http.sh - dns.ninja

http.sh

CNAMEpark.io
DNSSEC⚠️ Not signed
A18.235.188.127🇺🇸 Amazon18.232.0.0/14 EC2 IAD prefix
PTRec2-18-235-188-127.compute-1.amazonaws.com
A98.85.33.81🇺🇸 Amazon98.80.0.0/13 EC2 IAD Prefix
NSns-1348.awsdns-40.org ⭐
A2600:9000:5305:4400::1🇺🇸 Amazon2600:9000:5305::/48 - CloudFront
PTRns-1348.awsdns-40.org
A205.251.197.68🇺🇸 Amazon205.251.197.0/24 prefix
NSns-1624.awsdns-11.co.uk
A2600:9000:5306:5800::1🇺🇸 Amazon2600:9000:5306::/48 - CloudFront
PTRns-1624.awsdns-11.co.uk
A205.251.198.88🇺🇸 Amazon205.251.198.0/24 prefix
PTRns-1624.awsdns-11.co.uk
NSns-441.awsdns-55.com
A2600:9000:5301:b900::1🇺🇸 Amazon2600:9000:5301::/48 - CloudFront
PTRns-441.awsdns-55.com
A205.251.193.185🇺🇸 Amazon205.251.193.0/24 prefix
NSns-672.awsdns-20.net
A2600:9000:5302:a000::1🇺🇸 Amazon2600:9000:5302::/48 - CloudFront
PTRns-672.awsdns-20.net
A205.251.194.160🇺🇸 Amazon205.251.194.0/24 prefix
PTRns-672.awsdns-20.net
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c21::1b🇺🇸 Google2607:f8b0:4004::/48
PTRpe-in-f27.1e100.net
A173.194.45.27🇺🇸 Google173.194.0.0/16
PTRyuiadum-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1b🇨🇱 Google2800:3f0:4003::/48
A108.177.123.27🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f27.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1b🇮🇪 Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.27🇺🇸 Google172.253.116.0/24
PTRdj-in-f27.1e100.net
MXaspmx2.googlemail.com(10)
A2800:3f0:4003:c0f::1b🇨🇱 Google2800:3f0:4003::/48
A108.177.123.26🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXaspmx3.googlemail.com(10)
A2a00:1450:400b:c02::1b🇮🇪 Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.26🇺🇸 Google172.253.116.0/24
PTRdj-in-f26.1e100.net
TXTv=spf1 include:mailgun.org include:_spf.google.com ~all
SOAns-1348.awsdns-40.orgawsdns-hostmaster@amazon.com serial=1

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1782714486

Same first word

http.jp
http.net
http.fish
http.biz
http.kz
http.ch
http.ro
http.tv
http.is
http.vg
http.ai
http.tel
http.it
http.eu.com
http.to
http.su
http.com
http.cn
http.md
http.so
http.st
http.pt
http.xen.prgmr.com
http.debian.net
http.ly
http.de
http.ee
http.ru
http.ie
http.co.in
http.co
http.cl
http.fi
http.co.il
http.dev
http.ca
http.nl
http.com.ua
http.io
http.uk.net
http.dk
http.hu
http.(0x787878)
http.ws
http.im
http.garden
http.com.cn
http.moe
http.com.tw
http.net.br
http.cat
http.lu
http.pl
http.com.au
http.or.kr
http.tw
http.ht
http.nu
http.ph
http.rip
http.net.au
http.pizza
http.codes
http.shop
http.gs
http.cc
http.org
http.sa.com
http.tn
http.cz
http.co.at
http.cn.com
http.sk
http.eu
http.sh
http.am
http.org.cn
http.dog

Similar names

hptt.cn
htpt.co
tthp.co.kr
htpt.cc
phtt.com
ptth.pt
tpth.gov.vn
ptth.co.il
thpt.com.cn
tpht.com
thpt.edu.vn
thtp.de
hptt.com.cn
thpt.net
thpt.vn
hptt.ua
phtt.in
tthp.com
phtt.org
hptt.de
thpt.com.tw
hptt.ru
ptht.nl
ttph.com.cn
ttph.co.uk
thpt.nl
ttph.com.ph
htpt.de
tthp.de
tpth.com
ttph.com.br
phtt.net
tpht.com.cn
ptth.net
htpt.eu
phtt.ru
thpt.education
tthp.info
phtt.cn
tthp.net
ttph.com
thpt.co.uk
htpt.net
htpt.be
ptth.de
hptt.com.au
thpt.de
hptt.net
tthp.org
htpt.edu.cn
ptht.co.uk

DNS History

9 records (3 active, 6 former)

20162017201820192020202120222023202420252026NSa.dns.park.iob.dns.park.ions0.pipeten.co.ukns1.pipeten.co.ukns2.pipeten.co.ukMXmail.pipeten.co.ukA213.143.20.85213.143.20.94CNAMEpark.io
●NSa.dns.park.io2017-07-01 → 2026-06-29 · 3 obs
○ 2016-12-21 18:58:38
● 2017-07-01 05:30:44
● 2026-06-29 06:43:22
●NSb.dns.park.io2026-03-18 → 2026-06-29 · 3 obs
○ 2017-07-01 05:30:44
● 2026-03-18 18:27:22
● 2026-06-29 06:43:22
○NSns0.pipeten.co.uk2015-06-16 → 2016-06-10 · 4 obs
● 2015-06-16 11:11:40
● 2016-06-10 14:06:18
○ 2016-12-21 18:58:38
○ 2026-06-29 06:43:22
○NSns1.pipeten.co.uk2015-06-16 → 2016-06-10 · 4 obs
● 2015-06-16 11:11:40
● 2016-06-10 14:06:18
○ 2016-12-21 18:58:38
○ 2026-06-29 06:43:22
○NSns2.pipeten.co.uk2015-06-16 → 2016-06-10 · 4 obs
● 2015-06-16 11:11:40
● 2016-06-10 14:06:18
○ 2016-12-21 18:58:38
○ 2026-06-29 06:43:22
○MXmail.pipeten.co.uk2015-06-16 → 2016-06-10 · 4 obs
● 2015-06-16 11:11:40
● 2016-06-10 14:06:18
○ 2016-12-21 18:58:38
○ 2026-06-29 06:43:22
○A213.143.20.852015-06-16 → 2015-06-16 · 3 obs
● 2015-06-16 11:11:40
○ 2015-10-03 10:17:30
○ 2026-06-29 06:43:22
○A213.143.20.942015-10-03 → 2016-06-10 · 5 obs
○ 2015-06-16 11:11:40
● 2015-10-03 10:17:30
● 2016-06-10 14:06:18
○ 2016-12-21 18:58:38
○ 2026-06-29 06:43:22
●CNAMEpark.io2017-07-01 → 2026-06-29 · 2 obs
● 2017-07-01 05:30:44
● 2026-06-29 06:43:22

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
sha2.nic.sh, b0.nic.sh, c0.nic.sh, a0.nic.sh8 records
http.sha.dns.park.io, b.dns.park.io-

✅ Authoritative Response

Server:23.23.95.213

NS records: a.dns.park.io, b.dns.park.io

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for http.sh (unsigned zone)

⏱️ Timing

Total: 894ms | Queries: -

📄 Records

TypeCountSample Data
CNAME1park.io
SOA1a.dns.park.io 2014070706

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

http.sh has two IP addresses: 18.235.188.127 and 98.85.33.81

Host names such as app.park.io, park.io and ec2-18-235-188-127.compute-1.amazonaws.com share their IP numbers with http.sh.

Name Servers

The NS records for http.sh point to four name servers: ns-441.awsdns-55.com, ns-672.awsdns-20.net, ns-1348.awsdns-40.org and ns-1624.awsdns-11.co.uk.

At least some of http.sh's name servers are shared with other domains, for example ehiaws-nonprod.com, habbeat.com, cl9salon.com and two more.

Four hostnames, each resolving to a pair of IP addresses: ns-441.awsdns-55.com directs to 205.251.193.185 and 2600:9000:5301:b900::1; ns-672.awsdns-20.net directs to 205.251.194.160 and 2600:9000:5302:a000::1; ns-1348.awsdns-40.org directs to 205.251.197.68 and 2600:9000:5305:4400::1; ns-1624.awsdns-11.co.uk directs to 205.251.198.88 and 2600:9000:5306:5800::1.

Mail Servers

Five mail servers handle http.sh: aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com and two others.

There is at least a partial MX overlap between http.sh and other domains, including ariatti.wpengine.com, ns500758.ns500758.ns500759.ns500758.ns500698.ns500698.ns500735.ns500735.ns500698.ns500736.ns500698.ns500698.ns500698.ns500686.ns500619.ns500619.ns500576.trackreceptor.com, ns500758.ns500698.ns500759.ns500759.ns500698.ns500736.ns500736.ns500698.ns500708.ns500698.ns500576.ns500708.ns500619.ns500576.ns500619.ns500619.trackreceptor.com and two others.

These mail servers tend to appear in combination with mail servers alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, alt3.aspmx.l.google.com and 3 others.

Host names that have two IP addresses:

The A records for aspmx2.googlemail.com return 108.177.123.26 and 2800:3f0:4003:c0f::1b.

The A records for aspmx3.googlemail.com return 172.253.116.26 and 2a00:1450:400b:c02::1b.

The A records for aspmx.l.google.com return 173.194.45.27 and 2607:f8b0:4004:c21::1b.

The A records for alt1.aspmx.l.google.com return 108.177.123.27 and 2800:3f0:4003:c0f::1b.

The A records for alt2.aspmx.l.google.com return 172.253.116.27 and 2a00:1450:400b:c02::1b.

aspmx2.googlemail.com and alt1.aspmx.l.google.com each have 2800:3f0:4003:c0f::1b IP addresses.

aspmx3.googlemail.com and alt2.aspmx.l.google.com each have 2a00:1450:400b:c02::1b IP addresses.