🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`shellcode.gg`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:100e^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:d1c3^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.16.14^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.209.195^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`amir.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b3e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c13e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`amir.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:213e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`amir.ns.cloudflare.com`
		A	108.162.193.62^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
		A	172.64.33.62^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
		A	173.245.59.62^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
NS	`aryanna.ns.cloudflare.com`
		A	2606:4700:50::a29f:265f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aryanna.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c25f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aryanna.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:225f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aryanna.ns.cloudflare.com`
		A	108.162.194.95^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aryanna.ns.cloudflare.com`
		A	162.159.38.95^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aryanna.ns.cloudflare.com`
		A	172.64.34.95^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aryanna.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c06::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`bg-in-f27.1e100.net`
		A	172.253.122.27^{🇺🇸 Google172.253.122.0/24}
			PTR	`bh-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c14::1a^{🇨🇱 Google2800:3f0:4003::/48}
		A	192.178.234.26^{🇺🇸 Google192.178.0.0/15}
			PTR	`ncsclj-in-f26.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.26^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1a^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f26.1e100.net`
		A	192.178.223.27^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.26^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f26.1e100.net`
TXT	`google-site-verification=1O2EshhGMf902xLVWjnv5IxJ7fQc6YkWpJ4mxkcI-IM`
TXT	`google-site-verification=tl6aAMZUDvo5Xuyp0js8CC534u9Kfa7j1oBu5MFmfDw`
TXT	`v=spf1 include:spf.privateemail.com +a +mx +ip4:68.65.122.90 +ip4:68.65.122.9...`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.16.14, 172.67.209.195
		IPv6 hints	2606:4700:3031::6815:100e, 2606:4700:3035::ac43:d1c3
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=15, name=cloudflare-ech.com
SOA	`amir.ns.cloudflare.com`dns@cloudflare.com serial=2416855834

`gg`

	DNSSEC	🔒 Signed (DS record present)
	NS	`c.ci-servers.org` ⭐
	NS	`dns1.nominetdns.uk`
	NS	`dns2.nominetdns.uk`
	NS	`dns3.nominetdns.uk`
	NS	`dns4.nominetdns.uk`
	NS	`e.ci-servers.net`
	TXT	`Generation Time: 1791667266`
	SOA	`c.ci-servers.org`dnsmaster@channelisles.net 2026-10-24 #48

Same first word

Similar names

Previous names

shavon.gg

shaw.gg

shaw256.gg

shawn.gg

shayan.gg

shb.gg

shbet.gg

shdwdrive.gg

she.gg

shed.gg

sheds.gg

sheehan.gg

sheenaduquette.gg

sheepish.gg

sheesh.gg

sheet.gg

sheff.gg

sheldon.gg

shelf.gg

shelfie.gg

Next names

shelter.gg

sheltr.gg

shen.gg

shenanigans.gg

sheppards.gg

sheriff.gg

sherlock.gg

sherman.gg

shero.gg

sherpa.gg

sherpahub.gg

sherpal.gg

sherpalaxy.gg

sherpas.gg

sherry.gg

sheshounet.gg

sheth.gg

shey.gg

sheyn.gg

DNS History

20 records (11 active, 9 former)

●NSamir.ns.cloudflare.com2026-09-23 → 2026-10-10 · 2 obs

● 2026-09-23 23:59:12
● 2026-10-10 22:31:12

●NSaryanna.ns.cloudflare.com2026-09-23 → 2026-10-10 · 2 obs

● 2026-09-23 23:59:12
● 2026-10-10 22:31:12

●MXalt1.aspmx.l.google.com2026-10-10 → 2026-10-10 · 3 obs

○ 2026-09-30 03:25:32
● 2026-10-10 22:31:08
● 2026-10-10 22:31:12

●MXalt2.aspmx.l.google.com2026-10-10 → 2026-10-10 · 3 obs

○ 2026-09-30 03:25:32
● 2026-10-10 22:31:08
● 2026-10-10 22:31:12

●MXalt3.aspmx.l.google.com2026-10-10 → 2026-10-10 · 3 obs

○ 2026-09-30 03:25:32
● 2026-10-10 22:31:08
● 2026-10-10 22:31:12

●MXalt4.aspmx.l.google.com2026-10-10 → 2026-10-10 · 3 obs

○ 2026-09-30 03:25:32
● 2026-10-10 22:31:08
● 2026-10-10 22:31:12

●MXaspmx.l.google.com2026-10-10 → 2026-10-10 · 3 obs

○ 2026-09-30 03:25:32
● 2026-10-10 22:31:08
● 2026-10-10 22:31:12

○MXmx1-hosting.jellyfish.systems2026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-10-10 22:31:08
○ 2026-10-10 22:31:12

○MXmx1.privateemail.com2026-09-30 → 2026-09-30 · 4 obs

○ 2026-09-23 23:59:12
● 2026-09-30 03:25:32
○ 2026-10-10 22:31:08
○ 2026-10-10 22:31:12

○MXmx2-hosting.jellyfish.systems2026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-10-10 22:31:08
○ 2026-10-10 22:31:12

○MXmx2.privateemail.com2026-09-30 → 2026-09-30 · 4 obs

○ 2026-09-23 23:59:12
● 2026-09-30 03:25:32
○ 2026-10-10 22:31:08
○ 2026-10-10 22:31:12

○MXmx3-hosting.jellyfish.systems2026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-10-10 22:31:08
○ 2026-10-10 22:31:12

●A104.21.16.142026-09-24 → 2026-10-10 · 3 obs

○ 2026-09-23 23:59:12
● 2026-09-24 04:37:54
● 2026-10-10 22:31:12

●A172.67.209.1952026-09-24 → 2026-10-10 · 3 obs

○ 2026-09-23 23:59:12
● 2026-09-24 04:37:54
● 2026-10-10 22:31:12

○A188.114.96.02026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-09-24 04:37:54
○ 2026-10-10 22:31:12

○A188.114.97.02026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-09-24 04:37:54
○ 2026-10-10 22:31:12

●A2606:4700:3031::6815:100e2026-09-24 → 2026-10-10 · 3 obs

○ 2026-09-23 23:59:12
● 2026-09-24 04:37:54
● 2026-10-10 22:31:12

●A2606:4700:3035::ac43:d1c32026-09-24 → 2026-10-10 · 3 obs

○ 2026-09-23 23:59:12
● 2026-09-24 04:37:54
● 2026-10-10 22:31:12

○A2a06:98c1:3120::2026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-09-24 04:37:54
○ 2026-10-10 22:31:12

○A2a06:98c1:3121::2026-09-23 → 2026-09-23 · 3 obs

● 2026-09-23 23:59:12
○ 2026-09-24 04:37:54
○ 2026-10-10 22:31:12

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
gg	c.ci-servers.org, e.ci-servers.net, dns1.nominetdns.uk, dns2.nominetdns.uk...	12 records
shellcode.gg	amir.ns.cloudflare.com, aryanna.ns.cloudflare.com	-

✅ Authoritative Response

Server:162.159.38.95

NS records: amir.ns.cloudflare.com, aryanna.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for shellcode.gg (unsigned zone)

⏱️ Timing

Total: 1085ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.16.14, 172.67.209.195`
AAAA	2	`2606:4700:3031::6815:100e, 2606:4700:3035::ac43:d1c3`
NS	2	`amir.ns.cloudflare.com, aryanna.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	3	`google-site-verification=1O2EshhGMf902xL, google-site-verification=tl6aAMZUDvo5Xuy...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`amir.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (c.ci-servers.org, c.ci-servers.org, e.ci-servers.net...)

Analysis

IP Addresses

shellcode.gg resolves to four IP addresses: 104.21.16.14, 172.67.209.195, 2606:4700:3031::6815:100e and 2606:4700:3035::ac43:d1c3.

Two other host names, along with tracdiamoitruonghoanganh.io.vn, culinaria.ro and septictankpeachtreecityhq.com, also share IP numbers with shellcode.gg.

Name Servers

shellcode.gg uses two name servers for its delegation: amir.ns.cloudflare.com and aryanna.ns.cloudflare.com.

shellcode.gg shares its NS records with other domains, for example festivalbase.co.uk, vikram-cb8.workers.dev, meilleurs-formations-conciergerie.com and two others.

shellcode.gg has at least partial name server overlap with other domains, such as xn--klbesm-qua1m.dk, bestzonderlicentie-top-120505.pages.dev, joe-813.workers.dev and two others.

It is common to find these name servers paired with the name servers anna.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname amir.ns.cloudflare.com directs to 108.162.193.62, 172.64.33.62 and 173.245.59.62 along with 3 other IP addresses.

Hostname aryanna.ns.cloudflare.com directs to 108.162.194.95, 162.159.38.95 and 172.64.34.95 along with 3 other IP addresses.

Mail Servers

shellcode.gg is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between shellcode.gg and other domains, including bohramarketing.com, tsachila.edu.ec, travelndream.com and two others.

alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com are mail servers that frequently appear together with these mail servers.

Host names that have two IP addresses:

aspmx.l.google.com directs traffic to 172.253.122.27 and 2607:f8b0:4004:c06::1b.

alt1.aspmx.l.google.com directs traffic to 192.178.234.26 and 2800:3f0:4003:c14::1a.

alt2.aspmx.l.google.com directs traffic to 172.253.116.26 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com directs traffic to 192.178.223.27 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com directs traffic to 172.253.157.26 and 2a00:1450:400c:c23::1b.