cloudbash.sh - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`cloudbash.sh`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:2ab1^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::ac43:cf0e^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.42.177^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.207.14^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`gwen.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3aa0^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gwen.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0a0^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`gwen.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20a0^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`gwen.ns.cloudflare.com`
		A	108.162.192.160^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gwen.ns.cloudflare.com`
		A	172.64.32.160^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gwen.ns.cloudflare.com`
		A	173.245.58.160^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`gwen.ns.cloudflare.com`
NS	`lou.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bc7^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lou.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1c7^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lou.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21c7^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lou.ns.cloudflare.com`
		A	108.162.193.199^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lou.ns.cloudflare.com`
		A	172.64.33.199^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lou.ns.cloudflare.com`
		A	173.245.59.199^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lou.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.42.177, 172.67.207.14
		IPv6 hints	2606:4700:3030::6815:2ab1, 2606:4700:3033::ac43:cf0e
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=143, name=cloudflare-ech.com
SOA	`gwen.ns.cloudflare.com`dns@cloudflare.com serial=2414394866

`sh`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.nic.sh` ⭐
	NS	`a2.nic.sh`
	NS	`b0.nic.sh`
	NS	`c0.nic.sh`
	SOA	`a0.nic.sh`hostmaster@donuts.email serial=1790213454

Same first word

cloudbash.in

cloudbash.sh

Similar names

bashcloud.net

clubsodah.studio

bahscloud.ru

dohaclubs.com

bashcloud.workers.dev

clubsodah.co.uk

habclouds.square7.ch

bashcloud.ir

Previous names

cloc.sh

clockwork.sh

clode.sh

clodex.sh

cloe.sh

cloister.sh

clok.sh

clon.sh

clone.sh

cloop.sh

clop.sh

clorp.sh

closeclaw.sh

closedloop.sh

closedrings.sh

closei.sh

closeproof.sh

closi.sh

cloud9.sh

cloudagnostic.sh

Next names

cloudbox.sh

cloudcaptain.sh

cloudclaw.sh

cloudcode.sh

cloudcone.sh

cloudda.sh

clouddata.sh

clouddesk.sh

clouddude.sh

cloude.sh

clouded.sh

cloudexit.sh

cloudflex.sh

cloudfont.sh

cloudfusion.sh

cloudi.sh

cloudie.sh

cloudlab.sh

cloudlearn.sh

cloudless.sh

DNS History

18 records (6 active, 12 former)

●NSgwen.ns.cloudflare.com2026-09-07 → 2026-09-24 · 3 obs

○ 2026-08-19 14:24:58
● 2026-09-07 20:08:32
● 2026-09-24 02:28:18

●NSlou.ns.cloudflare.com2026-09-07 → 2026-09-24 · 3 obs

○ 2026-08-19 14:24:58
● 2026-09-07 20:08:32
● 2026-09-24 02:28:18

○NSns-1330.awsdns-38.org2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○NSns-167.awsdns-20.com2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○NSns-1957.awsdns-52.co.uk2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○NSns-575.awsdns-07.net2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○MXalt1.aspmx.l.google.com2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○MXalt2.aspmx.l.google.com2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○MXaspmx.l.google.com2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○MXaspmx2.googlemail.com2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○MXaspmx3.googlemail.com2015-06-06 → 2017-10-02 · 4 obs

● 2015-06-06 18:54:16
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

○A104.155.199.172015-10-23 → 2016-04-24 · 5 obs

○ 2015-06-06 18:54:16
● 2015-10-23 19:54:26
● 2016-04-24 18:03:26
○ 2017-10-02 22:47:30
○ 2026-09-24 02:28:18

●A104.21.42.1772026-09-18 → 2026-09-24 · 3 obs

○ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-24 02:28:18

○A139.59.48.1812017-10-02 → 2017-10-02 · 4 obs

○ 2016-04-24 18:03:26
● 2017-10-02 22:47:30
○ 2026-08-19 14:24:58
○ 2026-09-24 02:28:18

●A172.67.207.142026-09-18 → 2026-09-24 · 3 obs

○ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-24 02:28:18

●A2606:4700:3030::6815:2ab12026-09-18 → 2026-09-24 · 3 obs

○ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-24 02:28:18

●A2606:4700:3033::ac43:cf0e2026-09-18 → 2026-09-24 · 3 obs

○ 2026-08-19 14:24:58
● 2026-09-18 16:52:06
● 2026-09-24 02:28:18

○A54.201.144.1492015-06-06 → 2015-06-06 · 3 obs

● 2015-06-06 18:54:16
○ 2015-10-23 19:54:26
○ 2026-09-24 02:28:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
sh	b0.nic.sh, a0.nic.sh, c0.nic.sh, a2.nic.sh	8 records
cloudbash.sh	lou.ns.cloudflare.com, gwen.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.160

NS records: lou.ns.cloudflare.com, gwen.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cloudbash.sh (unsigned zone)

⏱️ Timing

Total: 729ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.42.177, 172.67.207.14`
AAAA	2	`2606:4700:3033::ac43:cf0e, 2606:4700:3030::6815:2ab1`
NS	2	`gwen.ns.cloudflare.com, lou.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`gwen.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (b0.nic.sh, b0.nic.sh, a0.nic.sh...)

Analysis

IP Addresses

cloudbash.sh has four IP addresses: 104.21.42.177, 172.67.207.14, 2606:4700:3030::6815:2ab1 and 2606:4700:3033::ac43:cf0e.

ddbgs.com, vgvki.com, ecobox.cyou and two other host names share IP numbers with cloudbash.sh.

Name Servers

cloudbash.sh has two authoritative name servers — gwen.ns.cloudflare.com and lou.ns.cloudflare.com.

cloudbash.sh uses the same name servers as several other domains — among them agentfleet.live, scanner-7th.pages.dev, stavochka.com and two more.

cloudbash.sh shares at least some of its name servers with other domains, including z46021415.workers.dev, cbtmk.com, appjniwia-org-c87d50f6.pages.dev and two others.

These name servers are frequently paired with the name servers theo.ns.cloudflare.com and chip.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

gwen.ns.cloudflare.com points to 108.162.192.160, 172.64.32.160, 173.245.58.160 and 3 other IP addresses.

lou.ns.cloudflare.com points to 108.162.193.199, 172.64.33.199, 173.245.59.199 and 3 other IP addresses.