cloudbash.sh - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

cloudbash.sh

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:2ab1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::ac43:cf0eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.42.177Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.207.14πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSgwen.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3aa0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgwen.ns.cloudflare.com
A2803:f800:50::6ca2:c0a0πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRgwen.ns.cloudflare.com
A2a06:98c1:50::ac40:20a0πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRgwen.ns.cloudflare.com
A108.162.192.160πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgwen.ns.cloudflare.com
A172.64.32.160πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgwen.ns.cloudflare.com
A173.245.58.160πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgwen.ns.cloudflare.com
NSlou.ns.cloudflare.com
A2606:4700:58::adf5:3bc7πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlou.ns.cloudflare.com
A2803:f800:50::6ca2:c1c7πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRlou.ns.cloudflare.com
A2a06:98c1:50::ac40:21c7πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRlou.ns.cloudflare.com
A108.162.193.199πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlou.ns.cloudflare.com
A172.64.33.199πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlou.ns.cloudflare.com
A173.245.59.199πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRlou.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.42.177, 172.67.207.14
IPv6 hints2606:4700:3030::6815:2ab1, 2606:4700:3033::ac43:cf0e
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=51, name=cloudflare-ech.com
SOAgwen.ns.cloudflare.comdns@cloudflare.com serial=2414394866

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1789968603

Same first word

Similar names

Previous names

Next names

DNS History

18 records (6 active, 12 former)

20162017201820192020202120222023202420252026NSgwen.ns.cloudflare.comlou.ns.cloudflare.comns-1330.awsdns-38.orgns-167.awsdns-20.comns-1957.awsdns-52.co.ukns-575.awsdns-07.netMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comA104.21.42.177172.67.207.142606:4700:3030::6815:2ab12606:4700:3033::ac43:cf0e104.155.199.17139.59.48.18154.201.144.149
●NSgwen.ns.cloudflare.com2026-09-07 β†’ 2026-09-21 Β· 3 obs
β—‹ 2026-08-19 14:24:58
● 2026-09-07 20:08:32
● 2026-09-21 05:43:54
●NSlou.ns.cloudflare.com2026-09-07 β†’ 2026-09-21 Β· 3 obs
β—‹ 2026-08-19 14:24:58
● 2026-09-07 20:08:32
● 2026-09-21 05:43:54
β—‹NSns-1330.awsdns-38.org2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹NSns-167.awsdns-20.com2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹NSns-1957.awsdns-52.co.uk2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹NSns-575.awsdns-07.net2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹MXalt1.aspmx.l.google.com2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹MXalt2.aspmx.l.google.com2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹MXaspmx.l.google.com2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹MXaspmx2.googlemail.com2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹MXaspmx3.googlemail.com2015-06-06 β†’ 2017-10-02 Β· 4 obs
● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
β—‹A104.155.199.172015-10-23 β†’ 2016-04-24 Β· 5 obs
β—‹ 2015-06-06 18:54:16
● 2015-10-23 19:54:26
● 2016-04-24 18:03:26
β—‹ 2017-10-02 22:47:30
β—‹ 2026-09-21 05:43:54
●A104.21.42.1772026-09-18 β†’ 2026-09-21 Β· 3 obs
β—‹ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-21 05:43:54
β—‹A139.59.48.1812017-10-02 β†’ 2017-10-02 Β· 4 obs
β—‹ 2016-04-24 18:03:26
● 2017-10-02 22:47:30
β—‹ 2026-08-19 14:24:58
β—‹ 2026-09-21 05:43:54
●A172.67.207.142026-09-18 β†’ 2026-09-21 Β· 3 obs
β—‹ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-21 05:43:54
●A2606:4700:3030::6815:2ab12026-09-18 β†’ 2026-09-21 Β· 3 obs
β—‹ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-21 05:43:54
●A2606:4700:3033::ac43:cf0e2026-09-18 β†’ 2026-09-21 Β· 3 obs
β—‹ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-21 05:43:54
β—‹A54.201.144.1492015-06-06 β†’ 2015-06-06 Β· 3 obs
● 2015-06-06 18:54:16
β—‹ 2015-10-23 19:54:26
β—‹ 2026-09-21 05:43:54

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
cloudbash.shgwen.ns.cloudflare.com, lou.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.33.199

NS records: gwen.ns.cloudflare.com, lou.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cloudbash.sh (unsigned zone)

⏱️ Timing

Total: 422ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.207.14, 104.21.42.177
AAAA22606:4700:3033::ac43:cf0e, 2606:4700:3030::6815:2ab1
NS2gwen.ns.cloudflare.com, lou.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1gwen.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

cloudbash.sh resolves to four IP addresses: 104.21.42.177, 172.67.207.14, 2606:4700:3030::6815:2ab1 and 2606:4700:3033::ac43:cf0e.

Among the host names that share IP numbers with cloudbash.sh are ddbgs.com, vgvki.com, ecobox.cyou and two others.

Name Servers

cloudbash.sh has two authoritative name servers β€” gwen.ns.cloudflare.com and lou.ns.cloudflare.com.

cloudbash.sh has the same name server delegation as a number of other domains, such as agentfleet.live, scanner-7th.pages.dev, stavochka.com and two more.

cloudbash.sh has at least partial name server overlap with other domains, such as z46021415.workers.dev, appjniwia-org-c87d50f6.pages.dev, fatzut.cfd and two others.

It is common to see these name servers used together with name servers theo.ns.cloudflare.com and chip.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

gwen.ns.cloudflare.com points to 108.162.192.160, 172.64.32.160, 173.245.58.160 and 3 other IP addresses.

lou.ns.cloudflare.com points to 108.162.193.199, 172.64.33.199, 173.245.59.199 and 3 other IP addresses.