`sh397.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:4997^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:be53^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.73.151^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.190.83^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`dorthy.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3af9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dorthy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0f9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dorthy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20f9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dorthy.ns.cloudflare.com`
		A	108.162.192.249^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.64.32.249^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	173.245.58.249^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
NS	`rayden.ns.cloudflare.com`
		A	2606:4700:58::a29f:2ca3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rayden.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rayden.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rayden.ns.cloudflare.com`
		A	108.162.195.163^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rayden.ns.cloudflare.com`
		A	162.159.44.163^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rayden.ns.cloudflare.com`
		A	172.64.35.163^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rayden.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.73.151, 172.67.190.83
		IPv6 hints	2606:4700:3033::6815:4997, 2606:4700:3036::ac43:be53
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=225, name=cloudflare-ech.com
SOA	`dorthy.ns.cloudflare.com`dns@cloudflare.com serial=2409769891

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784652172

Same first word

sh397.com

Similar names

397hs.com

DNS History

14 records (6 active, 8 former)

●NSdorthy.ns.cloudflare.com2026-07-21 → 2026-07-21 · 2 obs

○ 2018-05-27 21:46:36
● 2026-07-21 16:47:18

○NSexpirens3.hichina.com2016-12-19 → 2016-12-19 · 3 obs

● 2016-12-19 14:11:58
○ 2018-05-27 21:46:36
○ 2026-07-21 16:47:18

○NSexpirens4.hichina.com2016-12-19 → 2016-12-19 · 3 obs

● 2016-12-19 14:11:58
○ 2018-05-27 21:46:36
○ 2026-07-21 16:47:18

○NSns1.cloud-dns.net2018-05-27 → 2018-05-27 · 3 obs

○ 2016-12-19 14:11:58
● 2018-05-27 21:46:36
○ 2026-07-21 16:47:18

○NSns1.julydns.com2026-07-21 → 2026-07-21 · 1 obs

○ 2026-07-21 16:47:18

○NSns2.cloud-dns.net2018-05-27 → 2018-05-27 · 3 obs

○ 2016-12-19 14:11:58
● 2018-05-27 21:46:36
○ 2026-07-21 16:47:18

○NSns2.julydns.com2026-07-21 → 2026-07-21 · 1 obs

○ 2026-07-21 16:47:18

●NSrayden.ns.cloudflare.com2026-07-21 → 2026-07-21 · 2 obs

○ 2018-05-27 21:46:36
● 2026-07-21 16:47:18

○A104.148.116.1642018-05-27 → 2018-05-27 · 3 obs

○ 2016-12-19 14:11:58
● 2018-05-27 21:46:36
○ 2026-07-21 16:47:18

●A104.21.73.1512026-07-21 → 2026-07-21 · 2 obs

○ 2018-05-27 21:46:36
● 2026-07-21 16:47:18

●A172.67.190.832026-07-21 → 2026-07-21 · 2 obs

○ 2018-05-27 21:46:36
● 2026-07-21 16:47:18

●A2606:4700:3033::6815:49972026-07-21 → 2026-07-21 · 2 obs

○ 2018-05-27 21:46:36
● 2026-07-21 16:47:18

●A2606:4700:3036::ac43:be532026-07-21 → 2026-07-21 · 2 obs

○ 2018-05-27 21:46:36
● 2026-07-21 16:47:18

○A47.89.58.1412016-12-19 → 2016-12-19 · 3 obs

● 2016-12-19 14:11:58
○ 2018-05-27 21:46:36
○ 2026-07-21 16:47:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
sh397.com	dorthy.ns.cloudflare.com, rayden.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.249

NS records: dorthy.ns.cloudflare.com, rayden.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for sh397.com (unsigned zone)

⏱️ Timing

Total: 158ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.190.83, 104.21.73.151`
AAAA	2	`2606:4700:3033::6815:4997, 2606:4700:3036::ac43:be53`
NS	2	`dorthy.ns.cloudflare.com, rayden.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`dorthy.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (dorthy.ns.cloudflare.com, dorthy.ns.cloudflare.com, dorthy.ns.cloudflare.com...)

Analysis

IP Addresses

sh397.com directs to four IP numbers, which are 104.21.73.151, 172.67.190.83, 2606:4700:3033::6815:4997 and 2606:4700:3036::ac43:be53.

kbonet.com, captain-electricien.fr, ust(0x616e616c)bur.com plus two other host names have IP numbers in common with sh397.com.

Name Servers

sh397.com has two authoritative name servers — dorthy.ns.cloudflare.com and rayden.ns.cloudflare.com.

The name server configuration of sh397.com is shared with other domains, for instance shdebu.com, zhi-ji.com, boyyq.com and two others.

At least some of sh397.com's name servers are shared with other domains, for example skiriblake.com, emadar.com, javtune.com and two more.

These name servers tend to be used in conjunction with the name servers abdullah.ns.cloudflare.com.

Hosts with 6 IP addresses each:

dorthy.ns.cloudflare.com points to 108.162.192.249, 172.64.32.249, 173.245.58.249 and 3 other IP addresses.

rayden.ns.cloudflare.com points to 108.162.195.163, 162.159.44.163, 172.64.35.163 and 3 other IP addresses.

sh397.com - robtex.com

sh397.com

com

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`sh397.com`

`com`