hider.sh - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

hider.sh

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:48cb🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3033::ac43:bb51🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.72.203Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.187.81🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NShenrik.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c69🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenrik.ns.cloudflare.com
A2803:f800:50::6ca2:c369🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRhenrik.ns.cloudflare.com
A2a06:98c1:50::ac40:2369🇺🇸 Cloudflare2a06:98c1:50::/45
PTRhenrik.ns.cloudflare.com
A108.162.195.105🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenrik.ns.cloudflare.com
A162.159.44.105Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenrik.ns.cloudflare.com
A172.64.35.105🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenrik.ns.cloudflare.com
NSmarlowe.ns.cloudflare.com
A2606:4700:50::a29f:26d4🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarlowe.ns.cloudflare.com
A2803:f800:50::6ca2:c2d4🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmarlowe.ns.cloudflare.com
A2a06:98c1:50::ac40:22d4🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmarlowe.ns.cloudflare.com
A108.162.194.212🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarlowe.ns.cloudflare.com
A162.159.38.212Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarlowe.ns.cloudflare.com
A172.64.34.212🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmarlowe.ns.cloudflare.com
MXmailserver.purelymail.com ⭐
A18.204.123.63🇺🇸 Amazon18.204.0.0/14 EC2 IAD prefix
PTRec2-18-204-123-63.compute-1.amazonaws.com
TXTpurelymail_ownership_proof=a5a398413acb567c5f8bb165c5eb9d3403d9b9a949d4beae3f...
TXTv=spf1 include:_spf.purelymail.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.72.203, 172.67.187.81
IPv6 hints2606:4700:3031::6815:48cb, 2606:4700:3033::ac43:bb51
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=66, name=cloudflare-ech.com
SOAhenrik.ns.cloudflare.comdns@cloudflare.com serial=2412400006

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1787020647

Same first word

hider.in
hider.org
hider.eu
hider.ru
hider.org.tr
hider.io
hider.homes
hider.net
hider.info
hider.cn
hider.com.tw
hider.sh
hider.com
hider.nl
hider.dk

Similar names

hired.org
drehi.bg
hired.de
hired.careers
hdier.ac.cn
hedir.com
hired.co.jp
hired.co
dehri.com
hired.world
hired.im
hdrei.org
diher.es
direh.com.mx
hired.company
derhi.com
hired.co.uk
hired.ee
rehdi.com
hired.info
diehr.org
reidh.com
herdi.nl
dehir.com
hired.ca
hedir.org
hired.com.br
eidhr.eu
dehir.co.uk
diher.com
drehi.org
hired.it
hired.contractors
diehr.eu
direh.com
hired.live
hired.com.sg
hedir.me
hired.technology
ihder.org
hired.in
hired.email
hired.net
dehir.hu
rheid.com
hderi.com
rehdi.co
ihder.com
hired.cy
hired.care
hired.tv
hired.map.fastly.net
hredi.com
hdrei.net
rhide.com
rihed.net
hired.works
edhir.com
hired.com.au
herdi.web.id
hired.ro
hired.center
hired.us
drehi.com
hired.cn
hiedr.com
hried.com
dreih.de
drehi.online
hired.fm
hdrei.com
hired.la
hired.com
diehr.info
drhei.com
dehri.in
drehi.biz
hired.pk
hierd.com
hdrei.co.at
idher.com
iherd.net
hried.top

Previous names

hess.sh
hessian.sh
hexaa.sh
hexis.sh
heychief.sh
heykoda.sh
hfd.sh
hg.sh
hhe.sh
hhtq.sh
hia.sh
hid.sh
hidan.sh
hidden.sh

Next names

hiemstra.sh
higa.sh
highpu.sh
hihi.sh
hila.sh
hill.sh
hilos.sh
hilton-hotels.sh
hilton.sh
hiltonhotels.sh
hindmar.sh
hiphop.sh
hir.sh
hiraya.sh
hitachi.sh
hitclub.sh
hitclubx.sh
hite.sh
hits.sh
hivecli.sh

DNS History

7 records (7 active, 0 former)

NShenrik.ns.cloudflare.commarlowe.ns.cloudflare.comMXmailserver.purelymail.comA104.21.72.203172.67.187.812606:4700:3031::6815:48cb2606:4700:3033::ac43:bb51
●NShenrik.ns.cloudflare.com2026-08-13 → 2026-08-18 · 2 obs
● 2026-08-13 19:50:22
● 2026-08-18 03:06:32
●NSmarlowe.ns.cloudflare.com2026-08-13 → 2026-08-18 · 2 obs
● 2026-08-13 19:50:22
● 2026-08-18 03:06:32
●MXmailserver.purelymail.com2026-08-13 → 2026-08-18 · 2 obs
● 2026-08-13 19:50:22
● 2026-08-18 03:06:32
●A104.21.72.2032026-08-18 → 2026-08-18 · 2 obs
● 2026-08-18 03:06:28
● 2026-08-18 03:06:32
●A172.67.187.812026-08-18 → 2026-08-18 · 2 obs
● 2026-08-18 03:06:28
● 2026-08-18 03:06:32
●A2606:4700:3031::6815:48cb2026-08-18 → 2026-08-18 · 2 obs
● 2026-08-18 03:06:28
● 2026-08-18 03:06:32
●A2606:4700:3033::ac43:bb512026-08-18 → 2026-08-18 · 2 obs
● 2026-08-18 03:06:28
● 2026-08-18 03:06:32

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, b0.nic.sh, a2.nic.sh, c0.nic.sh-
hider.shhenrik.ns.cloudflare.com, marlowe.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.194.212

NS records: henrik.ns.cloudflare.com, marlowe.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for hider.sh (unsigned zone)

⏱️ Timing

Total: 398ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.187.81, 104.21.72.203
AAAA22606:4700:3033::ac43:bb51, 2606:4700:3031::6815:48cb
NS2henrik.ns.cloudflare.com, marlowe.ns.cloudflare.com
MX1mailserver.purelymail.com (pri: 0)
TXT2purelymail_ownership_proof=a5a398413acb5, v=spf1 include:_spf.purelymail.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1henrik.ns.cloudflare.com dns.cloudflare.

Analysis

IP Addresses

hider.sh resolves to four IP addresses: 104.21.72.203, 172.67.187.81, 2606:4700:3031::6815:48cb and 2606:4700:3033::ac43:bb51.

Two other host names, along with malaysiaresorts.com.my, casinobetzillo-online.online and forumlaklak.com, also share IP numbers with hider.sh.

Name Servers

hider.sh uses two name servers for its delegation: henrik.ns.cloudflare.com and marlowe.ns.cloudflare.com.

hider.sh shares its NS records with other domains, for example najvayedel6.ir, iranroad.shop, tkk.ro and two others.

hider.sh partially shares its NS delegation with several other domains, including ymkxph.study, aku-datang-lagi-kemari-nanti.pages.dev, caloriejournal.com and two others.

These name servers often co-occur with the name servers brett.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname henrik.ns.cloudflare.com directs to 108.162.195.105, 162.159.44.105 and 172.64.35.105 along with 3 other IP addresses.

Hostname marlowe.ns.cloudflare.com directs to 108.162.194.212, 162.159.38.212 and 172.64.34.212 along with 3 other IP addresses.

Mail Servers

The sole mail server for hider.sh is mailserver.purelymail.com.

Among the domains sharing a mail server setup with hider.sh are beech.org.uk, voltage.cn, paulandsierra.com and two others.

mailserver.purelymail.com directs to just one IP number, 18.204.123.63.