ref.so - dns.ninja

ref.so

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:25aeπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3036::ac43:d2c8πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.37.174Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.210.200πŸ‡ΊπŸ‡Έ Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSfiona.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a9dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfiona.ns.cloudflare.com
A2803:f800:50::6ca2:c09dπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRfiona.ns.cloudflare.com
A2a06:98c1:50::ac40:209dπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRfiona.ns.cloudflare.com
A108.162.192.157πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfiona.ns.cloudflare.com
A172.64.32.157πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfiona.ns.cloudflare.com
A173.245.58.157πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRfiona.ns.cloudflare.com
NSnorm.ns.cloudflare.com
A2606:4700:58::adf5:3b86πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorm.ns.cloudflare.com
A2803:f800:50::6ca2:c186πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnorm.ns.cloudflare.com
A2a06:98c1:50::ac40:2186πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRnorm.ns.cloudflare.com
A108.162.193.134πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorm.ns.cloudflare.com
A172.64.33.134πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorm.ns.cloudflare.com
A173.245.59.134πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnorm.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.37.174, 172.67.210.200
IPv6 hints2606:4700:3030::6815:25ae, 2606:4700:3036::ac43:d2c8
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=143, name=cloudflare-ech.com
SOAfiona.ns.cloudflare.comdns@cloudflare.com serial=2410779398

so

DNSSEC⚠️ Not signed
NSd.nic.so ⭐
NSe.nic.so
TXTGeneration Time ISO 8601: 2026-07-30 19:05:14
TXTGeneration Time: 1785438314
SOAd.nic.sohostmaster@nic.so 2026-07-30 #19
WOT: SAFE (59/100)

Same first word

Similar names

DNS History

27 records (6 active, 21 former)

20162017201820192020202120222023202420252026NSfiona.ns.cloudflare.comnorm.ns.cloudflare.comns1.domain-resolution.netns1.parkingcrew.netns1dns.name.comns2.parkingcrew.netns2nsy.domain-resolution.netns2nsy.name.comns3.domain-resolution.netns3fqs.name.comns4gvx.domain-resolution.netns4gvx.name.comMXmail.h-email.netA104.21.37.174172.67.210.2002606:4700:3030::6815:25ae2606:4700:3036::ac43:d2c8104.247.81.10115.187.78.251184.105.216.202188.114.96.0188.114.97.02606:4700:3032::ac43:d2c82606:4700:3033::6815:25ae2a06:98c1:3120::2a06:98c1:3121::66.160.146.69
●NSfiona.ns.cloudflare.com2026-02-17 β†’ 2026-07-30 Β· 3 obs
β—‹ 2021-04-01 03:05:30
● 2026-02-17 09:35:14
● 2026-07-30 19:59:00
●NSnorm.ns.cloudflare.com2026-02-17 β†’ 2026-07-30 Β· 3 obs
β—‹ 2021-04-01 03:05:30
● 2026-02-17 09:35:14
● 2026-07-30 19:59:00
β—‹NSns1.domain-resolution.net2015-09-01 β†’ 2017-04-03 Β· 4 obs
● 2015-09-01 08:57:18
● 2017-04-03 07:32:36
β—‹ 2017-04-04 16:05:16
β—‹ 2026-07-30 19:59:00
β—‹NSns1.parkingcrew.net2021-04-01 β†’ 2021-04-01 Β· 4 obs
β—‹ 2017-08-16 10:03:50
● 2021-04-01 03:05:30
β—‹ 2026-02-17 09:35:14
β—‹ 2026-07-30 19:59:00
β—‹NSns1dns.name.com2017-04-04 β†’ 2017-08-16 Β· 5 obs
β—‹ 2017-04-03 07:32:36
● 2017-04-04 16:05:16
● 2017-08-16 10:03:50
β—‹ 2021-04-01 03:05:30
β—‹ 2026-07-30 19:59:00
β—‹NSns2.parkingcrew.net2021-04-01 β†’ 2021-04-01 Β· 4 obs
β—‹ 2017-08-16 10:03:50
● 2021-04-01 03:05:30
β—‹ 2026-02-17 09:35:14
β—‹ 2026-07-30 19:59:00
β—‹NSns2nsy.domain-resolution.net2015-09-01 β†’ 2017-04-03 Β· 4 obs
● 2015-09-01 08:57:18
● 2017-04-03 07:32:36
β—‹ 2017-04-04 16:05:16
β—‹ 2026-07-30 19:59:00
β—‹NSns2nsy.name.com2017-04-04 β†’ 2017-08-16 Β· 5 obs
β—‹ 2017-04-03 07:32:36
● 2017-04-04 16:05:16
● 2017-08-16 10:03:50
β—‹ 2021-04-01 03:05:30
β—‹ 2026-07-30 19:59:00
β—‹NSns3.domain-resolution.net2015-09-01 β†’ 2017-04-03 Β· 4 obs
● 2015-09-01 08:57:18
● 2017-04-03 07:32:36
β—‹ 2017-04-04 16:05:16
β—‹ 2026-07-30 19:59:00
β—‹NSns3fqs.name.com2017-04-04 β†’ 2017-08-16 Β· 7 obs
β—‹ 2017-04-03 07:32:36
● 2017-04-04 16:05:16
● 2017-04-30 01:37:24
β—‹ 2017-05-05 09:01:52
● 2017-08-16 10:03:50
β—‹ 2021-04-01 03:05:30
β—‹ 2026-07-30 19:59:00
β—‹NSns4gvx.domain-resolution.net2015-09-01 β†’ 2017-04-03 Β· 4 obs
● 2015-09-01 08:57:18
● 2017-04-03 07:32:36
β—‹ 2017-04-04 16:05:16
β—‹ 2026-07-30 19:59:00
β—‹NSns4gvx.name.com2017-04-04 β†’ 2017-08-16 Β· 5 obs
β—‹ 2017-04-03 07:32:36
● 2017-04-04 16:05:16
● 2017-08-16 10:03:50
β—‹ 2021-04-01 03:05:30
β—‹ 2026-07-30 19:59:00
β—‹MXmail.h-email.net2021-04-01 β†’ 2021-04-01 Β· 3 obs
● 2021-04-01 03:05:30
β—‹ 2026-02-17 09:35:14
β—‹ 2026-07-30 19:59:00
●A104.21.37.1742026-02-17 β†’ 2026-07-30 Β· 13 obs
β—‹ 2021-04-01 03:05:30
● 2026-02-17 09:35:14
β—‹ 2026-02-18 18:18:36
● 2026-04-01 20:03:24
● 2026-04-06 12:27:06
β—‹ 2026-04-13 18:49:36
● 2026-05-01 07:55:20
● 2026-05-04 01:05:14
β—‹ 2026-05-17 02:55:22
● 2026-05-19 06:06:46
● 2026-06-15 11:33:42
β—‹ 2026-06-16 22:43:18
● 2026-07-30 19:59:00
β—‹A104.247.81.102021-04-01 β†’ 2021-04-01 Β· 4 obs
β—‹ 2017-08-16 10:03:50
● 2021-04-01 03:05:30
β—‹ 2026-02-17 09:35:14
β—‹ 2026-07-30 19:59:00
β—‹A115.187.78.2512015-10-23 β†’ 2016-05-12 Β· 5 obs
β—‹ 2015-10-21 19:40:52
● 2015-10-23 20:59:32
● 2016-05-12 07:20:48
β—‹ 2016-06-02 05:07:54
β—‹ 2026-07-30 19:59:00
●A172.67.210.2002026-02-17 β†’ 2026-07-30 Β· 13 obs
β—‹ 2021-04-01 03:05:30
● 2026-02-17 09:35:14
β—‹ 2026-02-18 18:18:36
● 2026-04-01 20:03:24
● 2026-04-06 12:27:06
β—‹ 2026-04-13 18:49:36
● 2026-05-01 07:55:20
● 2026-05-04 01:05:14
β—‹ 2026-05-17 02:55:22
● 2026-05-19 06:06:46
● 2026-06-15 11:33:42
β—‹ 2026-06-16 22:43:18
● 2026-07-30 19:59:00
β—‹A184.105.216.2022015-09-01 β†’ 2015-10-21 Β· 4 obs
● 2015-09-01 08:57:18
● 2015-10-21 19:40:52
β—‹ 2015-10-23 20:59:32
β—‹ 2026-07-30 19:59:00
β—‹A188.114.96.02026-02-18 β†’ 2026-06-16 Β· 12 obs
β—‹ 2026-02-17 09:35:14
● 2026-02-18 18:18:36
β—‹ 2026-04-01 20:03:24
β—‹ 2026-04-06 12:27:06
● 2026-04-13 18:49:36
β—‹ 2026-05-01 07:55:20
β—‹ 2026-05-04 01:05:14
● 2026-05-17 02:55:22
β—‹ 2026-05-19 06:06:46
β—‹ 2026-06-15 11:33:42
● 2026-06-16 22:43:18
β—‹ 2026-07-30 19:59:00
β—‹A188.114.97.02026-02-18 β†’ 2026-06-16 Β· 12 obs
β—‹ 2026-02-17 09:35:14
● 2026-02-18 18:18:36
β—‹ 2026-04-01 20:03:24
β—‹ 2026-04-06 12:27:06
● 2026-04-13 18:49:36
β—‹ 2026-05-01 07:55:20
β—‹ 2026-05-04 01:05:14
● 2026-05-17 02:55:22
β—‹ 2026-05-19 06:06:46
β—‹ 2026-06-15 11:33:42
● 2026-06-16 22:43:18
β—‹ 2026-07-30 19:59:00
●A2606:4700:3030::6815:25ae2026-07-30 β†’ 2026-07-30 Β· 2 obs
β—‹ 2026-06-16 22:43:18
● 2026-07-30 19:59:00
β—‹A2606:4700:3032::ac43:d2c82026-02-17 β†’ 2026-06-15 Β· 13 obs
β—‹ 2021-04-01 03:05:30
● 2026-02-17 09:35:14
β—‹ 2026-02-18 18:18:36
● 2026-04-01 20:03:24
● 2026-04-06 12:27:06
β—‹ 2026-04-13 18:49:36
● 2026-05-01 07:55:20
● 2026-05-04 01:05:14
β—‹ 2026-05-17 02:55:22
● 2026-05-19 06:06:46
● 2026-06-15 11:33:42
β—‹ 2026-06-16 22:43:18
β—‹ 2026-07-30 19:59:00
β—‹A2606:4700:3033::6815:25ae2026-02-17 β†’ 2026-06-15 Β· 13 obs
β—‹ 2021-04-01 03:05:30
● 2026-02-17 09:35:14
β—‹ 2026-02-18 18:18:36
● 2026-04-01 20:03:24
● 2026-04-06 12:27:06
β—‹ 2026-04-13 18:49:36
● 2026-05-01 07:55:20
● 2026-05-04 01:05:14
β—‹ 2026-05-17 02:55:22
● 2026-05-19 06:06:46
● 2026-06-15 11:33:42
β—‹ 2026-06-16 22:43:18
β—‹ 2026-07-30 19:59:00
●A2606:4700:3036::ac43:d2c82026-07-30 β†’ 2026-07-30 Β· 2 obs
β—‹ 2026-06-16 22:43:18
● 2026-07-30 19:59:00
β—‹A2a06:98c1:3120::2026-02-18 β†’ 2026-06-16 Β· 12 obs
β—‹ 2026-02-17 09:35:14
● 2026-02-18 18:18:36
β—‹ 2026-04-01 20:03:24
β—‹ 2026-04-06 12:27:06
● 2026-04-13 18:49:36
β—‹ 2026-05-01 07:55:20
β—‹ 2026-05-04 01:05:14
● 2026-05-17 02:55:22
β—‹ 2026-05-19 06:06:46
β—‹ 2026-06-15 11:33:42
● 2026-06-16 22:43:18
β—‹ 2026-07-30 19:59:00
β—‹A2a06:98c1:3121::2026-02-18 β†’ 2026-06-16 Β· 12 obs
β—‹ 2026-02-17 09:35:14
● 2026-02-18 18:18:36
β—‹ 2026-04-01 20:03:24
β—‹ 2026-04-06 12:27:06
● 2026-04-13 18:49:36
β—‹ 2026-05-01 07:55:20
β—‹ 2026-05-04 01:05:14
● 2026-05-17 02:55:22
β—‹ 2026-05-19 06:06:46
β—‹ 2026-06-15 11:33:42
● 2026-06-16 22:43:18
β—‹ 2026-07-30 19:59:00
β—‹A66.160.146.692016-06-02 β†’ 2017-08-16 Β· 5 obs
β—‹ 2016-05-12 07:20:48
● 2016-06-02 05:07:54
● 2017-08-16 10:03:50
β—‹ 2021-04-01 03:05:30
β—‹ 2026-07-30 19:59:00

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
soe.nic.so, d.nic.so4 records
ref.sonorm.ns.cloudflare.com, fiona.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.32.157

NS records: norm.ns.cloudflare.com, fiona.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for so (unsigned zone)

⏱️ Timing

Total: 585ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.210.200, 104.21.37.174
AAAA22606:4700:3030::6815:25ae, 2606:4700:3036::ac43:d2c8
NS2fiona.ns.cloudflare.com, norm.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1fiona.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 4

In-bailiwick: 4 (e.nic.so, d.nic.so, e.nic.so...)

Analysis

IP Addresses

ref.so directs to four IP numbers, which are 104.21.37.174, 172.67.210.200, 2606:4700:3030::6815:25ae and 2606:4700:3036::ac43:d2c8.

Additional host names β€” diavolonet.com, nominybase.click, foreverstock17.info and two others β€” share IP numbers with ref.so.

Name Servers

DNS delegation for ref.so points to two name servers: fiona.ns.cloudflare.com and norm.ns.cloudflare.com.

ref.so shares its name server setup with other domains, including oroco.co.uk, visitowensboro.com, baseballbatsshop.com and two others.

The name servers of ref.so overlap at least partially with those of other domains β€” among them umtmyanmar.com, armory.net, 959666666.vip and two more.

These name servers commonly appear in combination with the name servers lady.ns.cloudflare.com.

Host names with 6 IP numbers:

fiona.ns.cloudflare.com has IP addresses 108.162.192.157, 172.64.32.157 and 173.245.58.157, plus 3 other.

norm.ns.cloudflare.com has IP addresses 108.162.193.134, 172.64.33.134 and 173.245.59.134, plus 3 other.