rish.sh - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status

rish.sh

DNSSEC⚠️ Not signed
A216.198.79.1🇺🇸 Amazon216.198.79.0/24 EC2 Prefix
NScuritiba.ns.porkbun.com
A2400:cb00:2049:1::adf5:3a25🇺🇸 Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A173.245.58.37🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSfortaleza.ns.porkbun.com
A2400:cb00:2049:1::a29f:88c🇺🇸 Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.8.140Cloudflare162.159.8.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSmaceio.ns.porkbun.com
A2400:cb00:2049:1::a29f:bb4🇺🇸 Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.11.180Cloudflare162.159.11.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSsalvador.ns.porkbun.com
A2400:cb00:2049:1::a29f:a96🇺🇸 Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.10.150Cloudflare162.159.10.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
TXTgoogle-site-verification=KMa5981qQumfqvWSk8MScbZqO-53j1Gf0T-KwAb_5Js
SOAcuritiba.ns.porkbun.comdns@cloudflare.com serial=2411707677

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1786950146

Same first word

Similar names

DNS History

5 records (5 active, 0 former)

NScuritiba.ns.porkbun.comfortaleza.ns.porkbun.commaceio.ns.porkbun.comsalvador.ns.porkbun.comA216.198.79.1
NScuritiba.ns.porkbun.com2026-08-14 → 2026-08-17 · 2 obs
● 2026-08-14 17:10:52
● 2026-08-17 07:17:44
NSfortaleza.ns.porkbun.com2026-08-14 → 2026-08-17 · 2 obs
● 2026-08-14 17:10:52
● 2026-08-17 07:17:44
NSmaceio.ns.porkbun.com2026-08-14 → 2026-08-17 · 2 obs
● 2026-08-14 17:10:52
● 2026-08-17 07:17:44
NSsalvador.ns.porkbun.com2026-08-14 → 2026-08-17 · 2 obs
● 2026-08-14 17:10:52
● 2026-08-17 07:17:44
A216.198.79.12026-08-14 → 2026-08-17 · 2 obs
● 2026-08-14 17:10:52
● 2026-08-17 07:17:44

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
rish.shmaceio.ns.porkbun.com, curitiba.ns.porkbun.com, salvador.ns.porkbun.com, fortaleza.ns.porkbun.com-

✅ Authoritative Response

Server:162.159.11.180

NS records: maceio.ns.porkbun.com, curitiba.ns.porkbun.com, salvador.ns.porkbun.com, fortaleza.ns.porkbun.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for rish.sh (unsigned zone)

⏱️ Timing

Total: 541ms | Queries: -

📄 Records

TypeCountSample Data
A1216.198.79.1
NS4curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com...
TXT1google-site-verification=KMa5981qQumfqvW
SOA1curitiba.ns.porkbun.com dns.cloudflare.c

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (c0.nic.sh, b0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

rish.sh points to a single IP number: 216.198.79.1.

Additional host names — theatsfood.com, klinikharmoni.my, koolfans.com and two others — share IP numbers with rish.sh.

Name Servers

rish.sh has four authoritative name servers: curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com.

There is at least partial name server overlap between rish.sh and other domains — satnamsingh.dev, annschecter.net, darkpanther.org and two more among them.

All four hostnames — curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com — resolve to two IP numbers apiece: curitiba.ns.porkbun.com to 173.245.58.37 and 2400:cb00:2049:1::adf5:3a25; fortaleza.ns.porkbun.com to 162.159.8.140 and 2400:cb00:2049:1::a29f:88c; maceio.ns.porkbun.com to 162.159.11.180 and 2400:cb00:2049:1::a29f:bb4; salvador.ns.porkbun.com to 162.159.10.150 and 2400:cb00:2049:1::a29f:a96.