crop.sh - robtex.com

crop.sh

DNSSEC⚠️ Not signed
A2606:4700:3034::6815:3c59🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::ac43:c301🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.60.89Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.195.1🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSannabel.ns.cloudflare.com
A2606:4700:50::a29f:26cf🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
A2803:f800:50::6ca2:c2cf🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRannabel.ns.cloudflare.com
A2a06:98c1:50::ac40:22cf🇺🇸 Cloudflare2a06:98c1:50::/45
PTRannabel.ns.cloudflare.com
A108.162.194.207🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
A162.159.38.207Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
A172.64.34.207🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannabel.ns.cloudflare.com
NSaugustus.ns.cloudflare.com
A2606:4700:58::a29f:2c02🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaugustus.ns.cloudflare.com
A2803:f800:50::6ca2:c302🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRaugustus.ns.cloudflare.com
A2a06:98c1:50::ac40:2302🇺🇸 Cloudflare2a06:98c1:50::/45
PTRaugustus.ns.cloudflare.com
A108.162.195.2🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaugustus.ns.cloudflare.com
A162.159.44.2Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaugustus.ns.cloudflare.com
A172.64.35.2🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRaugustus.ns.cloudflare.com
TXTgoogle-site-verification=WbcSvlVMIHH4aCu9GZWX63cg8KMzQTSn5JOBRSK2wOc
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.60.89, 172.67.195.1
IPv6 hints2606:4700:3034::6815:3c59, 2606:4700:3036::ac43:c301
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=159, name=cloudflare-ech.com
SOAannabel.ns.cloudflare.comdns@cloudflare.com serial=2402706821

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1781416807
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

6 records (6 active, 0 former)

NSannabel.ns.cloudflare.comaugustus.ns.cloudflare.comA104.21.60.89172.67.195.12606:4700:3034::6815:3c592606:4700:3036::ac43:c301
NSannabel.ns.cloudflare.com2026-05-24 → 2026-06-14 · 2 obs
● 2026-05-24 08:39:44
● 2026-06-14 06:21:16
NSaugustus.ns.cloudflare.com2026-05-24 → 2026-06-14 · 2 obs
● 2026-05-24 08:39:44
● 2026-06-14 06:21:16
A104.21.60.892026-05-24 → 2026-06-14 · 2 obs
● 2026-05-24 08:39:44
● 2026-06-14 06:21:16
A172.67.195.12026-05-24 → 2026-06-14 · 2 obs
● 2026-05-24 08:39:44
● 2026-06-14 06:21:16
A2606:4700:3034::6815:3c592026-05-24 → 2026-06-14 · 2 obs
● 2026-05-24 08:39:44
● 2026-06-14 06:21:16
A2606:4700:3036::ac43:c3012026-05-24 → 2026-06-14 · 2 obs
● 2026-05-24 08:39:44
● 2026-06-14 06:21:16

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
crop.shannabel.ns.cloudflare.com, augustus.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.35.2

NS records: annabel.ns.cloudflare.com, augustus.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for crop.sh (unsigned zone)

⏱️ Timing

Total: 602ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.195.1, 104.21.60.89
AAAA22606:4700:3036::ac43:c301, 2606:4700:3034::6815:3c59
NS2annabel.ns.cloudflare.com, augustus.ns.cloudflare.com
TXT1google-site-verification=WbcSvlVMIHH4aCu
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1annabel.ns.cloudflare.com dns.cloudflare

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

crop.sh points to four IP numbers: 104.21.60.89, 172.67.195.1, 2606:4700:3034::6815:3c59 and 2606:4700:3036::ac43:c301.

Additional host names — creatucurso.pro, martialartsmoviechannel.com, wiki.munics.es and two others — share IP numbers with crop.sh.

Name Servers

Two name servers handle the delegation for crop.sh: annabel.ns.cloudflare.com and augustus.ns.cloudflare.com.

crop.sh shares its name server setup with other domains, including lojab3.com.br, qalbit.com, wbm74kso.site and two others.

There is at least partial name server overlap between crop.sh and other domains — aiode.com, belvoro.pro, vbet44.com and two more among them.

These name servers tend to appear in combination with the name servers laura.ns.cloudflare.com, george.ns.cloudflare.com, julio.ns.cloudflare.com and angela.ns.cloudflare.com.

Host names with 6 IP numbers:

annabel.ns.cloudflare.com resolves to 108.162.194.207, 162.159.38.207 and 172.64.34.207 among others, with 3 other IP addresses in total.

augustus.ns.cloudflare.com resolves to 108.162.195.2, 162.159.44.2 and 172.64.35.2 among others, with 3 other IP addresses in total.