nm1.hell.sh - dns.ninja

nm1.hell.sh

DNSSEC⚠️ Not signed
A2a01:4f8:1c1c:44b0::1🇩🇪 Hetzner2a01:4f8::/32 HETZNER-IPv6-BLK
PTRnm1.hell.sh
A159.69.46.147🇩🇪 Hetzner159.69.0.0/16 HETZNER-DC

hell.sh

DNSSEC⚠️ Not signed
A2606:4700:3034::6815:128a🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3035::ac43:b64d🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.18.138Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.182.77🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSmarge.ns.cloudflare.com ⭐
NSpaul.ns.cloudflare.com
MXnm1.hell.sh ⭐
TXTgoogle-site-verification=8kVkuCnCvQNw7-frtYZ5vK9ke8TKs7bmjeBC2-pCWx8
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.18.138, 172.67.182.77
IPv6 hints2606:4700:3034::6815:128a, 2606:4700:3035::ac43:b64d
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=140, name=cloudflare-ech.com
SOAmarge.ns.cloudflare.comdns@cloudflare.com serial=2406717091
🔒 HSTS Preload (+subdomains)

PTR for

1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.b.4.4.c.1.c.1.8.f.4.0.1.0.a.2.ip6.arpa
147.46.69.159.in-addr.arpa

MX for

skillmoe.at
netdex.co
exploit.li
hell.sh
nex.li
phpcraft.de
apimon.de
skill.moe
boost.ink

Previously MX for

getcone.org
universal-bypass.org

Same first word

nm1.me
nm1.us
nm1.in
nm1.de
nm1.org
nm1.no
nm1.com
nm1.net
nm1.ru
nm1.co.uk
nm1.eu

Similar names

mn1.de
mn1.com.br
n1m.co
mn1.ru
mn1.org
1mn.de
1mn.net
n1m.top
mn1.net
n1m.info
mn1.us
1mn.us
1nm.net
1mn.xyz
mn1.com
m1n.it
1nm.com
m1n.net
1nm.org
n1m.de
m1n.cn
m1n.ru
n1m.cn
n1m.ru
1nm.de
m1n.us
1mn.fr
mn1.pl
1nm.in
m1n.info
1mn.cc
mn1.cc
1mn.com
mn1.at
m1n.com
n1m.com
n1m.org
m1n.co
n1m.akamaiedge.net
1nm.cc
n1m.akamai.net
1mn.mobi
1mn.ru

DNS History

2 records (2 active, 0 former)

2020202120222023202420252026A159.69.46.1472a01:4f8:1c1c:44b0::1
●A159.69.46.1472019-12-19 → 2026-06-15 · 2 obs
● 2019-12-19 07:46:04
● 2026-06-15 15:39:48
●A2a01:4f8:1c1c:44b0::12019-12-19 → 2026-06-15 · 2 obs
● 2019-12-19 07:46:04
● 2026-06-15 15:39:48

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
shb0.nic.sh, a0.nic.sh, c0.nic.sh, a2.nic.sh8 records
hell.shpaul.ns.cloudflare.com, marge.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.58.191

NS records: paul.ns.cloudflare.com, marge.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for hell.sh (unsigned zone)

⏱️ Timing

Total: 847ms | Queries: -

📄 Records

TypeCountSample Data
A1159.69.46.147
AAAA12a01:4f8:1c1c:44b0::1

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (b0.nic.sh, b0.nic.sh, a0.nic.sh...)

Analysis

Mail Server Role

Mail for skillmoe.at, netdex.co, exploit.li, hell.sh, nex.li and a few other domains is handled by nm1.hell.sh.

IP Addresses

nm1.hell.sh points to the IP addresses 159.69.46.147 and 2a01:4f8:1c1c:44b0::1