questcode.sh - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

questcode.sh

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:840cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3032::6815:477πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.4.119Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.132.12πŸ‡ΊπŸ‡Έ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSkellen.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2ca0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkellen.ns.cloudflare.com
A2803:f800:50::6ca2:c3a0πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkellen.ns.cloudflare.com
A2a06:98c1:50::ac40:23a0πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRkellen.ns.cloudflare.com
A108.162.195.160πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkellen.ns.cloudflare.com
A162.159.44.160Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkellen.ns.cloudflare.com
A172.64.35.160πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkellen.ns.cloudflare.com
NSzelda.ns.cloudflare.com
A2606:4700:50::adf5:3af2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
A2803:f800:50::6ca2:c0f2πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRzelda.ns.cloudflare.com
A2a06:98c1:50::ac40:20f2πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRzelda.ns.cloudflare.com
A108.162.192.242πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
A172.64.32.242πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
A173.245.58.242πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzelda.ns.cloudflare.com
MXmail.bytestring.net ⭐
A80.211.207.49πŸ‡¨πŸ‡Ώ INTERNET-CZ80.211.192.0/19 INTERNET CZ,a.s.
PTRmail.bytestring.net
TXTgoogle-site-verification=Li0Vgvv00oE0mtuPDwnSMvynwcICD4MukDTUVITuHFw
TXTv=spf1 mx -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.4.119, 172.67.132.12
IPv6 hints2606:4700:3030::ac43:840c, 2606:4700:3032::6815:477
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=121, name=cloudflare-ech.com
SOAkellen.ns.cloudflare.comdns@cloudflare.com serial=2415354232

sh

DNSSECπŸ”’ Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1790221049

Same first word

Similar names

Previous names

Next names

DNS History

7 records (7 active, 0 former)

NSkellen.ns.cloudflare.comzelda.ns.cloudflare.comMXmail.bytestring.netA104.21.4.119172.67.132.122606:4700:3030::ac43:840c2606:4700:3032::6815:477
●NSkellen.ns.cloudflare.com2026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16
●NSzelda.ns.cloudflare.com2026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16
●MXmail.bytestring.net2026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16
●A104.21.4.1192026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16
●A172.67.132.122026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16
●A2606:4700:3030::ac43:840c2026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16
●A2606:4700:3032::6815:4772026-09-06 β†’ 2026-09-24 Β· 2 obs
● 2026-09-06 02:10:00
● 2026-09-24 04:06:16

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
questcode.shkellen.ns.cloudflare.com, zelda.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.160

NS records: kellen.ns.cloudflare.com, zelda.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for questcode.sh (unsigned zone)

⏱️ Timing

Total: 1007ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.4.119, 172.67.132.12
AAAA22606:4700:3030::ac43:840c, 2606:4700:3032::6815:477
NS2kellen.ns.cloudflare.com, zelda.ns.cloudflare.com
MX1mail.bytestring.net (pri: 10)
TXT2google-site-verification=Li0Vgvv00oE0mtu, v=spf1 mx -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1kellen.ns.cloudflare.com dns.cloudflare.

πŸ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

questcode.sh directs to four IP numbers, which are 104.21.4.119, 172.67.132.12, 2606:4700:3030::ac43:840c and 2606:4700:3032::6815:477.

Among the host names that share IP numbers with questcode.sh are zerorezwatford.co.uk, wellnessadvicehabits.info, dungeons-and-decieit.cc and two others.

Name Servers

DNS delegation for questcode.sh points to two name servers: kellen.ns.cloudflare.com and zelda.ns.cloudflare.com.

questcode.sh has the same name server delegation as a number of other domains, such as 99990001.com, 99996546.com, 99996489.com and two more.

At least some of questcode.sh's name servers are shared with other domains, for example 3das.workers.dev, enzoclothingstoreonline.shop, dolchword.net and two more.

It is common for these name servers to be used in conjunction with the name servers poppy.ns.cloudflare.com, nia.ns.cloudflare.com and oaklyn.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

kellen.ns.cloudflare.com has IP addresses 108.162.195.160, 162.159.44.160 and 172.64.35.160, plus 3 other.

zelda.ns.cloudflare.com has IP addresses 108.162.192.242, 172.64.32.242 and 173.245.58.242, plus 3 other.

Mail Servers

questcode.sh routes its mail through a single mail server, mail.bytestring.net.

questcode.sh has the same MX record configuration as other domains, including bytestring.net, blobstack.net and realmdive.net.

mail.bytestring.net has exactly one IP number: 80.211.207.49.