lapsus.sh - robtex.com

lapsus.sh

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:337eπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3032::ac43:b499πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.51.126Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.180.153πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSart.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b66πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRart.ns.cloudflare.com
A2803:f800:50::6ca2:c166πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRart.ns.cloudflare.com
A2a06:98c1:50::ac40:2166πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRart.ns.cloudflare.com
A108.162.193.102πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRart.ns.cloudflare.com
A172.64.33.102πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRart.ns.cloudflare.com
A173.245.59.102πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRart.ns.cloudflare.com
NSsaanvi.ns.cloudflare.com
A2606:4700:50::a29f:2650πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsaanvi.ns.cloudflare.com
A2803:f800:50::6ca2:c250πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsaanvi.ns.cloudflare.com
A2a06:98c1:50::ac40:2250πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRsaanvi.ns.cloudflare.com
A108.162.194.80πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsaanvi.ns.cloudflare.com
A162.159.38.80Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsaanvi.ns.cloudflare.com
A172.64.34.80πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsaanvi.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4104.21.51.126, 172.67.180.153
IPv62606:4700:3032::6815:337e, 2606:4700:3032::ac43:b499
SOAart.ns.cloudflare.comdns@cloudflare.com serial=2397713725

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1774236216
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

6 records (6 active, 0 former)

NSart.ns.cloudflare.comsaanvi.ns.cloudflare.comA104.21.51.126172.67.180.1532606:4700:3032::6815:337e2606:4700:3032::ac43:b499
●NSart.ns.cloudflare.com2026-03-09 β†’ 2026-03-24 Β· 2 obs
● 2026-03-09 02:44:00
● 2026-03-24 05:17:20
●NSsaanvi.ns.cloudflare.com2026-03-09 β†’ 2026-03-24 Β· 2 obs
● 2026-03-09 02:44:00
● 2026-03-24 05:17:20
●A104.21.51.1262026-03-09 β†’ 2026-03-24 Β· 2 obs
● 2026-03-09 02:44:00
● 2026-03-24 05:17:20
●A172.67.180.1532026-03-09 β†’ 2026-03-24 Β· 2 obs
● 2026-03-09 02:44:00
● 2026-03-24 05:17:20
●A2606:4700:3032::6815:337e2026-03-09 β†’ 2026-03-24 Β· 2 obs
● 2026-03-09 02:44:00
● 2026-03-24 05:17:20
●A2606:4700:3032::ac43:b4992026-03-09 β†’ 2026-03-24 Β· 2 obs
● 2026-03-09 02:44:00
● 2026-03-24 05:17:20

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
lapsus.shart.ns.cloudflare.com, saanvi.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.59.102

NS records: art.ns.cloudflare.com, saanvi.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for lapsus.sh (unsigned zone)

⏱️ Timing

Total: 515ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.51.126, 172.67.180.153
AAAA22606:4700:3032::6815:337e, 2606:4700:3032::ac43:b499
NS2art.ns.cloudflare.com, saanvi.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1art.ns.cloudflare.com dns.cloudflare.com

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

lapsus.sh maps to four IP numbers: 2606:4700:3032::6815:337e, 2606:4700:3032::ac43:b499, 104.21.51.126 and 172.67.180.153.

Other host names, for instance www.aibit.io, b57f07316d5a.skleptistechnology.pl, decalexpo.com, kdr56.com and weapohea.sa.com share IP numbers with lapsus.sh.

Name Servers

Two name servers art.ns.cloudflare.com and saanvi.ns.cloudflare.com handle delegation for lapsus.sh.

lapsus.sh uses the same name server setup as other domains, such as nicotine.sh, grantpartnersllc.com and splunkagenticaisystem.com.

lapsus.sh partially shares name servers with other domains; examples include gotvach.eu, decodeage.com, findyourbashert.com, buyproxies.com and indonesianbacktrack.or.id.

these name servers are commonly used with the name servers andy.ns.cloudflare.com.

Host names with six IP numbers: art.ns.cloudflare.com points to: 2606:4700:58::adf5:3b66, 2803:f800:50::6ca2:c166, 2a06:98c1:50::ac40:2166, 108.162.193.102, 172.64.33.102 and 173.245.59.102; saanvi.ns.cloudflare.com points to: 2606:4700:50::a29f:2650, 2803:f800:50::6ca2:c250, 2a06:98c1:50::ac40:2250, 108.162.194.80, 162.159.38.80 and 172.64.34.80.