08-31 Β· 2 obs
● 2026-08-25 20:26:52
● 2026-08-31 06:20:28
●A2606:4700:3033::ac43:88862026-08-25 β†’ 2026-08-31 Β· 2 obs
● 2026-08-25 20:26:52
● 2026-08-31 06:20:28

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com...-
refa.devreese.ns.cloudflare.com, pam.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.195.117

NS records: reese.ns.cloudflare.com, pam.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for refa.dev (unsigned zone)

⏱️ Timing

Total: 900ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.136.134, 104.21.26.149
AAAA22606:4700:3032::6815:1a95, 2606:4700:3033::ac43:8886
NS2pam.ns.cloudflare.com, reese.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1pam.ns.cloudflare.com dns.cloudflare.com

Analysis

IP Addresses

refa.dev directs to four IP numbers, which are 104.21.26.149, 172.67.136.134, 2606:4700:3032::6815:1a95 and 2606:4700:3033::ac43:8886.

ufonew.com, neosurfonline.net, www.metalbangunan.com and two other host names share IP numbers with refa.dev.

Name Servers

refa.dev uses two name servers for its delegation: pam.ns.cloudflare.com and reese.ns.cloudflare.com.

refa.dev uses the same name servers as several other domains β€” among them mudevuong.com, chiya.workers.dev, luxhomeprime.xyz and two more.

At least some of refa.dev's name servers are shared with other domains, for example 91c6037.cc, fotostrasse.com, autecentralmail.com and two more.

These name servers are often deployed together with the name servers perla.ns.cloudflare.com, violet.ns.cloudflare.com, eric.ns.cloudflare.com and vasilii.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname pam.ns.cloudflare.com directs to 108.162.192.138, 172.64.32.138 and 173.245.58.138 along with 3 other IP addresses.

Hostname reese.ns.cloudflare.com directs to 108.162.195.117, 162.159.44.117 and 172.64.35.117 along with 3 other IP addresses.