ceros.sh - robtex.com

ceros.sh

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:15f2🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3032::ac43:c96f🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.21.242Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.201.111🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSalex.ns.cloudflare.com
A2606:4700:58::adf5:3b64🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalex.ns.cloudflare.com
A2803:f800:50::6ca2:c164🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRalex.ns.cloudflare.com
A2a06:98c1:50::ac40:2164🇺🇸 Cloudflare2a06:98c1:50::/45
PTRalex.ns.cloudflare.com
A108.162.193.100🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalex.ns.cloudflare.com
A172.64.33.100🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalex.ns.cloudflare.com
A173.245.59.100🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRalex.ns.cloudflare.com
NSprincess.ns.cloudflare.com
A2606:4700:50::a29f:2611🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
A2803:f800:50::6ca2:c211🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRprincess.ns.cloudflare.com
A2a06:98c1:50::ac40:2211🇺🇸 Cloudflare2a06:98c1:50::/45
PTRprincess.ns.cloudflare.com
A108.162.194.17🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
A162.159.38.17Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
A172.64.34.17🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
MXaspmx.l.google.com
A2607:f8b0:4004:c06::1b🇺🇸 Google2607:f8b0:4004::/48
PTRbg-in-f27.1e100.net
A172.253.63.27🇺🇸 Google172.253.63.0/24
PTRbi-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1a🇨🇱 Google2800:3f0:4003::/48
A108.177.123.26🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1b🇮🇪 Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.26🇺🇸 Google172.253.116.0/24
PTRdj-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b🇬🇧 Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.26🇺🇸 Google192.178.223.0/24
PTRyulhrs-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1a🇧🇪 Google2a00:1450:400c::/48
PTRyubrupd-in-f26.1e100.net
A172.253.157.27🇺🇸 Google172.253.0.0/16
PTRyubrupd-in-f27.1e100.net
TXTgoogle-site-verification=LZ9zU0kBFh8_tI6dAzhUQkbAMvdFNNA50ZZaOFxtrdA
TXTv=spf1 include:_spf.google.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.21.242, 172.67.201.111
IPv6 hints2606:4700:3032::6815:15f2, 2606:4700:3032::ac43:c96f
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=192, name=cloudflare-ech.com
SOAalex.ns.cloudflare.comdns@cloudflare.com serial=2409460861

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1784383325

Same first word

Similar names

DNS History

17 records (11 active, 6 former)

NSalex.ns.cloudflare.comprincess.ns.cloudflare.comdee.ns.cloudflare.comotto.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comroute1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.netA104.21.21.242172.67.201.1112606:4700:3032::6815:15f22606:4700:3032::ac43:c96f198.202.211.1
NSalex.ns.cloudflare.com2026-07-18 → 2026-07-18 · 3 obs
○ 2026-06-01 15:10:40
● 2026-07-18 04:39:42
● 2026-07-18 14:20:56
NSdee.ns.cloudflare.com2026-06-01 → 2026-06-01 · 3 obs
● 2026-06-01 15:10:40
○ 2026-07-18 04:39:42
○ 2026-07-18 14:20:56
NSotto.ns.cloudflare.com2026-06-01 → 2026-06-01 · 3 obs
● 2026-06-01 15:10:40
○ 2026-07-18 04:39:42
○ 2026-07-18 14:20:56
NSprincess.ns.cloudflare.com2026-07-18 → 2026-07-18 · 3 obs
○ 2026-06-01 15:10:40
● 2026-07-18 04:39:42
● 2026-07-18 14:20:56
MXalt1.aspmx.l.google.com2026-07-02 → 2026-07-18 · 3 obs
○ 2026-06-22 01:21:40
● 2026-07-02 18:44:54
● 2026-07-18 14:20:56
MXalt2.aspmx.l.google.com2026-07-02 → 2026-07-18 · 3 obs
○ 2026-06-22 01:21:40
● 2026-07-02 18:44:54
● 2026-07-18 14:20:56
MXalt3.aspmx.l.google.com2026-07-02 → 2026-07-18 · 3 obs
○ 2026-06-22 01:21:40
● 2026-07-02 18:44:54
● 2026-07-18 14:20:56
MXalt4.aspmx.l.google.com2026-07-02 → 2026-07-18 · 3 obs
○ 2026-06-22 01:21:40
● 2026-07-02 18:44:54
● 2026-07-18 14:20:56
MXaspmx.l.google.com2026-07-02 → 2026-07-18 · 3 obs
○ 2026-06-22 01:21:40
● 2026-07-02 18:44:54
● 2026-07-18 14:20:56
MXroute1.mx.cloudflare.net2026-06-22 → 2026-06-22 · 3 obs
● 2026-06-22 01:21:40
○ 2026-07-02 18:44:54
○ 2026-07-18 14:20:56
MXroute2.mx.cloudflare.net2026-06-22 → 2026-06-22 · 3 obs
● 2026-06-22 01:21:40
○ 2026-07-02 18:44:54
○ 2026-07-18 14:20:56
MXroute3.mx.cloudflare.net2026-06-22 → 2026-06-22 · 3 obs
● 2026-06-22 01:21:40
○ 2026-07-02 18:44:54
○ 2026-07-18 14:20:56
A104.21.21.2422026-07-18 → 2026-07-18 · 3 obs
○ 2026-06-01 15:10:40
● 2026-07-18 04:39:42
● 2026-07-18 14:20:56
A172.67.201.1112026-07-18 → 2026-07-18 · 3 obs
○ 2026-06-01 15:10:40
● 2026-07-18 04:39:42
● 2026-07-18 14:20:56
A198.202.211.12026-06-01 → 2026-06-01 · 3 obs
● 2026-06-01 15:10:40
○ 2026-07-18 04:39:42
○ 2026-07-18 14:20:56
A2606:4700:3032::6815:15f22026-07-18 → 2026-07-18 · 3 obs
○ 2026-06-01 15:10:40
● 2026-07-18 04:39:42
● 2026-07-18 14:20:56
A2606:4700:3032::ac43:c96f2026-07-18 → 2026-07-18 · 3 obs
○ 2026-06-01 15:10:40
● 2026-07-18 04:39:42
● 2026-07-18 14:20:56

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
ceros.shalex.ns.cloudflare.com, princess.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.194.17

NS records: alex.ns.cloudflare.com, princess.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ceros.sh (unsigned zone)

⏱️ Timing

Total: 795ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.201.111, 104.21.21.242
AAAA22606:4700:3032::6815:15f2, 2606:4700:3032::ac43:c96f
NS2alex.ns.cloudflare.com, princess.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT2google-site-verification=LZ9zU0kBFh8_tI6, v=spf1 include:_spf.google.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1alex.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

ceros.sh has four IP addresses: 104.21.21.242, 172.67.201.111, 2606:4700:3032::6815:15f2 and 2606:4700:3032::ac43:c96f.

Additional host names — djerba.net, 15-acres.com, infosusonline.com.br and two others — share IP numbers with ceros.sh.

Name Servers

ceros.sh uses two name servers for its delegation: alex.ns.cloudflare.com and princess.ns.cloudflare.com.

ceros.sh shares its name server setup with other domains, including cynovathirelo.com, haesun247.com, visionairlines.com and two others.

ceros.sh partially shares its NS delegation with several other domains, including thoitrangjsc.com, glkww.com, sg15quant.com and two others.

These name servers are regularly seen alongside mark.ns.cloudflare.com and john.ns.cloudflare.com as name servers.

Host names with 6 IP numbers:

Hostname alex.ns.cloudflare.com directs to 108.162.193.100, 172.64.33.100 and 173.245.59.100 along with 3 other IP addresses.

Hostname princess.ns.cloudflare.com directs to 108.162.194.17, 162.159.38.17 and 172.64.34.17 along with 3 other IP addresses.

Mail Servers

Mail for ceros.sh is handled by five mail servers, namely aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

ceros.sh shares mail servers — at least in part — with other domains, including didonato.wpengine.com, deck.me, ns500765.ns500693.ns500693.ns500693.ns500693.ns500699.ns500693.ns500699.ns500734.ns500588.ns500683.ns500683.ns500612.ns500110.dtrkdll.com and two others.

These mail servers are frequently paired with the mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com.

Host names with two IP numbers:

aspmx.l.google.com directs traffic to 172.253.63.27 and 2607:f8b0:4004:c06::1b.

alt1.aspmx.l.google.com directs traffic to 108.177.123.26 and 2800:3f0:4003:c0f::1a.

alt2.aspmx.l.google.com directs traffic to 172.253.116.26 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com directs traffic to 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com directs traffic to 172.253.157.27 and 2a00:1450:400c:c23::1a.