shellcode.llc - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

shellcode.llc

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:b3e1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3036::6815:23d3πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.35.211Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.179.225πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSasa.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3af6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRasa.ns.cloudflare.com
A2803:f800:50::6ca2:c0f6πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRasa.ns.cloudflare.com
A2a06:98c1:50::ac40:20f6πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRasa.ns.cloudflare.com
A108.162.192.246πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRasa.ns.cloudflare.com
A172.64.32.246πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRasa.ns.cloudflare.com
A173.245.58.246πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRasa.ns.cloudflare.com
NSgabriel.ns.cloudflare.com
A2606:4700:58::a29f:2cf4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabriel.ns.cloudflare.com
A2803:f800:50::6ca2:c3f4πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRgabriel.ns.cloudflare.com
A2a06:98c1:50::ac40:23f4πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRgabriel.ns.cloudflare.com
A108.162.195.244πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabriel.ns.cloudflare.com
A162.159.44.244Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabriel.ns.cloudflare.com
A172.64.35.244πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgabriel.ns.cloudflare.com
MXfwd1.porkbun.com ⭐
A44.226.226.6πŸ‡ΊπŸ‡Έ Amazon44.224.0.0/11 EC2 PDX prefix
PTRfwd1.porkbun.com
MXfwd2.porkbun.com(20)
A52.10.201.111πŸ‡ΊπŸ‡Έ Amazon52.10.0.0/15 EC2 PDX Prefix
PTRfwd2.porkbun.com
TXTv=spf1 include:_spf.porkbun.com ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.35.211, 172.67.179.225
IPv6 hints2606:4700:3030::ac43:b3e1, 2606:4700:3036::6815:23d3
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=220, name=cloudflare-ech.com
SOAasa.ns.cloudflare.comdns@cloudflare.com serial=2412906764

llc

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.llc ⭐
NSa2.nic.llc
NSb0.nic.llc
NSc0.nic.llc
SOAa0.nic.llchostmaster@donuts.email serial=1788332543
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

Previous names

Next names

DNS History

8 records (8 active, 0 former)

NSasa.ns.cloudflare.comgabriel.ns.cloudflare.comMXfwd1.porkbun.comfwd2.porkbun.comA104.21.35.211172.67.179.2252606:4700:3030::ac43:b3e12606:4700:3036::6815:23d3
●NSasa.ns.cloudflare.com2026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●NSgabriel.ns.cloudflare.com2026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●MXfwd1.porkbun.com2026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●MXfwd2.porkbun.com2026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●A104.21.35.2112026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●A172.67.179.2252026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●A2606:4700:3030::ac43:b3e12026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56
●A2606:4700:3036::6815:23d32026-09-01 β†’ 2026-09-02 Β· 2 obs
● 2026-09-01 02:20:44
● 2026-09-02 07:15:56

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
llca0.nic.llc, a2.nic.llc, b0.nic.llc, c0.nic.llc8 records
shellcode.llcasa.ns.cloudflare.com, gabriel.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.244

NS records: asa.ns.cloudflare.com, gabriel.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for shellcode.llc (unsigned zone)

⏱️ Timing

Total: 459ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.35.211, 172.67.179.225
AAAA22606:4700:3036::6815:23d3, 2606:4700:3030::ac43:b3e1
NS2asa.ns.cloudflare.com, gabriel.ns.cloudflare.com
MX2fwd1.porkbun.com (pri: 10), fwd2.porkbun.com (pri: 20)
TXT1v=spf1 include:_spf.porkbun.com ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1asa.ns.cloudflare.com dns.cloudflare.com

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.llc, a2.nic.llc, b0.nic.llc...)

Analysis

IP Addresses

shellcode.llc has four IP addresses: 104.21.35.211, 172.67.179.225, 2606:4700:3030::ac43:b3e1 and 2606:4700:3036::6815:23d3.

kerenyudmeminc.my.id, marble-eg.com, inztotal.com and two other host names share IP numbers with shellcode.llc.

Name Servers

DNS delegation for shellcode.llc points to two name servers: asa.ns.cloudflare.com and gabriel.ns.cloudflare.com.

shellcode.llc uses the same name servers as several other domains β€” among them lamjs701.workers.dev, riverviewinnct.workers.dev, cqlsys04.workers.dev and two more.

shellcode.llc has at least partial name server overlap with other domains, such as rawaa-decoration.pages.dev, carolsheng0215.workers.dev, 225aa.top and two others.

It is common to see these name servers used together with name servers dara.ns.cloudflare.com and dana.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

asa.ns.cloudflare.com has IP addresses 108.162.192.246, 172.64.32.246 and 173.245.58.246, plus 3 other.

gabriel.ns.cloudflare.com has IP addresses 108.162.195.244, 162.159.44.244 and 172.64.35.244, plus 3 other.

Mail Servers

Mail for shellcode.llc is handled by two mail servers β€” fwd1.porkbun.com and fwd2.porkbun.com.

shellcode.llc uses an identical mail server configuration to several other domains β€” among them quikiverse.com, baeyallabs.com, wiemo.org and two more.

At least some of shellcode.llc's mail servers are shared with other domains, among them fretro.com, ankrprecon.com, estevezarts.com and seatcompress.com.

This set of mail servers commonly appears together with the mail servers smtp.google.com.

fwd1.porkbun.com directs to 44.226.226.6 and fwd2.porkbun.com directs to 52.10.201.111; each host name points to exactly one IP number.