shellbot.sh - robtex.com

shellbot.sh

DNSSECโš ๏ธ Not signed
A2606:4700:3031::6815:4bfb๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A2606:4700:3036::ac43:b88c๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A104.21.75.251Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A172.67.184.140๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
NSmaisie.ns.cloudflare.com โญ
A2606:4700:50::a29f:2659๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmaisie.ns.cloudflare.com
A2803:f800:50::6ca2:c259๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmaisie.ns.cloudflare.com
A2a06:98c1:50::ac40:2259๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRmaisie.ns.cloudflare.com
A108.162.194.89๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmaisie.ns.cloudflare.com
A162.159.38.89Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmaisie.ns.cloudflare.com
A172.64.34.89๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmaisie.ns.cloudflare.com
NSsean.ns.cloudflare.com
A2606:4700:58::adf5:3be7๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsean.ns.cloudflare.com
A2803:f800:50::6ca2:c1e7๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsean.ns.cloudflare.com
A2a06:98c1:50::ac40:21e7๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRsean.ns.cloudflare.com
A108.162.193.231๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsean.ns.cloudflare.com
A172.64.33.231๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsean.ns.cloudflare.com
A173.245.59.231๐Ÿ‡บ๐Ÿ‡ธ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsean.ns.cloudflare.com
MXaspmx.l.google.com โญ
A2607:f8b0:4004:c21::1a๐Ÿ‡บ๐Ÿ‡ธ Google2607:f8b0:4004::/48
PTRpe-in-f26.1e100.net
A172.253.115.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.115.0/24
PTRbg-in-f26.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1a๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A108.177.123.26๐Ÿ‡บ๐Ÿ‡ธ Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1a๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f26.1e100.net
A172.253.116.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b๐Ÿ‡ฌ๐Ÿ‡ง Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.27๐Ÿ‡บ๐Ÿ‡ธ Google192.178.223.0/24
PTRyulhrs-in-f27.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1b๐Ÿ‡ง๐Ÿ‡ช Google2a00:1450:400c::/48
PTRyubrupd-in-f27.1e100.net
A172.253.157.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.0.0/16
PTRyubrupd-in-f26.1e100.net
TXTgoogle-site-verification=hn7QlxQcPBvTNNMmLmmDyYo7bYoVHfvmJlVAU90WVoI
TXTgoogle-site-verification=nF6VsWa8BB1uD3z_4MShniitkO7NpyjNMtDMHWMRczo
TXTv=spf1 include:_spf.google.com ~all
HTTPSHTTP/3, HTTP/2 โœ“ hints match
IPv4 hints104.21.75.251, 172.67.184.140
IPv6 hints2606:4700:3031::6815:4bfb, 2606:4700:3036::ac43:b88c
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=5, name=cloudflare-ech.com
SOAmaisie.ns.cloudflare.comdns@cloudflare.com serial=2410318721

sh

DNSSEC๐Ÿ”’ Signed (DS record present)
NSa0.nic.sh โญ
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1785226361
โš ๏ธ On DNS blocklist: tif

Same first word

Similar names

DNS History

15 records (11 active, 4 former)

NSmaisie.ns.cloudflare.comsean.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA104.21.75.251172.67.184.1402606:4700:3031::6815:4bfb2606:4700:3036::ac43:b88c188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
โ—NSmaisie.ns.cloudflare.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—NSsean.ns.cloudflare.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—MXalt1.aspmx.l.google.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—MXalt2.aspmx.l.google.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—MXalt3.aspmx.l.google.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—MXalt4.aspmx.l.google.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—MXaspmx.l.google.com2026-07-27 โ†’ 2026-07-28 ยท 2 obs
โ— 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—A104.21.75.2512026-07-28 โ†’ 2026-07-28 ยท 2 obs
โ—‹ 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—A172.67.184.1402026-07-28 โ†’ 2026-07-28 ยท 2 obs
โ—‹ 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—‹A188.114.96.02026-07-27 โ†’ 2026-07-27 ยท 2 obs
โ— 2026-07-27 18:13:54
โ—‹ 2026-07-28 08:44:04
โ—‹A188.114.97.02026-07-27 โ†’ 2026-07-27 ยท 2 obs
โ— 2026-07-27 18:13:54
โ—‹ 2026-07-28 08:44:04
โ—A2606:4700:3031::6815:4bfb2026-07-28 โ†’ 2026-07-28 ยท 2 obs
โ—‹ 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—A2606:4700:3036::ac43:b88c2026-07-28 โ†’ 2026-07-28 ยท 2 obs
โ—‹ 2026-07-27 18:13:54
โ— 2026-07-28 08:44:04
โ—‹A2a06:98c1:3120::2026-07-27 โ†’ 2026-07-27 ยท 2 obs
โ— 2026-07-27 18:13:54
โ—‹ 2026-07-28 08:44:04
โ—‹A2a06:98c1:3121::2026-07-27 โ†’ 2026-07-27 ยท 2 obs
โ— 2026-07-27 18:13:54
โ—‹ 2026-07-28 08:44:04

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
shellbot.shsean.ns.cloudflare.com, maisie.ns.cloudflare.com-

โœ… Authoritative Response

Server:108.162.193.231

NS records: sean.ns.cloudflare.com, maisie.ns.cloudflare.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for shellbot.sh (unsigned zone)

โฑ๏ธ Timing

Total: 576ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A2104.21.75.251, 172.67.184.140
AAAA22606:4700:3031::6815:4bfb, 2606:4700:3036::ac43:b88c
NS2maisie.ns.cloudflare.com, sean.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT3google-site-verification=hn7QlxQcPBvTNNM, google-site-verification=nF6VsWa8BB1uD3z...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1maisie.ns.cloudflare.com dns.cloudflare.

๐Ÿ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

shellbot.sh directs to four IP numbers, which are 104.21.75.251, 172.67.184.140, 2606:4700:3031::6815:4bfb and 2606:4700:3036::ac43:b88c.

Among the host names that share IP numbers with shellbot.sh are tiktokvids.top, friedajoe.com, tuscanyreal-estate.com and two others.

Name Servers

shellbot.sh has two authoritative name servers โ€” maisie.ns.cloudflare.com and sean.ns.cloudflare.com.

shellbot.sh has the same name server delegation as a number of other domains, such as maltasecurity.org, amberlydentistry.com.au, aegio.ro and two more.

There is at least partial name server overlap between shellbot.sh and other domains โ€” caltrapnexus.digital, hengzixing.com, netecs.com and two more among them.

These name servers frequently co-occur with the name servers luciana.ns.cloudflare.com and beau.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

maisie.ns.cloudflare.com points to 108.162.194.89, 162.159.38.89, 172.64.34.89 and 3 other IP addresses.

sean.ns.cloudflare.com points to 108.162.193.231, 172.64.33.231, 173.245.59.231 and 3 other IP addresses.

Mail Servers

Five mail servers handle shellbot.sh: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

shellbot.sh shares at least some of its mail servers with other domains โ€” for example havenbaptist.org, suzyharrisdesign.com, limexsaxophone.com and two more.

It is common for these mail servers to co-occur with alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com as mail servers.

Hosts with two IP numbers each:

aspmx.l.google.com resolves to 172.253.115.26 and 2607:f8b0:4004:c21::1a.

alt1.aspmx.l.google.com resolves to 108.177.123.26 and 2800:3f0:4003:c0f::1a.

alt2.aspmx.l.google.com resolves to 172.253.116.26 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com resolves to 192.178.223.27 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com resolves to 172.253.157.26 and 2a00:1450:400c:c23::1b.