ssh.sh - robtex.com

๐Ÿ›ก๏ธDomain Reputation CheckBlocklist, phishing & malware statusโ†’

ssh.sh

CNAMEpark.io
DNSSECโš ๏ธ Not signed
A34.207.2.9๐Ÿ‡บ๐Ÿ‡ธ Amazon34.192.0.0/12 EC2 IAD prefix
PTRec2-34-207-2-9.compute-1.amazonaws.com
A100.50.238.73๐Ÿ‡บ๐Ÿ‡ธ Amazon100.48.0.0/12 EC2 IAD prefix
NSns-1348.awsdns-40.org โญ
A2600:9000:5305:4400::1๐Ÿ‡บ๐Ÿ‡ธ Amazon2600:9000:5305::/48 - CloudFront
PTRns-1348.awsdns-40.org
A205.251.197.68๐Ÿ‡บ๐Ÿ‡ธ Amazon205.251.197.0/24 prefix
PTRns-1348.awsdns-40.org
NSns-1624.awsdns-11.co.uk
A2600:9000:5306:5800::1๐Ÿ‡บ๐Ÿ‡ธ Amazon2600:9000:5306::/48 - CloudFront
PTRns-1624.awsdns-11.co.uk
A205.251.198.88๐Ÿ‡บ๐Ÿ‡ธ Amazon205.251.198.0/24 prefix
PTRns-1624.awsdns-11.co.uk
NSns-441.awsdns-55.com
A2600:9000:5301:b900::1๐Ÿ‡บ๐Ÿ‡ธ Amazon2600:9000:5301::/48 - CloudFront
PTRns-441.awsdns-55.com
A205.251.193.185๐Ÿ‡บ๐Ÿ‡ธ Amazon205.251.193.0/24 prefix
PTRns-441.awsdns-55.com
NSns-672.awsdns-20.net
A2600:9000:5302:a000::1๐Ÿ‡บ๐Ÿ‡ธ Amazon2600:9000:5302::/48 - CloudFront
PTRns-672.awsdns-20.net
A205.251.194.160๐Ÿ‡บ๐Ÿ‡ธ Amazon205.251.194.0/24 prefix
PTRns-672.awsdns-20.net
MXaspmx.l.google.com โญ
A2607:f8b0:4004:c23::1a๐Ÿ‡บ๐Ÿ‡ธ Google2607:f8b0:4004::/48
PTRyuiadrs-in-f26.1e100.net
A142.251.163.26๐Ÿ‡บ๐Ÿ‡ธ Google142.251.163.0/24
PTRwv-in-f26.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c14::1a๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A192.178.234.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.0.0/15
PTRncsclj-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1b๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f26.1e100.net
MXaspmx2.googlemail.com(10)
A2800:3f0:4003:c14::1a๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A192.178.234.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.0.0/15
PTRncsclj-in-f26.1e100.net
MXaspmx3.googlemail.com(10)
A2a00:1450:400b:c02::1b๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.27๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f27.1e100.net
TXTv=spf1 include:mailgun.org include:_spf.google.com ~all
SOAns-1348.awsdns-40.orgawsdns-hostmaster@amazon.com serial=1

sh

DNSSEC๐Ÿ”’ Signed (DS record present)
NSa0.nic.sh โญ
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1786868933

Same first word

Similar names

DNS History

6 records (3 active, 3 former)

20162017201820192020202120222023202420252026NSa.dns.park.iob.dns.park.ions1.eversible.netns2.eversible.netA67.220.65.97CNAMEpark.io
โ—NSa.dns.park.io2026-02-15 โ†’ 2026-08-16 ยท 3 obs
โ—‹ 2017-09-10 01:44:48
โ— 2026-02-15 00:16:04
โ— 2026-08-16 09:10:52
โ—NSb.dns.park.io2026-02-15 โ†’ 2026-08-16 ยท 3 obs
โ—‹ 2017-09-10 01:44:48
โ— 2026-02-15 00:16:04
โ— 2026-08-16 09:10:52
โ—‹NSns1.eversible.net2015-07-03 โ†’ 2017-09-10 ยท 4 obs
โ— 2015-07-03 07:01:02
โ— 2017-09-10 01:44:48
โ—‹ 2026-02-15 00:16:04
โ—‹ 2026-08-16 09:10:52
โ—‹NSns2.eversible.net2015-07-03 โ†’ 2017-09-10 ยท 4 obs
โ— 2015-07-03 07:01:02
โ— 2017-09-10 01:44:48
โ—‹ 2026-02-15 00:16:04
โ—‹ 2026-08-16 09:10:52
โ—‹A67.220.65.972015-07-03 โ†’ 2026-02-15 ยท 4 obs
โ— 2015-07-03 07:01:02
โ— 2026-02-15 00:16:04
โ—‹ 2026-03-04 23:27:30
โ—‹ 2026-08-16 09:10:52
โ—CNAMEpark.io2026-02-15 โ†’ 2026-08-16 ยท 2 obs
โ— 2026-02-15 00:16:04
โ— 2026-08-16 09:10:52

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
ssh.shb.dns.park.io, a.dns.park.io-

โœ… Authoritative Response

Server:23.23.95.213

NS records: b.dns.park.io, a.dns.park.io

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for ssh.sh (unsigned zone)

โฑ๏ธ Timing

Total: 677ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
CNAME1park.io
SOA1a.dns.park.io 2014070706

๐Ÿ“Œ Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

ssh.sh points to the IP addresses 34.207.2.9 and 100.50.238.73

Other hosts including ec2-34-207-2-9.compute-1.amazonaws.com, app.park.io and park.io share IP addresses with ssh.sh.

Name Servers

The NS records for ssh.sh point to four name servers: ns-441.awsdns-55.com, ns-672.awsdns-20.net, ns-1348.awsdns-40.org and ns-1624.awsdns-11.co.uk.

At least some of ssh.sh's name servers are shared with other domains, for example electronics.pictures, privebyzalando.es, ttech.com.jm and two more.

Four hostnames, each resolving to a pair of IP addresses: ns-441.awsdns-55.com directs to 205.251.193.185 and 2600:9000:5301:b900::1; ns-672.awsdns-20.net directs to 205.251.194.160 and 2600:9000:5302:a000::1; ns-1348.awsdns-40.org directs to 205.251.197.68 and 2600:9000:5305:4400::1; ns-1624.awsdns-11.co.uk directs to 205.251.198.88 and 2600:9000:5306:5800::1.

Mail Servers

ssh.sh has five mail servers, which are aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com and two others.

There is at least a partial MX overlap between ssh.sh and other domains, including nicsocks.com, simplextax.com, peachvitamins.com and two others.

These mail servers tend to appear in combination with mail servers alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and 3 others.

Host names that have two IP addresses:

The A records for aspmx2.googlemail.com return 192.178.234.26 and 2800:3f0:4003:c14::1a.

The A records for aspmx3.googlemail.com return 172.253.116.27 and 2a00:1450:400b:c02::1b.

The A records for aspmx.l.google.com return 142.251.163.26 and 2607:f8b0:4004:c23::1a.

The A records for alt1.aspmx.l.google.com return 192.178.234.26 and 2800:3f0:4003:c14::1a.

The A records for alt2.aspmx.l.google.com return 172.253.116.26 and 2a00:1450:400b:c02::1b.

aspmx2.googlemail.com and alt1.aspmx.l.google.com each have 2800:3f0:4003:c14::1a IP addresses.

aspmx2.googlemail.com and alt1.aspmx.l.google.com each have 192.178.234.26 IP addresses.

aspmx3.googlemail.com and alt2.aspmx.l.google.com each have 2a00:1450:400b:c02::1b IP addresses.