grimstack.sh - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

grimstack.sh

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:475fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3032::ac43:905bπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.71.95Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.144.91πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSeric.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b70πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTReric.ns.cloudflare.com
A2803:f800:50::6ca2:c170πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTReric.ns.cloudflare.com
A2a06:98c1:50::ac40:2170πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTReric.ns.cloudflare.com
A108.162.193.112πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTReric.ns.cloudflare.com
A172.64.33.112πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTReric.ns.cloudflare.com
A173.245.59.112πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTReric.ns.cloudflare.com
NSmegan.ns.cloudflare.com
A2606:4700:50::adf5:3ac5πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmegan.ns.cloudflare.com
A2803:f800:50::6ca2:c0c5πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmegan.ns.cloudflare.com
A2a06:98c1:50::ac40:20c5πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmegan.ns.cloudflare.com
A108.162.192.197πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmegan.ns.cloudflare.com
A172.64.32.197πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmegan.ns.cloudflare.com
A173.245.58.197πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmegan.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.71.95, 172.67.144.91
IPv6 hints2606:4700:3032::6815:475f, 2606:4700:3032::ac43:905b
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=109, name=cloudflare-ech.com
SOAeric.ns.cloudflare.comdns@cloudflare.com serial=2415436429

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1790231805

Same first word

Similar names

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSeric.ns.cloudflare.commegan.ns.cloudflare.comA104.21.71.95172.67.144.912606:4700:3032::6815:475f2606:4700:3032::ac43:905b188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSeric.ns.cloudflare.com2026-09-23 β†’ 2026-09-24 Β· 2 obs
● 2026-09-23 04:46:06
● 2026-09-24 07:30:54
●NSmegan.ns.cloudflare.com2026-09-23 β†’ 2026-09-24 Β· 2 obs
● 2026-09-23 04:46:06
● 2026-09-24 07:30:54
●A104.21.71.952026-09-24 β†’ 2026-09-24 Β· 3 obs
β—‹ 2026-09-23 04:46:06
● 2026-09-24 07:30:50
● 2026-09-24 07:30:54
●A172.67.144.912026-09-24 β†’ 2026-09-24 Β· 3 obs
β—‹ 2026-09-23 04:46:06
● 2026-09-24 07:30:50
● 2026-09-24 07:30:54
β—‹A188.114.96.02026-09-23 β†’ 2026-09-23 Β· 3 obs
● 2026-09-23 04:46:06
β—‹ 2026-09-24 07:30:50
β—‹ 2026-09-24 07:30:54
β—‹A188.114.97.02026-09-23 β†’ 2026-09-23 Β· 3 obs
● 2026-09-23 04:46:06
β—‹ 2026-09-24 07:30:50
β—‹ 2026-09-24 07:30:54
●A2606:4700:3032::6815:475f2026-09-24 β†’ 2026-09-24 Β· 3 obs
β—‹ 2026-09-23 04:46:06
● 2026-09-24 07:30:50
● 2026-09-24 07:30:54
●A2606:4700:3032::ac43:905b2026-09-24 β†’ 2026-09-24 Β· 3 obs
β—‹ 2026-09-23 04:46:06
● 2026-09-24 07:30:50
● 2026-09-24 07:30:54
β—‹A2a06:98c1:3120::2026-09-23 β†’ 2026-09-23 Β· 3 obs
● 2026-09-23 04:46:06
β—‹ 2026-09-24 07:30:50
β—‹ 2026-09-24 07:30:54
β—‹A2a06:98c1:3121::2026-09-23 β†’ 2026-09-23 Β· 3 obs
● 2026-09-23 04:46:06
β—‹ 2026-09-24 07:30:50
β—‹ 2026-09-24 07:30:54

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha2.nic.sh, c0.nic.sh, a0.nic.sh, b0.nic.sh8 records
grimstack.shmegan.ns.cloudflare.com, eric.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.32.197

NS records: megan.ns.cloudflare.com, eric.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for grimstack.sh (unsigned zone)

⏱️ Timing

Total: 1089ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.144.91, 104.21.71.95
AAAA22606:4700:3032::ac43:905b, 2606:4700:3032::6815:475f
NS2eric.ns.cloudflare.com, megan.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1eric.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

grimstack.sh points to the four IP addresses 104.21.71.95, 172.67.144.91, 2606:4700:3032::6815:475f and 2606:4700:3032::ac43:905b.

Two other host names, along with prevodonto.com.br, techloop.ro and vvxce.com, also share IP numbers with grimstack.sh.

Name Servers

grimstack.sh uses two name servers for its delegation: eric.ns.cloudflare.com and megan.ns.cloudflare.com.

grimstack.sh shares its NS records with other domains, for example desingstorecp.com, caseycsears.com, garyjordan21.workers.dev and two others.

At least some of grimstack.sh's name servers are shared with other domains, for example bully168a.click, movement-screen.pages.dev, mathnessapp.com and two more.

These name servers are often deployed together with the name servers sydney.ns.cloudflare.com, lucy.ns.cloudflare.com, pam.ns.cloudflare.com and sureena.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname eric.ns.cloudflare.com directs to 108.162.193.112, 172.64.33.112 and 173.245.59.112 along with 3 other IP addresses.

Hostname megan.ns.cloudflare.com directs to 108.162.192.197, 172.64.32.197 and 173.245.58.197 along with 3 other IP addresses.