runcode.sh - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

runcode.sh

DNSSECπŸ”’ Signed (DS record present)
A2a09:8280:1::7e:78c1:0πŸ‡ΊπŸ‡Έ FLYIO-12a09:8280:1::/48 Proxy Registration / Customer Route
PTRipv6.customer.flyio.net
A66.241.125.203πŸ‡ΊπŸ‡Έ FLYIO-166.241.124.0/23 Fly.io Edge Network
NScuritiba.ns.porkbun.com ⭐
A2400:cb00:2049:1::adf5:3a25πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A173.245.58.37πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSfortaleza.ns.porkbun.com
A2400:cb00:2049:1::a29f:88cπŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.8.140Cloudflare162.159.8.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSmaceio.ns.porkbun.com
A2400:cb00:2049:1::a29f:bb4πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.11.180Cloudflare162.159.11.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSsalvador.ns.porkbun.com
A2400:cb00:2049:1::a29f:a96πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.10.150Cloudflare162.159.10.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXmail.protonmail.ch ⭐
A176.119.200.128πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmail.protonmail.ch
A185.70.42.128πŸ‡¨πŸ‡­ Proton185.70.42.0/24
PTRmail.protonmail.ch
A185.205.70.128πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmail.protonmail.ch
MXmailsec.protonmail.ch(20)
A176.119.200.129πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmailsec.protonmail.ch
A185.70.42.129πŸ‡¨πŸ‡­ Proton185.70.42.0/24
PTRmailsec.protonmail.ch
A185.205.70.129πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmailsec.protonmail.ch
TXTprotonmail-verification=baf41caf06b13c8dbb068e8da059ce6e9c3a4977
TXTv=spf1 include:_spf.protonmail.ch ~all
SOAcuritiba.ns.porkbun.comdns@cloudflare.com serial=2413052954

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1787874440

Same first word

Similar names

Previous names

Next names

DNS History

8 records (8 active, 0 former)

NScuritiba.ns.porkbun.comfortaleza.ns.porkbun.commaceio.ns.porkbun.comsalvador.ns.porkbun.comMXmail.protonmail.chmailsec.protonmail.chA2a09:8280:1::7e:78c1:066.241.125.203
●NScuritiba.ns.porkbun.com2026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●NSfortaleza.ns.porkbun.com2026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●NSmaceio.ns.porkbun.com2026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●NSsalvador.ns.porkbun.com2026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●MXmail.protonmail.ch2026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●MXmailsec.protonmail.ch2026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●A2a09:8280:1::7e:78c1:02026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26
●A66.241.125.2032026-08-26 β†’ 2026-08-28 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-08-28 00:47:26

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
runcode.shfortaleza.ns.porkbun.com, salvador.ns.porkbun.com, maceio.ns.porkbun.com, curitiba.ns.porkbun.com-

βœ… Authoritative Response

Server:162.159.10.150

NS records: fortaleza.ns.porkbun.com, salvador.ns.porkbun.com, maceio.ns.porkbun.com, curitiba.ns.porkbun.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 429ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A166.241.125.203
AAAA12a09:8280:1::7e:78c1:0
NS4curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com...
MX2mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)
TXT2protonmail-verification=baf41caf06b13c8d, v=spf1 include:_spf.protonmail.ch ~all
SOA1curitiba.ns.porkbun.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

runcode.sh points to the IP addresses 66.241.125.203 and 2a09:8280:1::7e:78c1:0

shieldkey.io, eventellix.de, mamymiejsce.pl plus two other host names have IP numbers in common with runcode.sh.

Name Servers

Four name servers handle the delegation for runcode.sh: curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com.

There is at least partial name server overlap between runcode.sh and other domains β€” jamus.email, devopslab.top, catloli.com and two more among them.

All four hostnames β€” curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com β€” resolve to two IP numbers apiece: curitiba.ns.porkbun.com to 173.245.58.37 and 2400:cb00:2049:1::adf5:3a25; fortaleza.ns.porkbun.com to 162.159.8.140 and 2400:cb00:2049:1::a29f:88c; maceio.ns.porkbun.com to 162.159.11.180 and 2400:cb00:2049:1::a29f:bb4; salvador.ns.porkbun.com to 162.159.10.150 and 2400:cb00:2049:1::a29f:a96.

Mail Servers

runcode.sh uses two mail servers, mail.protonmail.ch and mailsec.protonmail.ch.

The mail server setup of runcode.sh matches that of other domains such as splendidadesign.com.br, pietryszak.pl, equinox.pics and two others.

At least some of the mail servers used by runcode.sh are shared with other domains: juliesmail.net, mail02.shadowanalytics.net, internationalaeromarine.com and two others among them.

mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128. mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129. Both hosts resolve to three IP numbers.