esign.sh - robtex.com
esign.sh
| DNSSEC | ⚠️ Not signed | ||||||
| A | 2606:4700:3033::6815:3566🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 2606:4700:3033::ac43:d3fe🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 104.21.53.102Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 172.67.211.254🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| NS | irma.ns.cloudflare.com ⭐ | ||||||
| A | 2606:4700:50::adf5:3aa6🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | irma.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c0a6🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | irma.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:20a6🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | irma.ns.cloudflare.com | ||||||
| A | 108.162.192.166🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | irma.ns.cloudflare.com | ||||||
| A | 172.64.32.166🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | irma.ns.cloudflare.com | ||||||
| A | 173.245.58.166🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | irma.ns.cloudflare.com | ||||||
| NS | kirk.ns.cloudflare.com | ||||||
| A | 2606:4700:58::adf5:3bc0🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | kirk.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c1c0🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | kirk.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:21c0🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | kirk.ns.cloudflare.com | ||||||
| A | 108.162.193.192🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | kirk.ns.cloudflare.com | ||||||
| A | 172.64.33.192🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | kirk.ns.cloudflare.com | ||||||
| A | 173.245.59.192🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | kirk.ns.cloudflare.com | ||||||
| HTTPS | HTTP/3, HTTP/2 ✓ hints match | ||||||
| IPv4 hints | 104.21.53.102, 172.67.211.254 | ||||||
| IPv6 hints | 2606:4700:3033::6815:3566, 2606:4700:3033::ac43:d3fe | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=159, name=cloudflare-ech.com | ||||||
| SOA | irma.ns.cloudflare.comdns@cloudflare.com serial=2402534155 | ||||||
sh
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | a0.nic.sh ⭐ | ||||||
| NS | a2.nic.sh | ||||||
| NS | b0.nic.sh | ||||||
| NS | c0.nic.sh | ||||||
| SOA | a0.nic.shhostmaster@donuts.email serial=1778375014 | ||||||
Same first word
Similar names
DNS History
6 records (6 active, 0 former)
●NSirma.ns.cloudflare.com2026-05-07 → 2026-05-10 · 2 obs
● 2026-05-10 01:20:12
●NSkirk.ns.cloudflare.com2026-05-07 → 2026-05-10 · 2 obs
● 2026-05-10 01:20:12
●A104.21.53.1022026-05-07 → 2026-05-10 · 2 obs
● 2026-05-10 01:20:12
●A172.67.211.2542026-05-07 → 2026-05-10 · 2 obs
● 2026-05-10 01:20:12
●A2606:4700:3033::6815:35662026-05-07 → 2026-05-10 · 2 obs
● 2026-05-10 01:20:12
●A2606:4700:3033::ac43:d3fe2026-05-07 → 2026-05-10 · 2 obs
● 2026-05-10 01:20:12
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| sh | b0.nic.sh, a0.nic.sh, c0.nic.sh, a2.nic.sh | 8 records |
| esign.sh | kirk.ns.cloudflare.com, irma.ns.cloudflare.com | - |
✅ Authoritative Response
Server:108.162.192.166
NS records: kirk.ns.cloudflare.com, irma.ns.cloudflare.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for esign.sh (unsigned zone)
⏱️ Timing
Total: 515ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.211.254, 104.21.53.102 |
| AAAA | 2 | 2606:4700:3033::ac43:d3fe, 2606:4700:3033::6815:3566 |
| NS | 2 | irma.ns.cloudflare.com, kirk.ns.cloudflare.com |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | irma.ns.cloudflare.com dns.cloudflare.co |
📌 Glue Records Collected
Total: 8
In-bailiwick: 8 (b0.nic.sh, b0.nic.sh, a0.nic.sh...)
Analysis
IP Addresses
Four IP numbers are pointed to by esign.sh: 2606:4700:3033::6815:3566, 2606:4700:3033::ac43:d3fe, 104.21.53.102 and 172.67.211.254.
other host names including media91.sbs, euro.museumofhoaxes.com, lasvegas.casino.hu, apikurier.pl and japan.museumofhoaxes.com share IP numbers with esign.sh.
Name Servers
esign.sh is delegated to two name servers irma.ns.cloudflare.com and kirk.ns.cloudflare.com.
esign.sh shares the same name server setup as other domains, for instance videoformation.net, joeyfans.com, humandraft.net, animalts.com and sportslife.life.
esign.sh at least partially shares name servers with other domains, for instance kiwiwebsitedesign.nz, ccgrg.com, pimpmychicken.com, vidhubfile.com and kingblackjackprime.com.
these name servers are commonly used alongside nitin.ns.cloudflare.com.
Host names with six IP numbers:
Host name irma.ns.cloudflare.com points to: 2606:4700:50::adf5:3aa6, 2803:f800:50::6ca2:c0a6, 2a06:98c1:50::ac40:20a6, 108.162.192.166, 172.64.32.166 and 173.245.58.166.
Host name kirk.ns.cloudflare.com points to: 2606:4700:58::adf5:3bc0, 2803:f800:50::6ca2:c1c0, 2a06:98c1:50::ac40:21c0, 108.162.193.192, 172.64.33.192 and 173.245.59.192.