Skip to content

Hostname

xfr.sh

Last fetched

xfr.sh resolves to 1 IPv4 address operated by CreeperHostLTD-AS - CreeperHost LTD in GB. WHOIS lists iana:81 as the registrar.

Nutrition Label

WHISPER CANON · xfr.shRouting diversity1.5/10Peering density3.6/10MOAS conflict✓ noneThreat-feed listings10.0/10WHOIS transparency3.3/10Resolver footprint4.6/10canon.whisper.security/host/xfr.sh

Resolution chain

xfr.sh resolves to 1 distinct IPv4 address via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
185.57.191.115185.58.229.0/24AS201971CreeperHostLTD-AS - CreeperHost LTDGB

WHOIS identity

Registrar
iana:81
Organization
creeperhost
Contact emails
—

Subdomains

1 observed subdomain of xfr.sh.

Subdomain
world.xfr.sh

Threat posture

History

Related pages

Pivot deeper into the graph from xfr.sh.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "xfr.sh"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.