hell.sh - dns.ninja

`hell.sh`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:b64d^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::6815:128a^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.18.138^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.182.77^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`marge.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3abf^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marge.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0bf^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`marge.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20bf^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`marge.ns.cloudflare.com`
		A	108.162.192.191^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marge.ns.cloudflare.com`
		A	172.64.32.191^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marge.ns.cloudflare.com`
		A	173.245.58.191^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`marge.ns.cloudflare.com`
NS	`paul.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b87^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paul.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c187^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`paul.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2187^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`paul.ns.cloudflare.com`
		A	108.162.193.135^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paul.ns.cloudflare.com`
		A	172.64.33.135^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paul.ns.cloudflare.com`
		A	173.245.59.135^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paul.ns.cloudflare.com`
MX	`nm1.hell.sh` ⭐
		A	2a01:4f8:1c1c:44b0::1^{🇩🇪 Hetzner2a01:4f8::/32 HETZNER-IPv6-BLK}
			PTR	`nm1.hell.sh`
		A	159.69.46.147^{🇩🇪 Hetzner159.69.0.0/16 HETZNER-DC}
			PTR	`nm1.hell.sh`
TXT	`google-site-verification=8kVkuCnCvQNw7-frtYZ5vK9ke8TKs7bmjeBC2-pCWx8`
TXT	`v=spf1 -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.18.138, 172.67.182.77
		IPv6 hints	2606:4700:3031::ac43:b64d, 2606:4700:3032::6815:128a
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=206, name=cloudflare-ech.com
SOA	`marge.ns.cloudflare.com`dns@cloudflare.com serial=2410798229

`sh`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.nic.sh` ⭐
	NS	`a2.nic.sh`
	NS	`b0.nic.sh`
	NS	`c0.nic.sh`
	SOA	`a0.nic.sh`hostmaster@donuts.email serial=1785918677

🔒 HSTS Preload (+subdomains)

Subdomains

nm1.hell.sh

fc1.hell.sh

nc1.hell.sh

Same first word

hell.cards

hell.kim

hell.su

hell.be

hell.co.nz

hell.lv

hell.edu.pl

hell.org.ua

hell.co.uk

hell.zone

hell.info

hell.at

hell.club

hell.ch

hell.am

hell.it

hell.gr

hell.de

hell.com

hell.ru

hell.net

hell.ca

hell.in

hell.tv

hell.cz

hell.nl

hell.case

hell.kz

hell.pl

hell.support

hell.fyi

hell.bike

hell.ac

hell.cl

hell.games

hell.business

hell.se

hell.art.pl

hell.bz.it

hell.tours

hell.no

hell.sk

hell.media

hell.company

hell.to

hell.web.id

hell.jp

hell.org.pl

hell.org

hell.me.uk

hell.or.at

hell.sh

hell.co

hell.fi

hell.ws

hell.house

hell.vg

hell.diskstation.me

hell.la

hell.money

hell.biz

hell.tf

hell.hu

hell.us

hell.cx

hell.gmbh

hell.camp

Similar names

hlel.cn

hlle.de

hlel.com

lehl.biz

lehl.com

ehll.de

hlel.top

hlle.net

lehl.net

lehl.me

ellh.com

ehll.net

ehll.xyz

hlel.xyz

elhl.se

ellh.cz

elhl.pl

lehl.de

ellh.de

lhle.com

lehl.org

lelh.com

lehl.us

hlle.com

lleh.be

hlle.cn

lehl.eu

ellh.gr

DNS History

13 records (7 active, 6 former)

●NSmarge.ns.cloudflare.com2026-02-16 → 2026-08-05 · 2 obs

● 2026-02-16 03:46:54
● 2026-08-05 08:57:44

●NSpaul.ns.cloudflare.com2026-02-16 → 2026-08-05 · 2 obs

● 2026-02-16 03:46:54
● 2026-08-05 08:57:44

●MXnm1.hell.sh2026-02-16 → 2026-08-05 · 4 obs

● 2026-02-16 03:46:54
○ 2026-07-10 11:34:54
● 2026-07-21 20:05:12
● 2026-08-05 08:57:44

●A104.21.18.1382026-02-16 → 2026-08-05 · 16 obs

● 2026-02-16 03:46:54
○ 2026-02-23 20:10:38
● 2026-03-22 18:49:16
○ 2026-03-26 11:42:48
● 2026-03-28 18:14:10
○ 2026-04-07 07:22:34
● 2026-05-14 13:28:40
● 2026-06-02 22:16:04
○ 2026-06-15 07:39:22
● 2026-06-15 15:39:48
● 2026-06-17 13:30:54
○ 2026-06-18 08:11:26
● 2026-06-18 23:13:10
○ 2026-07-10 11:34:54
● 2026-07-21 20:05:12
● 2026-08-05 08:57:44

●A172.67.182.772026-02-16 → 2026-08-05 · 16 obs

○A188.114.96.02026-02-23 → 2026-06-18 · 14 obs

○ 2026-02-16 03:46:54
● 2026-02-23 20:10:38
○ 2026-03-22 18:49:16
● 2026-03-26 11:42:48
○ 2026-03-28 18:14:10
● 2026-04-07 07:22:34
○ 2026-05-14 13:28:40
○ 2026-06-02 22:16:04
● 2026-06-15 07:39:22
○ 2026-06-15 15:39:48
○ 2026-06-17 13:30:54
● 2026-06-18 08:11:26
○ 2026-06-18 23:13:10
○ 2026-08-05 08:57:44

○A188.114.97.02026-02-23 → 2026-06-18 · 14 obs

●A2606:4700:3031::ac43:b64d2026-07-25 → 2026-08-05 · 3 obs

○ 2026-07-21 20:05:12
● 2026-07-25 13:58:28
● 2026-08-05 08:57:44

●A2606:4700:3032::6815:128a2026-07-25 → 2026-08-05 · 3 obs

○ 2026-07-21 20:05:12
● 2026-07-25 13:58:28
● 2026-08-05 08:57:44

○A2606:4700:3034::6815:128a2026-02-16 → 2026-07-21 · 17 obs

○A2606:4700:3035::ac43:b64d2026-02-16 → 2026-07-21 · 17 obs

○A2a06:98c1:3120::2026-02-23 → 2026-06-18 · 14 obs

○A2a06:98c1:3121::2026-02-23 → 2026-06-18 · 14 obs

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
sh	b0.nic.sh, a0.nic.sh, c0.nic.sh, a2.nic.sh	8 records
hell.sh	marge.ns.cloudflare.com, paul.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.191

NS records: marge.ns.cloudflare.com, paul.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for hell.sh (unsigned zone)

⏱️ Timing

Total: 1544ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.18.138, 172.67.182.77`
AAAA	2	`2606:4700:3031::ac43:b64d, 2606:4700:3032::6815:128a`
NS	2	`marge.ns.cloudflare.com, paul.ns.cloudflare.com`
MX	1	`nm1.hell.sh (pri: 42069)`
TXT	2	`google-site-verification=8kVkuCnCvQNw7-f, v=spf1 -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`marge.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (b0.nic.sh, b0.nic.sh, a0.nic.sh...)

Analysis

Hierarchy

hell.sh is the parent domain of nm1.hell.sh, fc1.hell.sh and nc1.hell.sh.

IP Addresses

hell.sh has four IP addresses: 104.21.18.138, 172.67.182.77, 2606:4700:3031::ac43:b64d and 2606:4700:3032::6815:128a.

klenktools.com, airowear.co.uk, x(0x786e7878).biz plus two other host names have IP numbers in common with hell.sh.

Name Servers

hell.sh is delegated to two name servers: marge.ns.cloudflare.com and paul.ns.cloudflare.com.

The name server configuration of hell.sh is shared with other domains, for instance sandosham.com, noukcasino.com, exploit.li and two others.

hell.sh shares at least some of its name servers with other domains, including bordo.al, ambie.me, 87086.com and two others.

These name servers are frequently paired with the name servers yoxall.ns.cloudflare.com, valentin.ns.cloudflare.com and tom.ns.cloudflare.com.

Hosts with 6 IP addresses each:

marge.ns.cloudflare.com resolves to 108.162.192.191, 172.64.32.191, 173.245.58.191 and 3 other IP addresses.

paul.ns.cloudflare.com resolves to 108.162.193.135, 172.64.33.135, 173.245.59.135 and 3 other IP addresses.

Mail Servers

hell.sh uses one mail server — nm1.hell.sh.

The mail server setup of hell.sh matches that of other domains such as phpcraft.de, apimon.de, skill.moe and two others.

nm1.hell.sh points to two IP addresses: 159.69.46.147 and 2a01:4f8:1c1c:44b0::1.