`doremi138.shop`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:3f2f^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:8fb3^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.63.47^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.143.179^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`decker.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c9b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`decker.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c39b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`decker.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:239b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`decker.ns.cloudflare.com`
		A	108.162.195.155^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`decker.ns.cloudflare.com`
		A	162.159.44.155^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`decker.ns.cloudflare.com`
		A	172.64.35.155^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`decker.ns.cloudflare.com`
NS	`hope.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aa3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hope.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`hope.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`hope.ns.cloudflare.com`
		A	108.162.192.163^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hope.ns.cloudflare.com`
		A	172.64.32.163^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hope.ns.cloudflare.com`
		A	173.245.58.163^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`hope.ns.cloudflare.com`
MX	`mx1-hosting.jellyfish.systems` ⭐
		A	162.255.118.28^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`oxse3a.privateemail.com`
MX	`mx2-hosting.jellyfish.systems`⁽¹⁰⁾
		A	162.255.118.29^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`oxse2b.privateemail.com`
MX	`mx3-hosting.jellyfish.systems`⁽²⁰⁾
		A	162.255.118.13^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`mx3-hosting.jellyfish.systems`
TXT	`v=spf1 +a +mx +ip4:104.207.79.33 include:spf.web-hosting.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.63.47, 172.67.143.179
		IPv6 hints	2606:4700:3030::6815:3f2f, 2606:4700:3037::ac43:8fb3
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=215, name=cloudflare-ech.com
SOA	`decker.ns.cloudflare.com`dns@cloudflare.com serial=2409849148

`shop`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gmoregistry.net` ⭐
	NS	`b.gmoregistry.net`
	NS	`k.gmoregistry.net`
	NS	`l.gmoregistry.net`
	SOA	`a.gmoregistry.net`noc@gmoregistry.net serial=1786061021

⚠️ On DNS blocklist: gambling, gambling.medium, gambling.mini, tif
⚠️ On DNS blocklist: spam-tlds

Same first word

doremi138.shop

doremi138.com

DNS History

13 records (9 active, 4 former)

●NSdecker.ns.cloudflare.com2026-07-25 → 2026-08-07 · 2 obs

● 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●NShope.ns.cloudflare.com2026-07-25 → 2026-08-07 · 2 obs

● 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●MXmx1-hosting.jellyfish.systems2026-07-25 → 2026-08-07 · 2 obs

● 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●MXmx2-hosting.jellyfish.systems2026-07-25 → 2026-08-07 · 2 obs

● 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●MXmx3-hosting.jellyfish.systems2026-07-25 → 2026-08-07 · 2 obs

● 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●A104.21.63.472026-08-07 → 2026-08-07 · 2 obs

○ 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●A172.67.143.1792026-08-07 → 2026-08-07 · 2 obs

○ 2026-07-25 18:44:38
● 2026-08-07 00:25:18

○A188.114.96.02026-07-25 → 2026-07-25 · 2 obs

● 2026-07-25 18:44:38
○ 2026-08-07 00:25:18

○A188.114.97.02026-07-25 → 2026-07-25 · 2 obs

● 2026-07-25 18:44:38
○ 2026-08-07 00:25:18

●A2606:4700:3030::6815:3f2f2026-08-07 → 2026-08-07 · 2 obs

○ 2026-07-25 18:44:38
● 2026-08-07 00:25:18

●A2606:4700:3037::ac43:8fb32026-08-07 → 2026-08-07 · 2 obs

○ 2026-07-25 18:44:38
● 2026-08-07 00:25:18

○A2a06:98c1:3120::2026-07-25 → 2026-07-25 · 2 obs

● 2026-07-25 18:44:38
○ 2026-08-07 00:25:18

○A2a06:98c1:3121::2026-07-25 → 2026-07-25 · 2 obs

● 2026-07-25 18:44:38
○ 2026-08-07 00:25:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
shop	b.gmoregistry.net, l.gmoregistry.net, a.gmoregistry.net, k.gmoregistry.net	-
doremi138.shop	decker.ns.cloudflare.com, hope.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.195.155

NS records: decker.ns.cloudflare.com, hope.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for doremi138.shop (unsigned zone)

⏱️ Timing

Total: 733ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.143.179, 104.21.63.47`
AAAA	2	`2606:4700:3037::ac43:8fb3, 2606:4700:3030::6815:3f2f`
NS	2	`decker.ns.cloudflare.com, hope.ns.cloudflare.com`
MX	3	`mx2-hosting.jellyfish.systems (pri: 10), mx3-hosting.jellyfish.systems (pri: 20)...`
TXT	1	`v=spf1 +a +mx +ip4:104.207.79.33 include`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`decker.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

doremi138.shop directs to four IP numbers, which are 104.21.63.47, 172.67.143.179, 2606:4700:3030::6815:3f2f and 2606:4700:3037::ac43:8fb3.

Two other host names, along with yuzepe(0x736578)services.digital, bokeplive.video and www.ericthemagicguy.com, also share IP numbers with doremi138.shop.

Name Servers

doremi138.shop is served by two delegated name servers, decker.ns.cloudflare.com and hope.ns.cloudflare.com.

doremi138.shop shares its NS records with other domains, for example flowerfoxexpress.com, solid88.store, bumi123.shop and two others.

At least some of doremi138.shop's name servers are shared with other domains, for example glossy-bingo.casino, postcodeloterijbuurtfonds.nl, lalamua.com and two more.

DNS names with 6 IP addresses:

decker.ns.cloudflare.com carries IP addresses 108.162.195.155, 162.159.44.155 and 172.64.35.155, with 3 other addresses beyond those.

hope.ns.cloudflare.com carries IP addresses 108.162.192.163, 172.64.32.163 and 173.245.58.163, with 3 other addresses beyond those.

Mail Servers

The MX records for doremi138.shop list three mail servers: mx1-hosting.jellyfish.systems, mx2-hosting.jellyfish.systems and mx3-hosting.jellyfish.systems.

There is at least a partial MX overlap between doremi138.shop and other domains, including michael-wiessner.com, laskar2.com, 9ja.rocks and two others.

Three hostnames, one IP address apiece: mx1-hosting.jellyfish.systems resolves to 162.255.118.28, mx2-hosting.jellyfish.systems resolves to 162.255.118.29 and mx3-hosting.jellyfish.systems resolves to 162.255.118.13.

doremi138.shop - robtex.com

doremi138.shop

shop

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

`doremi138.shop`

`shop`