wecaretransfer.com - robtex.com

wecaretransfer.com

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:a393🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3034::6815:22b5🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.34.181Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.163.147🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSdamien.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2ca8🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamien.ns.cloudflare.com
A2803:f800:50::6ca2:c3a8🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdamien.ns.cloudflare.com
A2a06:98c1:50::ac40:23a8🇺🇸 Cloudflare2a06:98c1:50::/45
PTRdamien.ns.cloudflare.com
A108.162.195.168🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamien.ns.cloudflare.com
A162.159.44.168Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamien.ns.cloudflare.com
A172.64.35.168🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamien.ns.cloudflare.com
NSryleigh.ns.cloudflare.com
A2606:4700:50::a29f:26c6🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRryleigh.ns.cloudflare.com
A2803:f800:50::6ca2:c2c6🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRryleigh.ns.cloudflare.com
A2a06:98c1:50::ac40:22c6🇺🇸 Cloudflare2a06:98c1:50::/45
PTRryleigh.ns.cloudflare.com
A108.162.194.198🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRryleigh.ns.cloudflare.com
A162.159.38.198Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRryleigh.ns.cloudflare.com
A172.64.34.198🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRryleigh.ns.cloudflare.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c23::1a🇺🇸 Google2607:f8b0:4004::/48
PTRyuiadrs-in-f26.1e100.net
A142.251.167.26🇺🇸 Google142.251.167.0/24
PTRww-in-f26.1e100.net
MXsmtp.google.com ⭐
A2607:f8b0:4004:c08::1b🇺🇸 Google2607:f8b0:4004::/48
PTRbi-in-f27.1e100.net
A2607:f8b0:4004:c09::1a🇺🇸 Google2607:f8b0:4004::/48
PTRbh-in-f26.1e100.net
A2607:f8b0:4004:c09::1b🇺🇸 Google2607:f8b0:4004::/48
PTRbh-in-f27.1e100.net
A2607:f8b0:4004:c25::1a🇺🇸 Google2607:f8b0:4004::/48
PTRyuiadtq-in-f26.1e100.net
A142.250.31.26🇺🇸 Google142.250.31.0/24
PTRbj-in-f26.1e100.net
A172.253.63.27🇺🇸 Google172.253.63.0/24
PTRbi-in-f27.1e100.net
A172.253.122.26🇺🇸 Google172.253.122.0/24
PTRbh-in-f26.1e100.net
A172.253.122.27🇺🇸 Google172.253.122.0/24
PTRbh-in-f27.1e100.net
A192.178.218.26🇺🇸 Google192.178.218.0/24
PTRyuiadtq-in-f26.1e100.net
TXTgoogle-site-verification=PKeHmdtgP8sr7ot18K04u9NbeGlAMqLzw5gVDpND1Eg
TXTv=spf1 include:spf.titan.email ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.34.181, 172.67.163.147
IPv6 hints2606:4700:3033::ac43:a393, 2606:4700:3034::6815:22b5
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=153, name=cloudflare-ech.com
SOAdamien.ns.cloudflare.comdns@cloudflare.com serial=2408006001

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1783193661

Same first word

wecaretransfer.com

DNS History

8 records (8 active, 0 former)

NSdamien.ns.cloudflare.comryleigh.ns.cloudflare.comMXaspmx.l.google.comsmtp.google.comA104.21.34.181172.67.163.1472606:4700:3033::ac43:a3932606:4700:3034::6815:22b5
●NSdamien.ns.cloudflare.com2026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●NSryleigh.ns.cloudflare.com2026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●MXaspmx.l.google.com2026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●MXsmtp.google.com2026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●A104.21.34.1812026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●A172.67.163.1472026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●A2606:4700:3033::ac43:a3932026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50
●A2606:4700:3034::6815:22b52026-06-01 → 2026-07-04 · 2 obs
● 2026-06-01 14:33:02
● 2026-07-04 19:34:50

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
wecaretransfer.comryleigh.ns.cloudflare.com, damien.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.194.198

NS records: ryleigh.ns.cloudflare.com, damien.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for wecaretransfer.com (unsigned zone)

⏱️ Timing

Total: 179ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.163.147, 104.21.34.181
AAAA22606:4700:3034::6815:22b5, 2606:4700:3033::ac43:a393
NS2damien.ns.cloudflare.com, ryleigh.ns.cloudflare.com
MX2aspmx.l.google.com (pri: 1), smtp.google.com (pri: 1)
TXT2google-site-verification=PKeHmdtgP8sr7ot, v=spf1 include:spf.titan.email ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1damien.ns.cloudflare.com dns.cloudflare.

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ryleigh.ns.cloudflare.com, ryleigh.ns.cloudflare.com, ryleigh.ns.cloudflare.com...)

Analysis

IP Addresses

wecaretransfer.com points to the four IP addresses 104.21.34.181, 172.67.163.147, 2606:4700:3033::ac43:a393 and 2606:4700:3034::6815:22b5.

brazilianobservatory.com, www.uniin.dev, gacor-slot.fun plus two other host names have IP numbers in common with wecaretransfer.com.

Name Servers

DNS delegation for wecaretransfer.com points to two name servers: damien.ns.cloudflare.com and ryleigh.ns.cloudflare.com.

The name server configuration of wecaretransfer.com is shared with other domains, for instance inmobiliarianazaret.com, arrendamientospanorama.com, betsypropiedades.com and two others.

There is at least partial name server overlap between wecaretransfer.com and other domains — rivercitydancestudio.net, casaviagens.com, mangalgiri.com and two more among them.

The name servers kip.ns.cloudflare.com, adi.ns.cloudflare.com and tony.ns.cloudflare.com are often found in combination with these name servers.

Hosts with 6 IP addresses each:

damien.ns.cloudflare.com has IP addresses 108.162.195.168, 162.159.44.168 and 172.64.35.168, plus 3 other.

ryleigh.ns.cloudflare.com has IP addresses 108.162.194.198, 162.159.38.198 and 172.64.34.198, plus 3 other.

Mail Servers

wecaretransfer.com uses two mail servers, smtp.google.com and aspmx.l.google.com.

The mail server setup of wecaretransfer.com matches that of other domains such as avancetec.com.br, redteamok.com, 24alo.com and two others.

At least some of the mail servers used by wecaretransfer.com are shared with other domains: ns500742.ns500754.ns500754.ns500742.ns500671.ns500671.ns500671.ns500705.ns500671.ns500688.ns500705.ns500649.ns500671.ns500666.ns500153.tenderladiesbz.com, ns500742.ns500742.ns500742.ns500742.ns500704.ns500742.ns500705.ns500678.ns500649.ns500142.lusty(0x736c7574)z.com, ns500754.ns500731.ns500731.ns500754.ns500731.ns500754.ns500754.ns500754.ns500742.ns500688.ns500671.ns500688.ns500678.ns500688.ns500649.ns500649.ns500666.tenderladiesbz.com and two others among them.

These mail servers are often deployed together with alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and 3 other mail servers.

Hosts with 9 IP addresses each:

smtp.google.com has IP addresses 142.250.31.26, 172.253.63.27 and 172.253.122.26, plus 6 other.

Host names pointing to two IP addresses:

aspmx.l.google.com has two IP addresses: 142.251.167.26 and 2607:f8b0:4004:c23::1a.