facewa.sh - robtex.com

facewa.sh

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:42e6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3034::ac43:d11aπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.66.230Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.209.26πŸ‡ΊπŸ‡Έ Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSandronicus.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c71πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRandronicus.ns.cloudflare.com
A2803:f800:50::6ca2:c371πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRandronicus.ns.cloudflare.com
A2a06:98c1:50::ac40:2371πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRandronicus.ns.cloudflare.com
A108.162.195.113πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRandronicus.ns.cloudflare.com
A162.159.44.113Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRandronicus.ns.cloudflare.com
A172.64.35.113πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRandronicus.ns.cloudflare.com
NSharlee.ns.cloudflare.com
A2606:4700:50::a29f:26eeπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharlee.ns.cloudflare.com
A2803:f800:50::6ca2:c2eeπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRharlee.ns.cloudflare.com
A2a06:98c1:50::ac40:22eeπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRharlee.ns.cloudflare.com
A108.162.194.238πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharlee.ns.cloudflare.com
A162.159.38.238Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharlee.ns.cloudflare.com
A172.64.34.238πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRharlee.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.66.230, 172.67.209.26
IPv6 hints2606:4700:3031::6815:42e6, 2606:4700:3034::ac43:d11a
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=6, name=cloudflare-ech.com
SOAandronicus.ns.cloudflare.comdns@cloudflare.com serial=2400485177

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1776144480
WOT: SAFE (87/100)

Same first word

Similar names

DNS History

12 records (6 active, 6 former)

201820192020202120222023202420252026NSandronicus.ns.cloudflare.comharlee.ns.cloudflare.comjeff.ns.cloudflare.compat.ns.cloudflare.comA104.21.66.230172.67.209.262606:4700:3031::6815:42e62606:4700:3034::ac43:d11a104.24.122.232104.24.123.2322400:cb00:2048:1::6818:7ae82400:cb00:2048:1::6818:7be8
●NSandronicus.ns.cloudflare.com2026-02-17 β†’ 2026-04-14 Β· 3 obs
β—‹ 2017-03-16 17:30:42
● 2026-02-17 03:23:30
● 2026-04-14 05:55:32
●NSharlee.ns.cloudflare.com2026-02-17 β†’ 2026-04-14 Β· 3 obs
β—‹ 2017-03-16 17:30:42
● 2026-02-17 03:23:30
● 2026-04-14 05:55:32
β—‹NSjeff.ns.cloudflare.com2017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:42
β—‹ 2026-02-17 03:23:30
β—‹ 2026-04-14 05:55:32
β—‹NSpat.ns.cloudflare.com2017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:42
β—‹ 2026-02-17 03:23:30
β—‹ 2026-04-14 05:55:32
●A104.21.66.2302026-02-17 β†’ 2026-04-14 Β· 3 obs
β—‹ 2017-03-16 17:30:42
● 2026-02-17 03:23:30
● 2026-04-14 05:55:32
β—‹A104.24.122.2322017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:42
β—‹ 2026-02-17 03:23:30
β—‹ 2026-04-14 05:55:32
β—‹A104.24.123.2322017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:42
β—‹ 2026-02-17 03:23:30
β—‹ 2026-04-14 05:55:32
●A172.67.209.262026-02-17 β†’ 2026-04-14 Β· 3 obs
β—‹ 2017-03-16 17:30:42
● 2026-02-17 03:23:30
● 2026-04-14 05:55:32
β—‹A2400:cb00:2048:1::6818:7ae82017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:42
β—‹ 2026-02-17 03:23:30
β—‹ 2026-04-14 05:55:32
β—‹A2400:cb00:2048:1::6818:7be82017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:30:42
β—‹ 2026-02-17 03:23:30
β—‹ 2026-04-14 05:55:32
●A2606:4700:3031::6815:42e62026-02-17 β†’ 2026-04-14 Β· 3 obs
β—‹ 2017-03-16 17:30:42
● 2026-02-17 03:23:30
● 2026-04-14 05:55:32
●A2606:4700:3034::ac43:d11a2026-02-17 β†’ 2026-04-14 Β· 3 obs
β—‹ 2017-03-16 17:30:42
● 2026-02-17 03:23:30
● 2026-04-14 05:55:32

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
facewa.shandronicus.ns.cloudflare.com, harlee.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.34.238

NS records: andronicus.ns.cloudflare.com, harlee.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for facewa.sh (unsigned zone)

⏱️ Timing

Total: 343ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.66.230, 172.67.209.26
AAAA22606:4700:3034::ac43:d11a, 2606:4700:3031::6815:42e6
NS2andronicus.ns.cloudflare.com, harlee.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1andronicus.ns.cloudflare.com dns.cloudfl

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

facewa.sh points to four IP numbers: 2606:4700:3031::6815:42e6, 2606:4700:3034::ac43:d11a, 104.21.66.230 and 172.67.209.26.

Other host names, for instance sourcemagnets.com, ucasinoonline.cl, beta.geneleaf.com, purweightloss.com and iclubgame.com share IP numbers with facewa.sh.

Name Servers

facewa.sh is delegated to two name servers: andronicus.ns.cloudflare.com and harlee.ns.cloudflare.com.

facewa.sh uses the same name server setup as other domains, for instance joyeriacasadeoro.com, sequoiaat.com, sci2u.dk, tucoytico.com and radionova.co.uk.

facewa.sh shares name servers with other domains at least partially, for instance idikabkutaikartanegara.org, vivapharm.ro, 18luck.co.uk, febuckley.foundation and lornajane.me.

these name servers are commonly used together with lars.ns.cloudflare.com and henry.ns.cloudflare.com.

Host names with six IP numbers: andronicus.ns.cloudflare.com points to 2606:4700:58::a29f:2c71, 2803:f800:50::6ca2:c371, 2a06:98c1:50::ac40:2371, 108.162.195.113, 162.159.44.113 and 172.64.35.113; harlee.ns.cloudflare.com points to 2606:4700:50::a29f:26ee, 2803:f800:50::6ca2:c2ee, 2a06:98c1:50::ac40:22ee, 108.162.194.238, 162.159.38.238 and 172.64.34.238.