ncode.sh - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

ncode.sh

DNSSEC⚠️ Not signed
A2606:4700:3033::6815:53bd🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::ac43:b4db🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.83.189Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.180.219🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSdavina.ns.cloudflare.com ⭐
A2606:4700:50::a29f:2628🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdavina.ns.cloudflare.com
A2803:f800:50::6ca2:c228🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdavina.ns.cloudflare.com
A2a06:98c1:50::ac40:2228🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdavina.ns.cloudflare.com
A108.162.194.40🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdavina.ns.cloudflare.com
A162.159.38.40Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdavina.ns.cloudflare.com
A172.64.34.40🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdavina.ns.cloudflare.com
NSkolton.ns.cloudflare.com
A2606:4700:58::a29f:2c19🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
A2803:f800:50::6ca2:c319🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkolton.ns.cloudflare.com
A2a06:98c1:50::ac40:2319🇺🇸 Cloudflare2a06:98c1:50::/45
PTRkolton.ns.cloudflare.com
A108.162.195.25🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
A162.159.44.25Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
A172.64.35.25🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
MXeforward1.registrar-servers.com ⭐
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward2.registrar-servers.com ⭐
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward3.registrar-servers.com ⭐
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
MXeforward4.registrar-servers.com(15)
A162.255.118.52🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward2.registrar-servers.com
MXeforward5.registrar-servers.com(20)
A162.255.118.51🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES
PTReforward1.registrar-servers.com
PTReforward3.registrar-servers.com
TXTv=spf1 include:spf.efwd.registrar-servers.com ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.83.189, 172.67.180.219
IPv6 hints2606:4700:3033::6815:53bd, 2606:4700:3036::ac43:b4db
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=127, name=cloudflare-ech.com
SOAdavina.ns.cloudflare.comdns@cloudflare.com serial=2414777074

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1790452769

Same first word

ncode.army
ncode.nl
ncode.workers.dev
ncode.uz
ncode.biz
ncode.pw
ncode.lk
ncode.pt
ncode.com.es
ncode.site
ncode.in
ncode.ca
ncode.cc
ncode.si
ncode.dev
ncode.ar
ncode.co
ncode.com
ncode.or.jp
ncode.kr
ncode.cfd
ncode.eu
ncode.com.au
ncode.mx
ncode.com.my
ncode.fr
ncode.dyndns.org
ncode.me
ncode.ch
ncode.hu
ncode.us
ncode.com.br
ncode.tm
ncode.se
ncode.net.cn
ncode.com.cn
ncode.ink
ncode.dk
ncode.design
ncode.name
ncode.cn
ncode.sh
ncode.org
ncode.es
ncode.live
ncode.at
ncode.web.id
ncode.com.ar
ncode.co.il
ncode.sa
ncode.ru
ncode.com.tr
ncode.co.jp
ncode.rs
ncode.com.ph
ncode.cloud
ncode.it
ncode.co.kr
ncode.com.mx
ncode.sk
ncode.cyou
ncode.net
ncode.co.uk
ncode.online
ncode.ai
ncode.de
ncode.fyi
ncode.global
ncode.dev.br
ncode.vu
ncode.club

Similar names

decon.group
cendo.com.cn
nodec.ru
edcon.cl
encod.es
decon.app
cenod.xyz
decon.pages.dev
decno.com
onedc.com
docen.com.br
docen.cl
denco.com.br
coned.ph
decon.com.br
nodec.org.cn
denco.kz
coned.ac.cr
donec.it
decon.org
encod.com.ph
edcon.com
conde.md
conde.es
ecodn.com
edcon.co.za
nedco.uk
cdneo.com
econd.org
encod.fr
cnode.org
conde.eu
decon.lol
conde.ba.gov.br
denco.in
edocn.vercel.app
decon.co.in
coned.de
endoc.co.il
ncdoe.com
ocden.com
neodc.be
cendo.ru
coned.cn
edocn.cn
nodec.studio
cendo.online
cendo.io
cdeno.org
ndeco.com.sa
cendo.fi
eocdn.com
conde.se
ndeco.nl
conde.workers.dev
cnode.my.id
neodc.net
ondec.net
cenod.cz
ncdoe.online
coden.store
dcone.site
odenc.nl
dcone.com
edcon.net
coned.net.ph
endoc.ph
dcneo.org
coden.pages.dev
coden.com.na
conde.top
dcone.ru
cedon.com
ncdeo.cn
coden.co.jp
onedc.ru
nedco.ch
conde.app
coned.ca
nodec.digital
docen.xyz
encod.org
denco.de
nedoc.com.ph
donec.nl
edcon.de
coden.org
endco.de
ondec.media
coden.in
denco.hu
cdone.cl
nedco.fr
decon.mx
decon.nz
ndeco.cat
noced.com
nedoc.com
edcon.co.in
coden.cloud
cendo.workers.dev
decon.biz.pl
coned.me
nodec.vu
donec.co.uk
nodce.com
cendo.de
edonc.com
coned.eu
nedco.ph
nedco.de
edcon.io
coedn.org
coned.life
decno.net
cendo.jp
ncedo.org
coden.be
conde.ac.gov.br
necod.nl
edcon.info
cdone.be
cedon.org
conde.ru
dcone.app
conde.arq.br
onedc.fr

Previous names

nba.sh
nbb.sh
nbd.sh
nberr.sh
nbg.sh
nbk.sh
nbl.sh
nblr.sh
nbnx.sh
nbo.sh
nbrooks.sh
nbt.sh
nbtm.sh
nbu.sh
ncat.sh
ncj.sh
nck.sh
nckut.sh

Next names

ncon.sh
ncore.sh
nct.sh
nda.sh
ndb.sh
ndc.sh
nddq.sh
nde.sh
nder.sh
ndix.sh
ndk.sh
ndme.sh
ndofxnkir.sh
ndvn.sh
ndy.sh
neal.sh
near.sh

DNS History

15 records (11 active, 4 former)

NSdavina.ns.cloudflare.comkolton.ns.cloudflare.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA104.21.83.189172.67.180.2192606:4700:3033::6815:53bd2606:4700:3036::ac43:b4db188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdavina.ns.cloudflare.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●NSkolton.ns.cloudflare.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●MXeforward1.registrar-servers.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●MXeforward2.registrar-servers.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●MXeforward3.registrar-servers.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●MXeforward4.registrar-servers.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●MXeforward5.registrar-servers.com2026-09-02 → 2026-09-26 · 2 obs
● 2026-09-02 06:43:16
● 2026-09-26 20:43:00
●A104.21.83.1892026-09-11 → 2026-09-26 · 5 obs
○ 2026-09-02 06:43:16
● 2026-09-11 09:34:46
○ 2026-09-19 12:31:54
● 2026-09-26 20:42:58
● 2026-09-26 20:43:00
●A172.67.180.2192026-09-11 → 2026-09-26 · 5 obs
○ 2026-09-02 06:43:16
● 2026-09-11 09:34:46
○ 2026-09-19 12:31:54
● 2026-09-26 20:42:58
● 2026-09-26 20:43:00
○A188.114.96.02026-09-02 → 2026-09-19 · 5 obs
● 2026-09-02 06:43:16
○ 2026-09-11 09:34:46
● 2026-09-19 12:31:54
○ 2026-09-26 20:42:58
○ 2026-09-26 20:43:00
○A188.114.97.02026-09-02 → 2026-09-19 · 5 obs
● 2026-09-02 06:43:16
○ 2026-09-11 09:34:46
● 2026-09-19 12:31:54
○ 2026-09-26 20:42:58
○ 2026-09-26 20:43:00
●A2606:4700:3033::6815:53bd2026-09-11 → 2026-09-26 · 5 obs
○ 2026-09-02 06:43:16
● 2026-09-11 09:34:46
○ 2026-09-19 12:31:54
● 2026-09-26 20:42:58
● 2026-09-26 20:43:00
●A2606:4700:3036::ac43:b4db2026-09-11 → 2026-09-26 · 5 obs
○ 2026-09-02 06:43:16
● 2026-09-11 09:34:46
○ 2026-09-19 12:31:54
● 2026-09-26 20:42:58
● 2026-09-26 20:43:00
○A2a06:98c1:3120::2026-09-02 → 2026-09-19 · 5 obs
● 2026-09-02 06:43:16
○ 2026-09-11 09:34:46
● 2026-09-19 12:31:54
○ 2026-09-26 20:42:58
○ 2026-09-26 20:43:00
○A2a06:98c1:3121::2026-09-02 → 2026-09-19 · 5 obs
● 2026-09-02 06:43:16
○ 2026-09-11 09:34:46
● 2026-09-19 12:31:54
○ 2026-09-26 20:42:58
○ 2026-09-26 20:43:00

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
shc0.nic.sh, a0.nic.sh, a2.nic.sh, b0.nic.sh8 records
ncode.shkolton.ns.cloudflare.com, davina.ns.cloudflare.com-

✅ Authoritative Response

Server:162.159.44.25

NS records: kolton.ns.cloudflare.com, davina.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ncode.sh (unsigned zone)

⏱️ Timing

Total: 924ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.180.219, 104.21.83.189
AAAA22606:4700:3033::6815:53bd, 2606:4700:3036::ac43:b4db
NS2davina.ns.cloudflare.com, kolton.ns.cloudflare.com
MX5eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...
TXT1v=spf1 include:spf.efwd.registrar-server
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1davina.ns.cloudflare.com dns.cloudflare.

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

ncode.sh directs to four IP numbers, which are 104.21.83.189, 172.67.180.219, 2606:4700:3033::6815:53bd and 2606:4700:3036::ac43:b4db.

ty6618.cc, guttercleaningdayton.com, flooo4tower.xyz and two other host names share IP numbers with ncode.sh.

Name Servers

ncode.sh uses two name servers for its delegation: davina.ns.cloudflare.com and kolton.ns.cloudflare.com.

ncode.sh uses the same name servers as several other domains — among them shower-door-hardware.com, lycf.workers.dev, alleprofitpro.pl and two more.

There is at least partial name server overlap between ncode.sh and other domains — contactsubodhrane.workers.dev, trailpath.app, fortunetiger-brazil-game.com and two more among them.

These name servers tend to appear in combination with the name servers ashton.ns.cloudflare.com, logan.ns.cloudflare.com, nolan.ns.cloudflare.com and macy.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname davina.ns.cloudflare.com directs to 108.162.194.40, 162.159.38.40 and 172.64.34.40 along with 3 other IP addresses.

Hostname kolton.ns.cloudflare.com directs to 108.162.195.25, 162.159.44.25 and 172.64.35.25 along with 3 other IP addresses.

Mail Servers

Five mail servers handle ncode.sh: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

ncode.sh has at least partial mail server overlap with other domains such as calebshifflett.com, lerndady.com, joinroami.com and two more.

These mail servers are routinely seen in conjunction with the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Hosts with just one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.