rfclone.com - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

rfclone.com

DNSSEC⚠️ Not signed
A2606:4700:3033::6815:27e4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3034::ac43:95adπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.39.228Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.149.173πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSiris.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a76Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A2803:f800:50::6ca2:c076Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:2076Cloudflare2a06:98c1:50::/45
A108.162.192.118Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.32.118Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A173.245.58.118Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
NSquinton.ns.cloudflare.com
A2606:4700:58::a29f:2cf9Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A2803:f800:50::6ca2:c3f9Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
A2a06:98c1:50::ac40:23f9Cloudflare2a06:98c1:50::/45
A108.162.195.249Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A162.159.44.249Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
A172.64.35.249Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
MXmx1.qiye.aliyun.com ⭐
A47.246.137.47πŸ‡ΊπŸ‡Έ Alibaba-Cloud47.246.136.0/22 Alibaba CLoud
MXmx2.qiye.aliyun.com(10)
A47.246.136.231πŸ‡ΊπŸ‡Έ Alibaba-Cloud47.246.136.0/22 Alibaba CLoud
PTRcz-clare.com
PTRreachsmartdwell.com
PTRwevolt.tech
MXmx3.qiye.aliyun.com(15)
A47.246.136.231πŸ‡ΊπŸ‡Έ Alibaba-Cloud47.246.136.0/22 Alibaba CLoud
PTRcz-clare.com
PTRreachsmartdwell.com
PTRwevolt.tech
A47.246.137.47πŸ‡ΊπŸ‡Έ Alibaba-Cloud47.246.136.0/22 Alibaba CLoud
TXTv=spf1 include:spf.qiye.aliyun.com -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.39.228, 172.67.149.173
IPv6 hints2606:4700:3033::6815:27e4, 2606:4700:3034::ac43:95ad
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=141, name=cloudflare-ech.com
SOAiris.ns.cloudflare.comdns@cloudflare.com serial=2416240677

com

Same first word

Similar names

Previous names

Next names

DNS History

13 records (9 active, 4 former)

NSiris.ns.cloudflare.comquinton.ns.cloudflare.comMXmx1.qiye.aliyun.commx2.qiye.aliyun.commx3.qiye.aliyun.comA104.21.39.228172.67.149.1732606:4700:3033::6815:27e42606:4700:3034::ac43:95ad188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSiris.ns.cloudflare.com2026-09-16 β†’ 2026-11-04 Β· 2 obs
● 2026-09-16 09:56:30
● 2026-11-04 16:27:42
●NSquinton.ns.cloudflare.com2026-09-16 β†’ 2026-11-04 Β· 2 obs
● 2026-09-16 09:56:30
● 2026-11-04 16:27:42
●MXmx1.qiye.aliyun.com2026-09-16 β†’ 2026-11-04 Β· 2 obs
● 2026-09-16 09:56:30
● 2026-11-04 16:27:42
●MXmx2.qiye.aliyun.com2026-09-16 β†’ 2026-11-04 Β· 2 obs
● 2026-09-16 09:56:30
● 2026-11-04 16:27:42
●MXmx3.qiye.aliyun.com2026-09-16 β†’ 2026-11-04 Β· 2 obs
● 2026-09-16 09:56:30
● 2026-11-04 16:27:42
●A104.21.39.2282026-10-24 β†’ 2026-11-04 Β· 3 obs
β—‹ 2026-09-16 09:56:30
● 2026-10-24 20:40:54
● 2026-11-04 16:27:42
●A172.67.149.1732026-10-24 β†’ 2026-11-04 Β· 3 obs
β—‹ 2026-09-16 09:56:30
● 2026-10-24 20:40:54
● 2026-11-04 16:27:42
β—‹A188.114.96.02026-09-16 β†’ 2026-09-16 Β· 3 obs
● 2026-09-16 09:56:30
β—‹ 2026-10-24 20:40:54
β—‹ 2026-11-04 16:27:42
β—‹A188.114.97.02026-09-16 β†’ 2026-09-16 Β· 3 obs
● 2026-09-16 09:56:30
β—‹ 2026-10-24 20:40:54
β—‹ 2026-11-04 16:27:42
●A2606:4700:3033::6815:27e42026-10-24 β†’ 2026-11-04 Β· 3 obs
β—‹ 2026-09-16 09:56:30
● 2026-10-24 20:40:54
● 2026-11-04 16:27:42
●A2606:4700:3034::ac43:95ad2026-10-24 β†’ 2026-11-04 Β· 3 obs
β—‹ 2026-09-16 09:56:30
● 2026-10-24 20:40:54
● 2026-11-04 16:27:42
β—‹A2a06:98c1:3120::2026-09-16 β†’ 2026-09-16 Β· 3 obs
● 2026-09-16 09:56:30
β—‹ 2026-10-24 20:40:54
β—‹ 2026-11-04 16:27:42
β—‹A2a06:98c1:3121::2026-09-16 β†’ 2026-09-16 Β· 3 obs
● 2026-09-16 09:56:30
β—‹ 2026-10-24 20:40:54
β—‹ 2026-11-04 16:27:42

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
comi.gtld-servers.net, b.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net...-
rfclone.comiris.ns.cloudflare.com, quinton.ns.cloudflare.com12 records

βœ… Authoritative Response

Server:108.162.195.249

NS records: iris.ns.cloudflare.com, quinton.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 765ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.39.228, 172.67.149.173
AAAA22606:4700:3034::ac43:95ad, 2606:4700:3033::6815:27e4
NS2iris.ns.cloudflare.com, quinton.ns.cloudflare.com
MX3mx2.qiye.aliyun.com (pri: 10), mx3.qiye.aliyun.com (pri: 15)...
TXT1v=spf1 include:spf.qiye.aliyun.com -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1iris.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (iris.ns.cloudflare.com, iris.ns.cloudflare.com, iris.ns.cloudflare.com...)

Analysis

IP Addresses

rfclone.com resolves to four IP addresses: 104.21.39.228, 172.67.149.173, 2606:4700:3033::6815:27e4 and 2606:4700:3034::ac43:95ad.

Two other host names, along with www.coolmold.com, escrevebem.com and venastyle.com, also share IP numbers with rfclone.com.

Name Servers

rfclone.com uses two name servers for its delegation: iris.ns.cloudflare.com and quinton.ns.cloudflare.com.

rfclone.com shares its NS records with other domains, for example mohidul-islam-sojib.pages.dev, ipdf-306a7920d05a6606983297b6ffb3a067.pages.dev, horaca4856-42386-0-htb.pages.dev and two others.

rfclone.com has at least partial name server overlap with other domains, such as accountbridge.pro, roudebush.org, class-3-english.pages.dev and two others.

It is common to find these name servers paired with the name servers pablo.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname iris.ns.cloudflare.com directs to 108.162.192.118, 172.64.32.118 and 173.245.58.118 along with 3 other IP addresses.

Hostname quinton.ns.cloudflare.com directs to 108.162.195.249, 162.159.44.249 and 172.64.35.249 along with 3 other IP addresses.

Mail Servers

rfclone.com has three mail servers: mx1.qiye.aliyun.com, mx2.qiye.aliyun.com and mx3.qiye.aliyun.com.

There is at least a partial MX overlap between rfclone.com and other domains, including dingyunic.com, fucantek.com, softlight-blinds.com and two others.

These mail servers tend to be used in combination with the mail servers mxn.mxhichina.com and mxw.mxhichina.com.

Host names that have two IP addresses:

mx3.qiye.aliyun.com directs traffic to 47.246.136.231 and 47.246.137.47.

Host names that point to one IP address:

mx1.qiye.aliyun.com has the IP address 47.246.137.47.

mx2.qiye.aliyun.com has the IP address 47.246.136.231.

Both mx3.qiye.aliyun.com and mx2.qiye.aliyun.com resolve to 47.246.136.231 IP addresses each.

Both mx3.qiye.aliyun.com and mx1.qiye.aliyun.com resolve to 47.246.137.47 IP addresses each.