shellbot.sh - dns.ninja

`shellbot.sh`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:4bfb^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b88c^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.75.251^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.140^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`maisie.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:2659^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maisie.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c259^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`maisie.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2259^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`maisie.ns.cloudflare.com`
		A	108.162.194.89^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maisie.ns.cloudflare.com`
		A	162.159.38.89^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maisie.ns.cloudflare.com`
		A	172.64.34.89^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`maisie.ns.cloudflare.com`
NS	`sean.ns.cloudflare.com`
		A	2606:4700:58::adf5:3be7^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sean.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1e7^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sean.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21e7^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sean.ns.cloudflare.com`
		A	108.162.193.231^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sean.ns.cloudflare.com`
		A	172.64.33.231^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sean.ns.cloudflare.com`
		A	173.245.59.231^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sean.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c23::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`yuiadrs-in-f27.1e100.net`
		A	173.194.45.27^{🇺🇸 Google173.194.0.0/16}
			PTR	`yuiadum-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.27^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c01::1a^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`di-in-f26.1e100.net`
		A	74.125.193.26^{🇺🇸 Google74.125.193.0/24}
			PTR	`di-in-f26.1e100.net`
			PTR	`ig-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1a^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f26.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.27^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f27.1e100.net`
TXT	`google-site-verification=hn7QlxQcPBvTNNMmLmmDyYo7bYoVHfvmJlVAU90WVoI`
TXT	`google-site-verification=nF6VsWa8BB1uD3z_4MShniitkO7NpyjNMtDMHWMRczo`
TXT	`v=spf1 include:_spf.google.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.75.251, 172.67.184.140
		IPv6 hints	2606:4700:3031::6815:4bfb, 2606:4700:3036::ac43:b88c
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=85, name=cloudflare-ech.com
SOA	`maisie.ns.cloudflare.com`dns@cloudflare.com serial=2410318721

`sh`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.nic.sh` ⭐
	NS	`a2.nic.sh`
	NS	`b0.nic.sh`
	NS	`c0.nic.sh`
	SOA	`a0.nic.sh`hostmaster@donuts.email serial=1785462866

Same first word

shellbot.sh

shellbot.net

Similar names

hostbell.net

bellhost.com.au

bellsoth.net

selltohb.com

bellhost.ru

lbhostel.com

bellhost.ca

blhostel.com

bellhost.com

thebolls.com

hostbell.com

botshell.com

bellhost.net

bellsoth.com

bellhost.info

hostelbl.com

DNS History

15 records (11 active, 4 former)

●NSmaisie.ns.cloudflare.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●NSsean.ns.cloudflare.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●MXalt1.aspmx.l.google.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●MXalt2.aspmx.l.google.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●MXalt3.aspmx.l.google.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●MXalt4.aspmx.l.google.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●MXaspmx.l.google.com2026-07-27 → 2026-07-31 · 2 obs

● 2026-07-27 18:13:54
● 2026-07-31 02:36:52

●A104.21.75.2512026-07-28 → 2026-07-31 · 3 obs

○ 2026-07-27 18:13:54
● 2026-07-28 08:44:04
● 2026-07-31 02:36:52

●A172.67.184.1402026-07-28 → 2026-07-31 · 3 obs

○ 2026-07-27 18:13:54
● 2026-07-28 08:44:04
● 2026-07-31 02:36:52

○A188.114.96.02026-07-27 → 2026-07-27 · 3 obs

● 2026-07-27 18:13:54
○ 2026-07-28 08:44:04
○ 2026-07-31 02:36:52

○A188.114.97.02026-07-27 → 2026-07-27 · 3 obs

● 2026-07-27 18:13:54
○ 2026-07-28 08:44:04
○ 2026-07-31 02:36:52

●A2606:4700:3031::6815:4bfb2026-07-28 → 2026-07-31 · 3 obs

○ 2026-07-27 18:13:54
● 2026-07-28 08:44:04
● 2026-07-31 02:36:52

●A2606:4700:3036::ac43:b88c2026-07-28 → 2026-07-31 · 3 obs

○ 2026-07-27 18:13:54
● 2026-07-28 08:44:04
● 2026-07-31 02:36:52

○A2a06:98c1:3120::2026-07-27 → 2026-07-27 · 3 obs

● 2026-07-27 18:13:54
○ 2026-07-28 08:44:04
○ 2026-07-31 02:36:52

○A2a06:98c1:3121::2026-07-27 → 2026-07-27 · 3 obs

● 2026-07-27 18:13:54
○ 2026-07-28 08:44:04
○ 2026-07-31 02:36:52

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
sh	c0.nic.sh, b0.nic.sh, a0.nic.sh, a2.nic.sh	-
shellbot.sh	sean.ns.cloudflare.com, maisie.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.33.231

NS records: sean.ns.cloudflare.com, maisie.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for shellbot.sh (unsigned zone)

⏱️ Timing

Total: 385ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.184.140, 104.21.75.251`
AAAA	2	`2606:4700:3031::6815:4bfb, 2606:4700:3036::ac43:b88c`
NS	2	`maisie.ns.cloudflare.com, sean.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	3	`google-site-verification=hn7QlxQcPBvTNNM, google-site-verification=nF6VsWa8BB1uD3z...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`maisie.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

shellbot.sh points to the four IP addresses 104.21.75.251, 172.67.184.140, 2606:4700:3031::6815:4bfb and 2606:4700:3036::ac43:b88c.

Additional host names — tiktokvids.top, friedajoe.com, tuscanyreal-estate.com and two others — share IP numbers with shellbot.sh.

Name Servers

Two name servers handle the delegation for shellbot.sh: maisie.ns.cloudflare.com and sean.ns.cloudflare.com.

shellbot.sh shares its name server setup with other domains, including maltasecurity.org, amberlydentistry.com.au, aurevantix.com and two others.

The name servers of shellbot.sh overlap at least partially with those of other domains — among them caltrapnexus.digital, hengzixing.com, netecs.com and two more.

These name servers commonly appear alongside the name servers luciana.ns.cloudflare.com and beau.ns.cloudflare.com.

Host names with 6 IP numbers:

maisie.ns.cloudflare.com resolves to 108.162.194.89, 162.159.38.89 and 172.64.34.89 among others, with 3 other IP addresses in total.

sean.ns.cloudflare.com resolves to 108.162.193.231, 172.64.33.231 and 173.245.59.231 among others, with 3 other IP addresses in total.

Mail Servers

shellbot.sh has five mail servers, which are aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

shellbot.sh shares mail servers — at least in part — with other domains, including havenbaptist.org, suzyharrisdesign.com, limexsaxophone.com and two others.

These mail servers are frequently paired with the mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com.

Host names with two IP numbers:

aspmx.l.google.com resolves to two addresses: 173.194.45.27 and 2607:f8b0:4004:c23::1b.

alt1.aspmx.l.google.com resolves to two addresses: 108.177.123.27 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com resolves to two addresses: 74.125.193.26 and 2a00:1450:400b:c01::1a.

alt3.aspmx.l.google.com resolves to two addresses: 192.178.223.26 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com resolves to two addresses: 172.253.157.27 and 2a00:1450:400c:c23::1b.