`cryptomus.sh`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:dacc^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:187f^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.24.127^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.218.204^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`ernest.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba4^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ernest.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a4^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ernest.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a4^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ernest.ns.cloudflare.com`
		A	108.162.193.164^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ernest.ns.cloudflare.com`
		A	172.64.33.164^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ernest.ns.cloudflare.com`
		A	173.245.59.164^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ernest.ns.cloudflare.com`
NS	`paislee.ns.cloudflare.com`
		A	2606:4700:50::a29f:26b7^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paislee.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2b7^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`paislee.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22b7^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`paislee.ns.cloudflare.com`
		A	108.162.194.183^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paislee.ns.cloudflare.com`
		A	162.159.38.183^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paislee.ns.cloudflare.com`
		A	172.64.34.183^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paislee.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.24.127, 172.67.218.204
		IPv6 hints	2606:4700:3032::ac43:dacc, 2606:4700:3034::6815:187f
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=73, name=cloudflare-ech.com
SOA	`ernest.ns.cloudflare.com`dns@cloudflare.com serial=2400119611

`sh`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.nic.sh` ⭐
	NS	`a2.nic.sh`
	NS	`b0.nic.sh`
	NS	`c0.nic.sh`
	SOA	`a0.nic.sh`hostmaster@donuts.email serial=1775985401

Subdomains

receive.cryptomus.sh

Same first word

Similar names

stormycup.com

cryptosum.com

myprocuts.com

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
sh	b0.nic.sh, a0.nic.sh, c0.nic.sh, a2.nic.sh	8 records
cryptomus.sh	paislee.ns.cloudflare.com, ernest.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.183

NS records: paislee.ns.cloudflare.com, ernest.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cryptomus.sh (unsigned zone)

⏱️ Timing

Total: 441ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.218.204, 104.21.24.127`
AAAA	2	`2606:4700:3034::6815:187f, 2606:4700:3032::ac43:dacc`
NS	2	`ernest.ns.cloudflare.com, paislee.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`ernest.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (b0.nic.sh, b0.nic.sh, a0.nic.sh...)

Analysis

Hierarchy

cryptomus.sh is a parent of receive.cryptomus.sh.

IP Addresses

cryptomus.sh resolves to four IPs: 2606:4700:3032::ac43:dacc, 2606:4700:3034::6815:187f, 104.21.24.127 and 172.67.218.204.

Other host names such as pathstack.net, www.qingdao33.com, glimmer-ways.com, bollyflix.do and bjjycp.com share IP numbers with cryptomus.sh.

Name Servers

cryptomus.sh is delegated to two name servers: ernest.ns.cloudflare.com and paislee.ns.cloudflare.com.

cryptomus.sh uses the same name server setup as other domains, including tha-sso.com, stararts.net, yallalive.cv, casadoson.com and idenctitas.com.

At least part of the name servers for cryptomus.sh are shared with other domains, for instance fuelexhausts.com, thelittlepig.ie, caiyuanzi.me, pay24t.com and attahri.com.

These name servers are commonly used alongside the name servers coco.ns.cloudflare.com.

Host names with six IP numbers:

ernest.ns.cloudflare.com points to: 2606:4700:58::adf5:3ba4, 2803:f800:50::6ca2:c1a4, 2a06:98c1:50::ac40:21a4, 108.162.193.164, 172.64.33.164 and 173.245.59.164.

paislee.ns.cloudflare.com points to: 2606:4700:50::a29f:26b7, 2803:f800:50::6ca2:c2b7, 2a06:98c1:50::ac40:22b7, 108.162.194.183, 162.159.38.183 and 172.64.34.183.

cryptomus.sh - robtex.com

cryptomus.sh

sh