mailshell.dev - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

mailshell.dev

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:9aa7πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::6815:58fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.5.143Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.154.167πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSmitch.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bd0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmitch.ns.cloudflare.com
A2803:f800:50::6ca2:c1d0πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmitch.ns.cloudflare.com
A2a06:98c1:50::ac40:21d0πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmitch.ns.cloudflare.com
A108.162.193.208πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmitch.ns.cloudflare.com
A172.64.33.208πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmitch.ns.cloudflare.com
A173.245.59.208πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmitch.ns.cloudflare.com
NSzelda.ns.cloudflare.com
A2606:4700:50::adf5:3af2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
A2803:f800:50::6ca2:c0f2πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRzelda.ns.cloudflare.com
A2a06:98c1:50::ac40:20f2πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRzelda.ns.cloudflare.com
A108.162.192.242πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
A172.64.32.242πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
A173.245.58.242πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
MXmail.test.mailshell.dev ⭐
A45.79.82.254πŸ‡ΊπŸ‡Έ AKAMAI-LINODE-AP45.79.64.0/19 Akamai Technologies
PTRmail.test.mailshell.dev
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.5.143, 172.67.154.167
IPv6 hints2606:4700:3032::ac43:9aa7, 2606:4700:3033::6815:58f
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=109, name=cloudflare-ech.com
SOAmitch.ns.cloudflare.comdns@cloudflare.com serial=2413476000

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

11 records (7 active, 4 former)

NSmitch.ns.cloudflare.comzelda.ns.cloudflare.comMXmail.test.mailshell.devA104.21.5.143172.67.154.1672606:4700:3032::ac43:9aa72606:4700:3033::6815:58f188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSmitch.ns.cloudflare.com2026-08-28 β†’ 2026-08-30 Β· 2 obs
● 2026-08-28 12:21:16
● 2026-08-30 22:22:54
●NSzelda.ns.cloudflare.com2026-08-28 β†’ 2026-08-30 Β· 2 obs
● 2026-08-28 12:21:16
● 2026-08-30 22:22:54
●MXmail.test.mailshell.dev2026-08-28 β†’ 2026-08-30 Β· 2 obs
● 2026-08-28 12:21:16
● 2026-08-30 22:22:54
●A104.21.5.1432026-08-30 β†’ 2026-08-30 Β· 3 obs
β—‹ 2026-08-28 12:21:16
● 2026-08-30 02:51:40
● 2026-08-30 22:22:54
●A172.67.154.1672026-08-30 β†’ 2026-08-30 Β· 3 obs
β—‹ 2026-08-28 12:21:16
● 2026-08-30 02:51:40
● 2026-08-30 22:22:54
β—‹A188.114.96.02026-08-28 β†’ 2026-08-28 Β· 3 obs
● 2026-08-28 12:21:16
β—‹ 2026-08-30 02:51:40
β—‹ 2026-08-30 22:22:54
β—‹A188.114.97.02026-08-28 β†’ 2026-08-28 Β· 3 obs
● 2026-08-28 12:21:16
β—‹ 2026-08-30 02:51:40
β—‹ 2026-08-30 22:22:54
●A2606:4700:3032::ac43:9aa72026-08-30 β†’ 2026-08-30 Β· 3 obs
β—‹ 2026-08-28 12:21:16
● 2026-08-30 02:51:40
● 2026-08-30 22:22:54
●A2606:4700:3033::6815:58f2026-08-30 β†’ 2026-08-30 Β· 3 obs
β—‹ 2026-08-28 12:21:16
● 2026-08-30 02:51:40
● 2026-08-30 22:22:54
β—‹A2a06:98c1:3120::2026-08-28 β†’ 2026-08-28 Β· 3 obs
● 2026-08-28 12:21:16
β—‹ 2026-08-30 02:51:40
β—‹ 2026-08-30 22:22:54
β—‹A2a06:98c1:3121::2026-08-28 β†’ 2026-08-28 Β· 3 obs
● 2026-08-28 12:21:16
β—‹ 2026-08-30 02:51:40
β—‹ 2026-08-30 22:22:54

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...-
mailshell.devzelda.ns.cloudflare.com, mitch.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.192.242

NS records: zelda.ns.cloudflare.com, mitch.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for mailshell.dev (unsigned zone)

⏱️ Timing

Total: 634ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.5.143, 172.67.154.167
AAAA22606:4700:3033::6815:58f, 2606:4700:3032::ac43:9aa7
NS2mitch.ns.cloudflare.com, zelda.ns.cloudflare.com
MX1mail.test.mailshell.dev (pri: 10)
TXT1v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1mitch.ns.cloudflare.com dns.cloudflare.c

Analysis

IP Addresses

mailshell.dev points to the four IP addresses 104.21.5.143, 172.67.154.167, 2606:4700:3032::ac43:9aa7 and 2606:4700:3033::6815:58f.

Two other host names, along with whypb.cn, 1cash.one and aliornceswv-online.top, also share IP numbers with mailshell.dev.

Name Servers

The NS records for mailshell.dev delegate to mitch.ns.cloudflare.com and zelda.ns.cloudflare.com.

mailshell.dev shares its NS records with other domains, for example ilozas.workers.dev, upselia.es, laptopcarsisi.com and two others.

There is at least partial name server overlap between mailshell.dev and other domains β€” restricted-proposition-wilson-negotiation-prime-2-0.pages.dev, dataowl.info, dawsbetterbuilt.com and two more among them.

These name servers are routinely deployed together with the name servers maisie.ns.cloudflare.com.

DNS names with 6 IP addresses:

mitch.ns.cloudflare.com maps to 108.162.193.208, 172.64.33.208, 173.245.59.208 and 3 additional IP addresses.

zelda.ns.cloudflare.com maps to 108.162.192.242, 172.64.32.242, 173.245.58.242 and 3 additional IP addresses.

Mail Servers

The sole mail server for mailshell.dev is mail.test.mailshell.dev.

mail.test.mailshell.dev resolves to 45.79.82.254 and no other IP number.