CF1760404992965-tsm20251012143351

MXLIST.NET - hacker.sh

Search for IP or hostnames:

hacker.sh checked at 2025-10-14T01:23:12.912Z 1261ms 127/127/127 100% R:13

hacker.sh

MXghost-relay.mxroute.com
A49.12.120.198🇩🇪 Hetzner
PTRsunfire.mxrouting.net
MXghost.mxroute.com
A49.12.120.198🇩🇪 Hetzner
PTRsunfire.mxrouting.net
NSfrank.ns.cloudflare.com
A2606:4700:58::adf5:3ba6 🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A2803:f800:50::6ca2:c1a6 🇨🇷 Cloudflare
PTRfrank.ns.cloudflare.com
A2a06:98c1:50::ac40:21a6 🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A108.162.193.166🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A172.64.33.166🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
A173.245.59.166🇺🇸 Cloudflare
PTRfrank.ns.cloudflare.com
NSiris.ns.cloudflare.com
A2606:4700:50::adf5:3a76 🇺🇸 Cloudflare
PTRiris.ns.cloudflare.com
A2803:f800:50::6ca2:c076 🇨🇷 Cloudflare
PTRiris.ns.cloudflare.com
A2a06:98c1:50::ac40:2076 🇺🇸 Cloudflare
PTRiris.ns.cloudflare.com
A108.162.192.118🇺🇸 Cloudflare
PTRiris.ns.cloudflare.com
A172.64.32.118🇺🇸 Cloudflare
PTRiris.ns.cloudflare.com
A173.245.58.118🇺🇸 Cloudflare
PTRiris.ns.cloudflare.com
A2606:4700:3030::6815:378a 🇺🇸 Cloudflare
A2606:4700:3030::ac43:94d9 🇺🇸 Cloudflare
A104.21.55.138 Cloudflare
A172.67.148.217🇺🇸 Cloudflare

sh

NSa0.nic.sh
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh

Starts with same word

Starts similarily

AI analysis

hacker.sh resolves to four IP numbers: 2606:4700:3030::6815:378a, 2606:4700:3030::ac43:94d9, 104.21.55.138 and 172.67.148.217.

other host names for instance zxauto.com, drvo-tex.rs, kosmetologrus.online, www.bogom-dannaya.ru and zywetrupy.pl share IP numbers with hacker.sh.

hacker.sh is delegated to two name servers: frank.ns.cloudflare.com and iris.ns.cloudflare.com.

hacker.sh shares the same name server setup as other domains, for example purehypnosis.com, rmaziaty.com, hdwallpapers10.com, aerisnavigo.com and alamphoto.com.

hacker.sh at least partially shares name servers with other domains, for instance biguetti.com.br, audatex.es, pertborsasi.com, 4bikes.pl and websku.com.

These name servers are often used with lola.ns.cloudflare.com and zita.ns.cloudflare.com.

Host names with six IP numbers:

frank.ns.cloudflare.com points to: 2606:4700:58::adf5:3ba6, 2803:f800:50::6ca2:c1a6, 2a06:98c1:50::ac40:21a6, 108.162.193.166, 172.64.33.166 and 173.245.59.166; iris.ns.cloudflare.com points to: 2606:4700:50::adf5:3a76, 2803:f800:50::6ca2:c076, 2a06:98c1:50::ac40:2076, 108.162.192.118, 172.64.32.118 and 173.245.58.118.

hacker.sh is handled by two mail servers: ghost-relay.mxroute.com and ghost.mxroute.com.

hacker.sh shares the same mail server setup as other domains, for instance barup.co.nz, vakk.fi, e-tinos.com, fairstartglobal.com and europesefiscalestudies.nl.

Host names with a single IP number:

ghost-relay.mxroute.com points to 49.12.120.198 and ghost.mxroute.com points to 49.12.120.198.

Host names that point to 49.12.120.198: ghost-relay.mxroute.com and ghost.mxroute.com.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

GWiEKeC CF johedugfp 2025-10-14