remove.sh - dns.ninja

remove.sh

DNSSEC⚠️ Not signed
A2606:4700:3035::ac43:a909πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:1b45πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.27.69Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.169.9πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSrobin.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3adaπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
A2803:f800:50::6ca2:c0daπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrobin.ns.cloudflare.com
A2a06:98c1:50::ac40:20daπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRrobin.ns.cloudflare.com
A108.162.192.218πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
A172.64.32.218πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
A173.245.58.218πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
NSwoz.ns.cloudflare.com
A2606:4700:58::adf5:3b96πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwoz.ns.cloudflare.com
A2803:f800:50::6ca2:c196πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRwoz.ns.cloudflare.com
A2a06:98c1:50::ac40:2196πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRwoz.ns.cloudflare.com
A108.162.193.150πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwoz.ns.cloudflare.com
A172.64.33.150πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwoz.ns.cloudflare.com
A173.245.59.150πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwoz.ns.cloudflare.com
TXTgoogle-site-verification=Kl9yFnBNQPQQdUXB_t7b1z68jwLp3WPK0usKRndvdqo
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.27.69, 172.67.169.9
IPv6 hints2606:4700:3035::ac43:a909, 2606:4700:3037::6815:1b45
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=214, name=cloudflare-ech.com
SOArobin.ns.cloudflare.comdns@cloudflare.com serial=2411220720

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1785885003

Same first word

Similar names

DNS History

11 records (6 active, 5 former)

NSrobin.ns.cloudflare.comwoz.ns.cloudflare.comA104.21.27.69172.67.169.92606:4700:3035::ac43:a9092606:4700:3037::6815:1b45188.114.96.0188.114.97.02606:4700:3036::ac43:a9092a06:98c1:3120::2a06:98c1:3121::
●NSrobin.ns.cloudflare.com2026-02-14 β†’ 2026-08-04 Β· 2 obs
● 2026-02-14 16:30:32
● 2026-08-04 23:33:58
●NSwoz.ns.cloudflare.com2026-02-14 β†’ 2026-08-04 Β· 2 obs
● 2026-02-14 16:30:32
● 2026-08-04 23:33:58
●A104.21.27.692026-03-19 β†’ 2026-08-04 Β· 14 obs
β—‹ 2026-03-18 19:56:08
● 2026-03-19 11:20:40
β—‹ 2026-03-28 16:29:52
β—‹ 2026-04-01 05:40:04
● 2026-04-02 23:47:08
β—‹ 2026-04-05 00:44:08
β—‹ 2026-04-24 14:24:18
● 2026-04-27 18:26:48
● 2026-06-08 19:12:38
β—‹ 2026-06-10 23:49:54
● 2026-07-02 06:44:36
β—‹ 2026-07-03 16:29:08
● 2026-08-04 23:33:56
● 2026-08-04 23:33:58
●A172.67.169.92026-03-19 β†’ 2026-08-04 Β· 14 obs
β—‹ 2026-03-18 19:56:08
● 2026-03-19 11:20:40
β—‹ 2026-03-28 16:29:52
β—‹ 2026-04-01 05:40:04
● 2026-04-02 23:47:08
β—‹ 2026-04-05 00:44:08
β—‹ 2026-04-24 14:24:18
● 2026-04-27 18:26:48
● 2026-06-08 19:12:38
β—‹ 2026-06-10 23:49:54
● 2026-07-02 06:44:36
β—‹ 2026-07-03 16:29:08
● 2026-08-04 23:33:56
● 2026-08-04 23:33:58
β—‹A188.114.96.02026-02-14 β†’ 2026-07-03 Β· 15 obs
● 2026-02-14 16:30:32
● 2026-03-18 19:56:08
β—‹ 2026-03-19 11:20:40
● 2026-03-28 16:29:52
● 2026-04-01 05:40:04
β—‹ 2026-04-02 23:47:08
● 2026-04-05 00:44:08
● 2026-04-24 14:24:18
β—‹ 2026-04-27 18:26:48
β—‹ 2026-06-08 19:12:38
● 2026-06-10 23:49:54
β—‹ 2026-07-02 06:44:36
● 2026-07-03 16:29:08
β—‹ 2026-08-04 23:33:56
β—‹ 2026-08-04 23:33:58
β—‹A188.114.97.02026-02-14 β†’ 2026-07-03 Β· 15 obs
● 2026-02-14 16:30:32
● 2026-03-18 19:56:08
β—‹ 2026-03-19 11:20:40
● 2026-03-28 16:29:52
● 2026-04-01 05:40:04
β—‹ 2026-04-02 23:47:08
● 2026-04-05 00:44:08
● 2026-04-24 14:24:18
β—‹ 2026-04-27 18:26:48
β—‹ 2026-06-08 19:12:38
● 2026-06-10 23:49:54
β—‹ 2026-07-02 06:44:36
● 2026-07-03 16:29:08
β—‹ 2026-08-04 23:33:56
β—‹ 2026-08-04 23:33:58
●A2606:4700:3035::ac43:a9092026-07-02 β†’ 2026-08-04 Β· 5 obs
β—‹ 2026-06-10 23:49:54
● 2026-07-02 06:44:36
β—‹ 2026-07-03 16:29:08
● 2026-08-04 23:33:56
● 2026-08-04 23:33:58
β—‹A2606:4700:3036::ac43:a9092026-03-19 β†’ 2026-06-08 Β· 11 obs
β—‹ 2026-03-18 19:56:08
● 2026-03-19 11:20:40
β—‹ 2026-03-28 16:29:52
β—‹ 2026-04-01 05:40:04
● 2026-04-02 23:47:08
β—‹ 2026-04-05 00:44:08
β—‹ 2026-04-24 14:24:18
● 2026-04-27 18:26:48
● 2026-06-08 19:12:38
β—‹ 2026-06-10 23:49:54
β—‹ 2026-08-04 23:33:58
●A2606:4700:3037::6815:1b452026-03-19 β†’ 2026-08-04 Β· 14 obs
β—‹ 2026-03-18 19:56:08
● 2026-03-19 11:20:40
β—‹ 2026-03-28 16:29:52
β—‹ 2026-04-01 05:40:04
● 2026-04-02 23:47:08
β—‹ 2026-04-05 00:44:08
β—‹ 2026-04-24 14:24:18
● 2026-04-27 18:26:48
● 2026-06-08 19:12:38
β—‹ 2026-06-10 23:49:54
● 2026-07-02 06:44:36
β—‹ 2026-07-03 16:29:08
● 2026-08-04 23:33:56
● 2026-08-04 23:33:58
β—‹A2a06:98c1:3120::2026-02-14 β†’ 2026-07-03 Β· 15 obs
● 2026-02-14 16:30:32
● 2026-03-18 19:56:08
β—‹ 2026-03-19 11:20:40
● 2026-03-28 16:29:52
● 2026-04-01 05:40:04
β—‹ 2026-04-02 23:47:08
● 2026-04-05 00:44:08
● 2026-04-24 14:24:18
β—‹ 2026-04-27 18:26:48
β—‹ 2026-06-08 19:12:38
● 2026-06-10 23:49:54
β—‹ 2026-07-02 06:44:36
● 2026-07-03 16:29:08
β—‹ 2026-08-04 23:33:56
β—‹ 2026-08-04 23:33:58
β—‹A2a06:98c1:3121::2026-02-14 β†’ 2026-07-03 Β· 15 obs
● 2026-02-14 16:30:32
● 2026-03-18 19:56:08
β—‹ 2026-03-19 11:20:40
● 2026-03-28 16:29:52
● 2026-04-01 05:40:04
β—‹ 2026-04-02 23:47:08
● 2026-04-05 00:44:08
● 2026-04-24 14:24:18
β—‹ 2026-04-27 18:26:48
β—‹ 2026-06-08 19:12:38
● 2026-06-10 23:49:54
β—‹ 2026-07-02 06:44:36
● 2026-07-03 16:29:08
β—‹ 2026-08-04 23:33:56
β—‹ 2026-08-04 23:33:58

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
remove.shwoz.ns.cloudflare.com, robin.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.192.218

NS records: woz.ns.cloudflare.com, robin.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for remove.sh (unsigned zone)

⏱️ Timing

Total: 1367ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.169.9, 104.21.27.69
AAAA22606:4700:3035::ac43:a909, 2606:4700:3037::6815:1b45
NS2robin.ns.cloudflare.com, woz.ns.cloudflare.com
TXT1google-site-verification=Kl9yFnBNQPQQdUX
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1robin.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

remove.sh points to the four IP addresses 104.21.27.69, 172.67.169.9, 2606:4700:3035::ac43:a909 and 2606:4700:3037::6815:1b45.

ahongmall.cn, unival.es, www.m.marketplacepremium24.com plus two other host names have IP numbers in common with remove.sh.

Name Servers

remove.sh is delegated to two name servers: robin.ns.cloudflare.com and woz.ns.cloudflare.com.

The name server configuration of remove.sh is shared with other domains, for instance cic.ac.id, techranker.com, blinking.dog and two others.

There is at least partial name server overlap between remove.sh and other domains β€” crypto-gokken.casino, resumestime.com, hxc259.com and two more among them.

Hosts with 6 IP addresses each:

robin.ns.cloudflare.com resolves to 108.162.192.218, 172.64.32.218, 173.245.58.218 and 3 other IP addresses.

woz.ns.cloudflare.com resolves to 108.162.193.150, 172.64.33.150, 173.245.59.150 and 3 other IP addresses.