runcode.sh - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

runcode.sh

DNSSEC⚠️ Not signed
A2a09:8280:1::7e:78c1:0πŸ‡ΊπŸ‡Έ FLYIO-12a09:8280:1::/48 Proxy Registration / Customer Route
PTRipv6.customer.flyio.net
A66.241.125.203πŸ‡ΊπŸ‡Έ FLYIO-166.241.124.0/23 Fly.io Edge Network
NScuritiba.ns.porkbun.com ⭐
A2400:cb00:2049:1::adf5:3a25πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A173.245.58.37πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSfortaleza.ns.porkbun.com
A2400:cb00:2049:1::a29f:88cπŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.8.140Cloudflare162.159.8.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSmaceio.ns.porkbun.com
A2400:cb00:2049:1::a29f:bb4πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.11.180Cloudflare162.159.11.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSsalvador.ns.porkbun.com
A2400:cb00:2049:1::a29f:a96πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A162.159.10.150Cloudflare162.159.10.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXmail.protonmail.ch ⭐
A176.119.200.128πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmail.protonmail.ch
A185.70.42.128πŸ‡¨πŸ‡­ Proton185.70.42.0/24
PTRmail.protonmail.ch
A185.205.70.128πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmail.protonmail.ch
MXmailsec.protonmail.ch(20)
A176.119.200.129πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmailsec.protonmail.ch
A185.70.42.129πŸ‡¨πŸ‡­ Proton185.70.42.0/24
PTRmailsec.protonmail.ch
A185.205.70.129πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmailsec.protonmail.ch
TXTprotonmail-verification=baf41caf06b13c8dbb068e8da059ce6e9c3a4977
TXTv=spf1 include:_spf.protonmail.ch ~all
SOAcuritiba.ns.porkbun.comdns@cloudflare.com serial=2413052954

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1788525279

Same first word

Similar names

Previous names

Next names

DNS History

8 records (8 active, 0 former)

NScuritiba.ns.porkbun.comfortaleza.ns.porkbun.commaceio.ns.porkbun.comsalvador.ns.porkbun.comMXmail.protonmail.chmailsec.protonmail.chA2a09:8280:1::7e:78c1:066.241.125.203
●NScuritiba.ns.porkbun.com2026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●NSfortaleza.ns.porkbun.com2026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●NSmaceio.ns.porkbun.com2026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●NSsalvador.ns.porkbun.com2026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●MXmail.protonmail.ch2026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●MXmailsec.protonmail.ch2026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●A2a09:8280:1::7e:78c1:02026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20
●A66.241.125.2032026-08-26 β†’ 2026-09-04 Β· 2 obs
● 2026-08-26 05:44:32
● 2026-09-04 13:45:20

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
runcode.shmaceio.ns.porkbun.com, curitiba.ns.porkbun.com, salvador.ns.porkbun.com, fortaleza.ns.porkbun.com-

βœ… Authoritative Response

Server:162.159.8.140

NS records: maceio.ns.porkbun.com, curitiba.ns.porkbun.com, salvador.ns.porkbun.com, fortaleza.ns.porkbun.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 226ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A166.241.125.203
AAAA12a09:8280:1::7e:78c1:0
NS4curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com...
MX2mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)
TXT2protonmail-verification=baf41caf06b13c8d, v=spf1 include:_spf.protonmail.ch ~all
SOA1curitiba.ns.porkbun.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

runcode.sh has two IP addresses: 66.241.125.203 and 2a09:8280:1::7e:78c1:0

Among the host names that share IP numbers with runcode.sh are regenesis.mx, shieldkey.io, ilwol.net and two others.

Name Servers

The domain runcode.sh is delegated to these four name servers: curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com.

There is at least partial name server overlap between runcode.sh and other domains β€” jamus.email, jhowellrealtor.com, dightondispensary.com and two more among them.

All four hostnames β€” curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com and salvador.ns.porkbun.com β€” resolve to two IP numbers apiece: curitiba.ns.porkbun.com to 173.245.58.37 and 2400:cb00:2049:1::adf5:3a25; fortaleza.ns.porkbun.com to 162.159.8.140 and 2400:cb00:2049:1::a29f:88c; maceio.ns.porkbun.com to 162.159.11.180 and 2400:cb00:2049:1::a29f:bb4; salvador.ns.porkbun.com to 162.159.10.150 and 2400:cb00:2049:1::a29f:a96.

Mail Servers

The MX records for runcode.sh point to two mail servers: mail.protonmail.ch and mailsec.protonmail.ch.

runcode.sh has the same mail server arrangement as a number of other domains, for example splendidadesign.com.br, pietryszak.pl, perseides.ai and two more.

runcode.sh shares at least some of its mail servers with other domains β€” for example 4timber.com, juliesmail.net, monarchofthree.com and two more.

mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128. mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129. Both hosts resolve to three IP numbers.