wanted.sh - robtex.com

wanted.sh

DNSSECπŸ”’ Signed (DS record present)
A49.13.86.27πŸ‡©πŸ‡ͺ Hetzner49.13.0.0/16 HETZNER-DC
PTRcompass-security.cosmoco.de
NSkolton.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c19πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
A2803:f800:50::6ca2:c319πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkolton.ns.cloudflare.com
A2a06:98c1:50::ac40:2319πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRkolton.ns.cloudflare.com
A108.162.195.25πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
A162.159.44.25Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
A172.64.35.25πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkolton.ns.cloudflare.com
NSrihana.ns.cloudflare.com
A2606:4700:50::adf5:3af4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrihana.ns.cloudflare.com
A2803:f800:50::6ca2:c0f4πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrihana.ns.cloudflare.com
A2a06:98c1:50::ac40:20f4πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRrihana.ns.cloudflare.com
A108.162.192.244πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrihana.ns.cloudflare.com
A172.64.32.244πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrihana.ns.cloudflare.com
A173.245.58.244πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrihana.ns.cloudflare.com
SOAkolton.ns.cloudflare.comdns@cloudflare.com serial=2401113981

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1777016821

Same first word

Similar names

DNS History

3 records (3 active, 0 former)

NSkolton.ns.cloudflare.comrihana.ns.cloudflare.comA49.13.86.27
●NSkolton.ns.cloudflare.com2026-04-20 β†’ 2026-04-24 Β· 2 obs
● 2026-04-20 03:51:42
● 2026-04-24 08:18:16
●NSrihana.ns.cloudflare.com2026-04-20 β†’ 2026-04-24 Β· 2 obs
● 2026-04-20 03:51:42
● 2026-04-24 08:18:16
●A49.13.86.272026-04-20 β†’ 2026-04-24 Β· 2 obs
● 2026-04-20 03:51:42
● 2026-04-24 08:18:16

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
shb0.nic.sh, a0.nic.sh, a2.nic.sh, c0.nic.sh8 records
wanted.shkolton.ns.cloudflare.com, rihana.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.58.244

NS records: kolton.ns.cloudflare.com, rihana.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 326ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A149.13.86.27
NS2kolton.ns.cloudflare.com, rihana.ns.cloudflare.com
SOA1kolton.ns.cloudflare.com dns.cloudflare.

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (c0.nic.sh, b0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

wanted.sh resolves to a single IP address: 49.13.86.27.

Other host names including csnc.at, compass-security.gmbh, csnc.de, compass-security.de and csnc.ch share IP numbers with wanted.sh.

Name Servers

wanted.sh's delegation uses two name servers, kolton.ns.cloudflare.com and rihana.ns.cloudflare.com.

wanted.sh shares the same name server setup as other domains, for example nj722.com, moeni.live, penetrationtest.ch, compass-security.com and virtualbooksigning.net.

wanted.sh at least partially shares name servers with other domains, including mayu31.com, nsjago.com, fixubuntu.com, lunnesia.com and ashenbornfervent.shop.

These name servers are often used together with tara.ns.cloudflare.com.

Host names with six IP numbers:

kolton.ns.cloudflare.com points to: 2606:4700:58::a29f:2c19, 2803:f800:50::6ca2:c319, 2a06:98c1:50::ac40:2319, 108.162.195.25, 162.159.44.25 and 172.64.35.25.

rihana.ns.cloudflare.com points to: 2606:4700:50::adf5:3af4, 2803:f800:50::6ca2:c0f4, 2a06:98c1:50::ac40:20f4, 108.162.192.244, 172.64.32.244 and 173.245.58.244.