`three.sh`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:c219^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:14c2^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.20.194^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.194.25^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`jimmy.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c4c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jimmy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c34c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`jimmy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:234c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`jimmy.ns.cloudflare.com`
		A	108.162.195.76^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jimmy.ns.cloudflare.com`
		A	162.159.44.76^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jimmy.ns.cloudflare.com`
		A	172.64.35.76^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jimmy.ns.cloudflare.com`
NS	`margaret.ns.cloudflare.com`
		A	2606:4700:50::a29f:266b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margaret.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c26b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`margaret.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:226b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`margaret.ns.cloudflare.com`
		A	108.162.194.107^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margaret.ns.cloudflare.com`
		A	162.159.38.107^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margaret.ns.cloudflare.com`
		A	172.64.34.107^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`margaret.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.20.194, 172.67.194.25
		IPv6 hints	2606:4700:3030::ac43:c219, 2606:4700:3036::6815:14c2
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=194, name=cloudflare-ech.com
SOA	`jimmy.ns.cloudflare.com`dns@cloudflare.com serial=2401126320

`sh`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.nic.sh` ⭐
	NS	`a2.nic.sh`
	NS	`b0.nic.sh`
	NS	`c0.nic.sh`
	SOA	`a0.nic.sh`hostmaster@donuts.email serial=1778335754

Same first word

three.com.sa

three.com.ro

three.co.uk

three.ch

three.co.in

three.com.mo

three.rocks

three.nl

three.support

three.careers

three.company

three.vc

three.uk

three.cards

three.sg

three.com

three.sh

three.solutions

three.la

three.id

three.at

three.email

three.eu

three.co.kr

three.pl

three.am

three.de

three.guru

three.com.au

three.ca

three.delivery

three.fj.cn

three.coffee

three.pt

three.cz

three.io

three.com.hk

three.co

three.dog

three.ne.jp

three.im

three.hk

three.mo

three.org

three.media

three.agency

three.deno.dev

three.co.id

three.app

three.co.ca

three.net

three.ie

three.ma

three.se

three.cn

three.lu

three.bet

three.eu.com

three.cc

three.bio

three.fi

three.us

three.biz

three.fm

Similar names

there.cn

eerth.com

there.network

teher.hu

ether.es

heter.net

ehret.ca

ehret.be

ether.zone

heter.co.il

reeth.org

there.today

htree.com

ether.to

there.is

there.co.uk

there.be

there.to

ether.tips

ether.org

hetre.ch

there.com.au

ether.black

there.com.br

ether.net

ether.web.id

heret.com

ehrte.de

hetre.eu

ether.net.ua

there.vi

there.nl

there.hu

ether.taxi

ether.money

there.love

ether.la

hetre.fr

there.es

theer.de

ether.net.nz

ether.network

ether.agency

ether.tokyo

ether.group

there.fr

heter.biz

heret.net

ether.cafe

there.de

heter.ru

ether.pl

heter.se

heter.no

there.red

there.fi

there.it

ether.ru

ether.com.ua

there.world

ehret.info

there.no

heter.nl

ether.today

heret.co.il

ether.hu

ether.town

there.ie

ether.run

there.eu

ehret.me

ether.fr

DNS History

20 records (6 active, 14 former)

○NSf1g1ns1.dnspod.net2015-11-14 → 2021-01-24 · 8 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2019-10-18 20:58:40
● 2020-04-11 01:40:06
● 2021-01-24 14:59:00
○ 2021-05-21 06:23:54
○ 2026-05-09 14:31:38

○NSf1g1ns2.dnspod.net2015-11-14 → 2021-01-24 · 8 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2019-10-18 20:58:40
● 2020-04-11 01:40:06
● 2021-01-24 14:59:00
○ 2021-05-21 06:23:54
○ 2026-05-09 14:31:38

●NSjimmy.ns.cloudflare.com2026-03-13 → 2026-05-09 · 3 obs

○ 2021-10-08 15:53:20
● 2026-03-13 08:11:56
● 2026-05-09 14:31:38

●NSmargaret.ns.cloudflare.com2026-03-13 → 2026-05-09 · 3 obs

○ 2021-10-08 15:53:20
● 2026-03-13 08:11:56
● 2026-05-09 14:31:38

○NSns1.domainmx.com2021-09-13 → 2021-10-08 · 5 obs

○ 2021-05-21 06:23:54
● 2021-09-13 16:26:26
● 2021-10-08 15:53:20
○ 2026-03-13 08:11:56
○ 2026-05-09 14:31:38

○NSns2.domainmx.com2021-09-13 → 2021-10-08 · 5 obs

○ 2021-05-21 06:23:54
● 2021-09-13 16:26:26
● 2021-10-08 15:53:20
○ 2026-03-13 08:11:56
○ 2026-05-09 14:31:38

○MXalt1.aspmx.l.google.com2015-11-14 → 2017-10-15 · 4 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2026-05-09 14:31:38

○MXalt2.aspmx.l.google.com2015-11-14 → 2017-10-15 · 4 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2026-05-09 14:31:38

○MXaspmx.l.google.com2015-11-14 → 2017-10-15 · 4 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2026-05-09 14:31:38

○MXaspmx2.googlemail.com2015-11-14 → 2017-10-15 · 4 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2026-05-09 14:31:38

○MXaspmx3.googlemail.com2015-11-14 → 2017-10-15 · 4 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2026-05-09 14:31:38

●A104.21.20.1942026-03-23 → 2026-05-09 · 3 obs

○ 2026-03-13 08:11:56
● 2026-03-23 15:19:12
● 2026-05-09 14:31:38

○A172.64.80.12026-03-13 → 2026-03-13 · 4 obs

○ 2021-10-08 15:53:20
● 2026-03-13 08:11:56
○ 2026-03-23 15:19:12
○ 2026-05-09 14:31:38

●A172.67.194.252026-03-23 → 2026-05-09 · 3 obs

○ 2026-03-13 08:11:56
● 2026-03-23 15:19:12
● 2026-05-09 14:31:38

○A172.93.194.602021-10-08 → 2021-10-08 · 4 obs

○ 2021-09-13 16:26:26
● 2021-10-08 15:53:20
○ 2026-03-13 08:11:56
○ 2026-05-09 14:31:38

○A185.107.56.2022021-09-13 → 2021-09-13 · 4 obs

○ 2019-09-22 05:16:28
● 2021-09-13 16:26:26
○ 2021-10-08 15:53:20
○ 2026-05-09 14:31:38

○A192.30.252.1532015-11-14 → 2017-10-15 · 4 obs

● 2015-11-14 19:47:22
● 2017-10-15 05:15:40
○ 2019-09-22 05:16:28
○ 2026-05-09 14:31:38

○A2606:4700:130:436c:6f75:6466:6c61:72652026-03-13 → 2026-03-13 · 4 obs

○ 2021-10-08 15:53:20
● 2026-03-13 08:11:56
○ 2026-03-23 15:19:12
○ 2026-05-09 14:31:38

●A2606:4700:3030::ac43:c2192026-03-23 → 2026-05-09 · 3 obs

○ 2026-03-13 08:11:56
● 2026-03-23 15:19:12
● 2026-05-09 14:31:38

●A2606:4700:3036::6815:14c22026-03-23 → 2026-05-09 · 3 obs

○ 2026-03-13 08:11:56
● 2026-03-23 15:19:12
● 2026-05-09 14:31:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
sh	a0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh	8 records
three.sh	jimmy.ns.cloudflare.com, margaret.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.35.76

NS records: jimmy.ns.cloudflare.com, margaret.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for three.sh (unsigned zone)

⏱️ Timing

Total: 431ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.20.194, 172.67.194.25`
AAAA	2	`2606:4700:3030::ac43:c219, 2606:4700:3036::6815:14c2`
NS	2	`jimmy.ns.cloudflare.com, margaret.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`jimmy.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a0.nic.sh, a2.nic.sh...)

Analysis

IP Addresses

three.sh resolves to four IP numbers: 2606:4700:3030::ac43:c219, 2606:4700:3036::6815:14c2, 104.21.20.194 and 172.67.194.25.

Other host names such as elfia.com, carbulbguide.com, privydocs.com, cqjykj.com and zinor.com share IPs with three.sh.

Name Servers

three.sh is delegated to two name servers: jimmy.ns.cloudflare.com and margaret.ns.cloudflare.com.

three.sh shares the same name server setup as chandigarhstockexchange.com, fantci.com, stlouis26.eu, turboeye.com and toyopumps.com.

three.sh at least partially shares name servers with other domains, for instance quarionextal.com, ciadoaluminio.com.br, protraveladvisory.live, adjustablebedsprices.org and ieno.cn.

These name servers are commonly used with bella.ns.cloudflare.com and nile.ns.cloudflare.com.

Host names with six IP numbers:

jimmy.ns.cloudflare.com points to 2606:4700:58::a29f:2c4c, 2803:f800:50::6ca2:c34c, 2a06:98c1:50::ac40:234c, 108.162.195.76, 162.159.44.76 and 172.64.35.76.

margaret.ns.cloudflare.com points to 2606:4700:50::a29f:266b, 2803:f800:50::6ca2:c26b, 2a06:98c1:50::ac40:226b, 108.162.194.107, 162.159.38.107 and 172.64.34.107.

three.sh - robtex.com

three.sh

sh

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`three.sh`

`sh`