helli.sh - dns.ninja

helli.sh

DNSSEC⚠️ Not signed
A2606:4700:3031::6815:4105πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::ac43:8aafπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.65.5Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.138.175πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSbrodie.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2cedπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrodie.ns.cloudflare.com
A2803:f800:50::6ca2:c3edπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbrodie.ns.cloudflare.com
A2a06:98c1:50::ac40:23edπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRbrodie.ns.cloudflare.com
A108.162.195.237πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrodie.ns.cloudflare.com
A162.159.44.237Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrodie.ns.cloudflare.com
A172.64.35.237πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbrodie.ns.cloudflare.com
NSwanda.ns.cloudflare.com
A2606:4700:50::adf5:3af0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwanda.ns.cloudflare.com
A2803:f800:50::6ca2:c0f0πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRwanda.ns.cloudflare.com
A2a06:98c1:50::ac40:20f0πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRwanda.ns.cloudflare.com
A108.162.192.240πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwanda.ns.cloudflare.com
A172.64.32.240πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwanda.ns.cloudflare.com
A173.245.58.240πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRwanda.ns.cloudflare.com
MXmail.helli.sh ⭐
A172.96.136.186πŸ‡ΊπŸ‡Έ AS395092172.96.136.0/23 DAL1 - CID19089
PTRtx-s1.serverpanel.com
TXTv=spf1 +a +mx +ip4:172.96.136.2 include:relay.mailchannels.net +ip4:172.96.13...
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.65.5, 172.67.138.175
IPv6 hints2606:4700:3031::6815:4105, 2606:4700:3037::ac43:8aaf
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=218, name=cloudflare-ech.com
SOAbrodie.ns.cloudflare.comdns@cloudflare.com serial=2410619193

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1785620929

Previously MX for

Same first word

Similar names

DNS History

19 records (7 active, 12 former)

2020202120222023202420252026NSbrodie.ns.cloudflare.comwanda.ns.cloudflare.comns1.linode.comns1.shockhosting.comns2.linode.comns2.shockhosting.comns3.linode.comns4.linode.comns5.linode.comMXmail.helli.shhelli.shmx.yandex.netA104.21.65.5172.67.138.1752606:4700:3031::6815:41052606:4700:3037::ac43:8aaf139.162.131.159172.96.136.1862a01:7e01::f03c:91ff:fefb:6dab
●NSbrodie.ns.cloudflare.com2026-07-19 β†’ 2026-08-01 Β· 3 obs
β—‹ 2026-06-06 18:03:16
● 2026-07-19 00:40:08
● 2026-08-01 22:01:28
β—‹NSns1.linode.com2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
β—‹NSns1.shockhosting.com2026-02-16 β†’ 2026-06-06 Β· 5 obs
β—‹ 2019-04-04 05:19:52
● 2026-02-16 14:45:10
● 2026-06-06 18:03:16
β—‹ 2026-07-19 00:40:08
β—‹ 2026-08-01 22:01:28
β—‹NSns2.linode.com2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
β—‹NSns2.shockhosting.com2026-02-16 β†’ 2026-06-06 Β· 5 obs
β—‹ 2019-04-04 05:19:52
● 2026-02-16 14:45:10
● 2026-06-06 18:03:16
β—‹ 2026-07-19 00:40:08
β—‹ 2026-08-01 22:01:28
β—‹NSns3.linode.com2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
β—‹NSns4.linode.com2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
β—‹NSns5.linode.com2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
●NSwanda.ns.cloudflare.com2026-07-19 β†’ 2026-08-01 Β· 3 obs
β—‹ 2026-06-06 18:03:16
● 2026-07-19 00:40:08
● 2026-08-01 22:01:28
β—‹MXhelli.sh2026-02-16 β†’ 2026-06-06 Β· 5 obs
β—‹ 2019-04-04 05:19:52
● 2026-02-16 14:45:10
● 2026-06-06 18:03:16
β—‹ 2026-07-19 00:40:08
β—‹ 2026-08-01 22:01:28
●MXmail.helli.sh2026-08-01 β†’ 2026-08-01 Β· 2 obs
β—‹ 2026-07-19 00:40:08
● 2026-08-01 22:01:28
β—‹MXmx.yandex.net2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
●A104.21.65.52026-08-01 β†’ 2026-08-01 Β· 2 obs
β—‹ 2026-07-19 00:40:08
● 2026-08-01 22:01:28
β—‹A139.162.131.1592019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28
●A172.67.138.1752026-08-01 β†’ 2026-08-01 Β· 2 obs
β—‹ 2026-07-19 00:40:08
● 2026-08-01 22:01:28
β—‹A172.96.136.1862026-02-16 β†’ 2026-06-06 Β· 5 obs
β—‹ 2019-04-04 05:19:52
● 2026-02-16 14:45:10
● 2026-06-06 18:03:16
β—‹ 2026-07-19 00:40:08
β—‹ 2026-08-01 22:01:28
●A2606:4700:3031::6815:41052026-08-01 β†’ 2026-08-01 Β· 2 obs
β—‹ 2026-07-19 00:40:08
● 2026-08-01 22:01:28
●A2606:4700:3037::ac43:8aaf2026-08-01 β†’ 2026-08-01 Β· 2 obs
β—‹ 2026-07-19 00:40:08
● 2026-08-01 22:01:28
β—‹A2a01:7e01::f03c:91ff:fefb:6dab2019-04-04 β†’ 2019-04-04 Β· 3 obs
● 2019-04-04 05:19:52
β—‹ 2026-02-16 14:45:10
β—‹ 2026-08-01 22:01:28

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
helli.shwanda.ns.cloudflare.com, brodie.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.58.240

NS records: wanda.ns.cloudflare.com, brodie.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for helli.sh (unsigned zone)

⏱️ Timing

Total: 299ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.138.175, 104.21.65.5
AAAA22606:4700:3037::ac43:8aaf, 2606:4700:3031::6815:4105
NS2brodie.ns.cloudflare.com, wanda.ns.cloudflare.com
MX1mail.helli.sh (pri: 0)
TXT1v=spf1 +a +mx +ip4:172.96.136.2 include:
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1brodie.ns.cloudflare.com dns.cloudflare.

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

helli.sh points to the four IP addresses 104.21.65.5, 172.67.138.175, 2606:4700:3031::6815:4105 and 2606:4700:3037::ac43:8aaf.

4wcourtmaintenance.co.uk, xx7.win, swayamsevasangh.com plus two other host names have IP numbers in common with helli.sh.

Name Servers

helli.sh uses two name servers for its delegation: brodie.ns.cloudflare.com and wanda.ns.cloudflare.com.

The name server configuration of helli.sh is shared with other domains, for instance voxsig.com, recursivex.com, kyklink.com and two others.

The name servers of helli.sh overlap at least partially with those of other domains β€” among them tracingprintables.com, hani-cosmetics.co.il, agenciavirtual.net and two more.

These name servers commonly appear alongside the name servers ashley.ns.cloudflare.com and marjory.ns.cloudflare.com.

Hosts with 6 IP addresses each:

Hostname brodie.ns.cloudflare.com directs to 108.162.195.237, 162.159.44.237 and 172.64.35.237 along with 3 other IP addresses.

Hostname wanda.ns.cloudflare.com directs to 108.162.192.240, 172.64.32.240 and 173.245.58.240 along with 3 other IP addresses.

Mail Servers

helli.sh uses one mail server β€” mail.helli.sh.

mail.helli.sh directs to just one IP number, 172.96.136.186.