`shellcode.run`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::ac43:d036^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:2d1d^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.45.29^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.208.54^{🇺🇸 Cloudflare172.67.208.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`anirban.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b40^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anirban.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c140^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`anirban.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2140^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`anirban.ns.cloudflare.com`
		A	108.162.193.64^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anirban.ns.cloudflare.com`
		A	172.64.33.64^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anirban.ns.cloudflare.com`
		A	173.245.59.64^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`anirban.ns.cloudflare.com`
NS	`kami.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ab1^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kami.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0b1^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`kami.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20b1^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`kami.ns.cloudflare.com`
		A	108.162.192.177^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kami.ns.cloudflare.com`
		A	172.64.32.177^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kami.ns.cloudflare.com`
		A	173.245.58.177^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`kami.ns.cloudflare.com`
MX	`route3.mx.cloudflare.net` ⭐
		A	2606:4700:f5::11^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::12^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	2606:4700:f5::13^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.23^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.24^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
		A	162.159.205.25^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route3.mx.cloudflare.net`
MX	`route1.mx.cloudflare.net`⁽¹³⁾
		A	2606:4700:f5::b^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::c^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	2606:4700:f5::d^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.11^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.12^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
		A	162.159.205.13^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route1.mx.cloudflare.net`
MX	`route2.mx.cloudflare.net`⁽⁷⁰⁾
		A	2606:4700:f5::e^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::f^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	2606:4700:f5::10^{🇺🇸 Cloudflare2606:4700:f5::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.17^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.18^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
		A	162.159.205.19^{Cloudflare162.159.205.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`route2.mx.cloudflare.net`
TXT	`v=spf1 include:_spf.mx.cloudflare.net ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.45.29, 172.67.208.54
		IPv6 hints	2606:4700:3034::ac43:d036, 2606:4700:3035::6815:2d1d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=114, name=cloudflare-ech.com
SOA	`anirban.ns.cloudflare.com`dns@cloudflare.com serial=2407284878

`run`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.run` ⭐
	NS	`v0n1.nic.run`
	NS	`v0n2.nic.run`
	NS	`v0n3.nic.run`
	NS	`v2n0.nic.run`
	NS	`v2n1.nic.run`
	SOA	`v0n0.nic.run`hostmaster@donuts.email serial=1783876394

Same first word

shellcode.sh

shellcode.com

shellcode.it

shellcode.eu

shellcode.net

shellcode.pl

shellcode.ch

shellcode.run

shellcode.info

shellcode.ru

shellcode.se

shellcode.eu.org

shellcode.fr

shellcode.de

shellcode.org

shellcode.io

shellcode.in

shellcode.com.ar

shellcode.com.br

shellcode.ws

shellcode.supply

shellcode.me

shellcode.cn

Similar names

doleschel.eu

hellscode.com

codeshell.kr

decoshell.com

codeshell.org

schloedel.com

codeshell.com

DNS History

26 records (9 active, 17 former)

●NSanirban.ns.cloudflare.com2026-03-12 → 2026-07-12 · 3 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-07-12 17:43:24

○NSdns1.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

○NSdns2.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

○NSdns3.registrar-servers.com2016-12-10 → 2016-12-10 · 3 obs

● 2016-12-10 22:34:50
○ 2019-12-27 12:05:40
○ 2026-07-12 17:43:24

○NSdns4.registrar-servers.com2016-12-10 → 2016-12-10 · 3 obs

● 2016-12-10 22:34:50
○ 2019-12-27 12:05:40
○ 2026-07-12 17:43:24

○NSdns5.registrar-servers.com2016-12-10 → 2016-12-10 · 3 obs

● 2016-12-10 22:34:50
○ 2019-12-27 12:05:40
○ 2026-07-12 17:43:24

●NSkami.ns.cloudflare.com2026-03-12 → 2026-07-12 · 3 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-07-12 17:43:24

○MXeforward1.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

○MXeforward2.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

○MXeforward3.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

○MXeforward4.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

○MXeforward5.registrar-servers.com2016-12-10 → 2019-12-27 · 4 obs

● 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

●MXroute1.mx.cloudflare.net2026-03-12 → 2026-07-12 · 3 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-07-12 17:43:24

●MXroute2.mx.cloudflare.net2026-03-12 → 2026-07-12 · 3 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-07-12 17:43:24

●MXroute3.mx.cloudflare.net2026-03-12 → 2026-07-12 · 3 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-07-12 17:43:24

●A104.21.45.292026-03-12 → 2026-07-12 · 9 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-04-26 07:59:36
○ 2026-05-19 20:51:10
● 2026-05-30 17:41:50
● 2026-06-10 03:00:22
○ 2026-06-18 15:53:10
● 2026-07-12 17:43:22
● 2026-07-12 17:43:24

○A162.255.119.2492016-12-10 → 2016-12-10 · 3 obs

● 2016-12-10 22:34:50
○ 2019-12-27 12:05:40
○ 2026-07-12 17:43:24

●A172.67.208.542026-03-12 → 2026-07-12 · 9 obs

○A188.114.96.02026-05-19 → 2026-06-18 · 8 obs

○ 2026-03-12 02:16:38
○ 2026-04-26 07:59:36
● 2026-05-19 20:51:10
○ 2026-05-30 17:41:50
○ 2026-06-10 03:00:22
● 2026-06-18 15:53:10
○ 2026-07-12 17:43:22
○ 2026-07-12 17:43:24

○A188.114.97.02026-05-19 → 2026-06-18 · 8 obs

○ 2026-03-12 02:16:38
○ 2026-04-26 07:59:36
● 2026-05-19 20:51:10
○ 2026-05-30 17:41:50
○ 2026-06-10 03:00:22
● 2026-06-18 15:53:10
○ 2026-07-12 17:43:22
○ 2026-07-12 17:43:24

●A2606:4700:3034::ac43:d0362026-07-12 → 2026-07-12 · 3 obs

○ 2026-06-18 15:53:10
● 2026-07-12 17:43:22
● 2026-07-12 17:43:24

●A2606:4700:3035::6815:2d1d2026-03-12 → 2026-07-12 · 9 obs

○A2606:4700:3036::ac43:d0362026-03-12 → 2026-06-10 · 8 obs

○ 2019-12-27 12:05:40
● 2026-03-12 02:16:38
● 2026-04-26 07:59:36
○ 2026-05-19 20:51:10
● 2026-05-30 17:41:50
● 2026-06-10 03:00:22
○ 2026-06-18 15:53:10
○ 2026-07-12 17:43:24

○A2a06:98c1:3120::2026-05-19 → 2026-06-18 · 8 obs

○ 2026-03-12 02:16:38
○ 2026-04-26 07:59:36
● 2026-05-19 20:51:10
○ 2026-05-30 17:41:50
○ 2026-06-10 03:00:22
● 2026-06-18 15:53:10
○ 2026-07-12 17:43:22
○ 2026-07-12 17:43:24

○A2a06:98c1:3121::2026-05-19 → 2026-06-18 · 8 obs

○ 2026-03-12 02:16:38
○ 2026-04-26 07:59:36
● 2026-05-19 20:51:10
○ 2026-05-30 17:41:50
○ 2026-06-10 03:00:22
● 2026-06-18 15:53:10
○ 2026-07-12 17:43:22
○ 2026-07-12 17:43:24

○A74.207.236.2352019-12-27 → 2019-12-27 · 4 obs

○ 2016-12-10 22:34:50
● 2019-12-27 12:05:40
○ 2026-03-12 02:16:38
○ 2026-07-12 17:43:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
run	v0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run...	12 records
shellcode.run	kami.ns.cloudflare.com, anirban.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.58.177

NS records: kami.ns.cloudflare.com, anirban.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for shellcode.run (unsigned zone)

⏱️ Timing

Total: 565ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.208.54, 104.21.45.29`
AAAA	2	`2606:4700:3034::ac43:d036, 2606:4700:3035::6815:2d1d`
NS	2	`anirban.ns.cloudflare.com, kami.ns.cloudflare.com`
MX	3	`route1.mx.cloudflare.net (pri: 13), route3.mx.cloudflare.net (pri: 6)...`
TXT	1	`v=spf1 include:_spf.mx.cloudflare.net ~a`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`anirban.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.run, v0n1.nic.run, v0n2.nic.run...)

Analysis

IP Addresses

shellcode.run directs to four IP numbers, which are 104.21.45.29, 172.67.208.54, 2606:4700:3034::ac43:d036 and 2606:4700:3035::6815:2d1d.

Additional host names — skycollection.africa, weshep.com, hzszhb.com and two others — share IP numbers with shellcode.run.

Name Servers

The NS records for shellcode.run delegate to anirban.ns.cloudflare.com and kami.ns.cloudflare.com.

shellcode.run shares its name server setup with other domains, including quebecpizza.org, somoslincecomunicacao.com.br, tpg.sg and two others.

At least some of shellcode.run's name servers are shared with other domains, for example jewelrynewsasia.net, lenzburg.org, adcemcorp.com and two more.

These name servers tend to be used in conjunction with the name servers evan.ns.cloudflare.com.

Host names with 6 IP numbers:

anirban.ns.cloudflare.com maps to 108.162.193.64, 172.64.33.64, 173.245.59.64 and 3 additional IP addresses.

kami.ns.cloudflare.com maps to 108.162.192.177, 172.64.32.177, 173.245.58.177 and 3 additional IP addresses.

Mail Servers

The MX records for shellcode.run list three mail servers: route1.mx.cloudflare.net, route2.mx.cloudflare.net and route3.mx.cloudflare.net.

shellcode.run shares mail servers — at least in part — with other domains, including pdfmagaz.club, mobilespider.com, bickley.co.nz and two others.

Host names with 6 IP numbers:

route1.mx.cloudflare.net maps to 162.159.205.11, 162.159.205.12, 162.159.205.13 and 3 additional IP addresses.

route2.mx.cloudflare.net maps to 162.159.205.17, 162.159.205.18, 162.159.205.19 and 3 additional IP addresses.

route3.mx.cloudflare.net maps to 162.159.205.23, 162.159.205.24, 162.159.205.25 and 3 additional IP addresses.

shellcode.run - robtex.com

shellcode.run

run

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`shellcode.run`

`run`