`pay4.work`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:4a8^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:8447^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.4.168^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.132.71^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`aragorn.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b43^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aragorn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c143^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aragorn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2143^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aragorn.ns.cloudflare.com`
		A	108.162.193.67^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aragorn.ns.cloudflare.com`
		A	172.64.33.67^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aragorn.ns.cloudflare.com`
		A	173.245.59.67^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aragorn.ns.cloudflare.com`
NS	`paityn.ns.cloudflare.com`
		A	2606:4700:50::a29f:2612^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c212^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`paityn.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2212^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`paityn.ns.cloudflare.com`
		A	108.162.194.18^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	162.159.38.18^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
		A	172.64.34.18^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`paityn.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c1d::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`ww-in-f26.1e100.net`
		A	172.253.139.27^{🇺🇸 Google172.253.139.0/24}
			PTR	`yuiadsk-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.26^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f26.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1b^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f27.1e100.net`
		A	172.253.116.26^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.27^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f27.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1b^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f27.1e100.net`
		A	172.253.157.27^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f27.1e100.net`
TXT	`google-site-verification=cnB-VXx81XezVEsiqKdRb1Om3TAbtHhhd6U4qFJFfEI`
TXT	`v=spf1 include:_spf.google.com -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.4.168, 172.67.132.71
		IPv6 hints	2606:4700:3030::6815:4a8, 2606:4700:3035::ac43:8447
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=79, name=cloudflare-ech.com
SOA	`aragorn.ns.cloudflare.com`dns@cloudflare.com serial=2411426356

`work`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.nic.work` ⭐
	NS	`b.nic.work`
	NS	`c.nic.work`
	NS	`x.nic.work`
	NS	`y.nic.work`
	NS	`z.nic.work`
	SOA	`a.nic.work`admin@tldns.godaddy serial=1786171214

⚠️ On DNS blocklist: spam-tlds

Same first word

pay4.net

pay4.com

pay4.uz

pay4.work

pay4.cz

pay4.co.uk

pay4.com.br

pay4.it

pay4.cc

pay4.me

Similar names

4pay.ai

ap4y.com

4pay.xyz

4pay.ca

4pay.online

4pay.org

ap4y.github.io

4pay.ru

4pay.ro

4pay.net

4pay.world

4pay.me

4pay.co

DNS History

25 records (11 active, 14 former)

●NSaragorn.ns.cloudflare.com2026-04-27 → 2026-08-08 · 3 obs

○ 2019-03-25 04:44:44
● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

○NSns1.mindsandmachines.com2015-10-16 → 2016-06-20 · 4 obs

● 2015-10-16 11:30:44
● 2016-06-20 11:55:06
○ 2017-03-17 20:52:50
○ 2026-08-08 06:49:40

○NSns1.uniregistrymarket.link2017-03-17 → 2017-03-17 · 4 obs

○ 2016-06-20 11:55:06
● 2017-03-17 20:52:50
○ 2019-03-25 04:44:44
○ 2026-08-08 06:49:40

○NSns2.mindsandmachines.com2015-10-16 → 2016-06-20 · 4 obs

● 2015-10-16 11:30:44
● 2016-06-20 11:55:06
○ 2017-03-17 20:52:50
○ 2026-08-08 06:49:40

○NSns2.uniregistrymarket.link2017-03-17 → 2017-03-17 · 4 obs

○ 2016-06-20 11:55:06
● 2017-03-17 20:52:50
○ 2019-03-25 04:44:44
○ 2026-08-08 06:49:40

○NSns3.mindsandmachines.com2015-10-16 → 2016-06-20 · 4 obs

● 2015-10-16 11:30:44
● 2016-06-20 11:55:06
○ 2017-03-17 20:52:50
○ 2026-08-08 06:49:40

○NSns4.mindsandmachines.com2015-10-16 → 2016-06-20 · 4 obs

● 2015-10-16 11:30:44
● 2016-06-20 11:55:06
○ 2017-03-17 20:52:50
○ 2026-08-08 06:49:40

●NSpaityn.ns.cloudflare.com2026-04-27 → 2026-08-08 · 3 obs

○ 2019-03-25 04:44:44
● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

●MXalt1.aspmx.l.google.com2026-04-27 → 2026-08-08 · 2 obs

● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

●MXalt2.aspmx.l.google.com2026-04-27 → 2026-08-08 · 2 obs

● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

●MXalt3.aspmx.l.google.com2026-04-27 → 2026-08-08 · 2 obs

● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

●MXalt4.aspmx.l.google.com2026-04-27 → 2026-08-08 · 2 obs

● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

●MXaspmx.l.google.com2026-04-27 → 2026-08-08 · 2 obs

● 2026-04-27 12:01:32
● 2026-08-08 06:49:40

●A104.21.4.1682026-04-27 → 2026-08-08 · 5 obs

○ 2019-03-25 04:44:44
● 2026-04-27 12:01:32
○ 2026-07-11 01:34:28
● 2026-07-11 22:30:32
● 2026-08-08 06:49:40

●A172.67.132.712026-04-27 → 2026-08-08 · 5 obs

○ 2019-03-25 04:44:44
● 2026-04-27 12:01:32
○ 2026-07-11 01:34:28
● 2026-07-11 22:30:32
● 2026-08-08 06:49:40

○A188.114.96.02026-07-11 → 2026-07-11 · 4 obs

○ 2026-06-19 15:01:24
● 2026-07-11 01:34:28
○ 2026-07-11 22:30:32
○ 2026-08-08 06:49:40

○A188.114.97.02026-07-11 → 2026-07-11 · 4 obs

○ 2026-06-19 15:01:24
● 2026-07-11 01:34:28
○ 2026-07-11 22:30:32
○ 2026-08-08 06:49:40

●A2606:4700:3030::6815:4a82026-06-19 → 2026-08-08 · 5 obs

○ 2026-06-17 06:37:12
● 2026-06-19 15:01:24
○ 2026-07-11 01:34:28
● 2026-07-11 22:30:32
● 2026-08-08 06:49:40

○A2606:4700:3033::6815:4a82026-04-27 → 2026-06-17 · 5 obs

○ 2019-03-25 04:44:44
● 2026-04-27 12:01:32
● 2026-06-17 06:37:12
○ 2026-06-19 15:01:24
○ 2026-08-08 06:49:40

●A2606:4700:3035::ac43:84472026-06-19 → 2026-08-08 · 5 obs

○ 2026-06-17 06:37:12
● 2026-06-19 15:01:24
○ 2026-07-11 01:34:28
● 2026-07-11 22:30:32
● 2026-08-08 06:49:40

○A2606:4700:3037::ac43:84472026-04-27 → 2026-06-17 · 5 obs

○ 2019-03-25 04:44:44
● 2026-04-27 12:01:32
● 2026-06-17 06:37:12
○ 2026-06-19 15:01:24
○ 2026-08-08 06:49:40

○A2a06:98c1:3120::2026-07-11 → 2026-07-11 · 4 obs

○ 2026-06-19 15:01:24
● 2026-07-11 01:34:28
○ 2026-07-11 22:30:32
○ 2026-08-08 06:49:40

○A2a06:98c1:3121::2026-07-11 → 2026-07-11 · 4 obs

○ 2026-06-19 15:01:24
● 2026-07-11 01:34:28
○ 2026-07-11 22:30:32
○ 2026-08-08 06:49:40

○A54.72.208.1512015-10-16 → 2016-06-20 · 4 obs

● 2015-10-16 11:30:44
● 2016-06-20 11:55:06
○ 2017-03-17 20:52:50
○ 2026-08-08 06:49:40

○A69.172.201.1532017-03-17 → 2017-03-17 · 4 obs

○ 2016-06-20 11:55:06
● 2017-03-17 20:52:50
○ 2019-03-25 04:44:44
○ 2026-08-08 06:49:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
work	a.nic.work, b.nic.work, c.nic.work, x.nic.work...	12 records
pay4.work	paityn.ns.cloudflare.com, aragorn.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.67

NS records: paityn.ns.cloudflare.com, aragorn.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for pay4.work (unsigned zone)

⏱️ Timing

Total: 480ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.132.71, 104.21.4.168`
AAAA	2	`2606:4700:3035::ac43:8447, 2606:4700:3030::6815:4a8`
NS	2	`aragorn.ns.cloudflare.com, paityn.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	2	`google-site-verification=cnB-VXx81XezVEs, v=spf1 include:_spf.google.com -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`aragorn.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.work, a.nic.work, b.nic.work...)

Analysis

IP Addresses

pay4.work resolves to four IP addresses: 104.21.4.168, 172.67.132.71, 2606:4700:3030::6815:4a8 and 2606:4700:3035::ac43:8447.

Two other host names, along with socialcal.app, eaio.eu and www.remax-kristall.de, also share IP numbers with pay4.work.

Name Servers

The NS records for pay4.work delegate to aragorn.ns.cloudflare.com and paityn.ns.cloudflare.com.

pay4.work shares its NS records with other domains, for example futurecraftstudio.com, syncnext.com, bodytattooart.com and two others.

pay4.work shares at least some of its name servers with other domains, including e-buyplace.com, cooperkap.com.br, zenithnextp-attern.click and two others.

These name servers are frequently paired with the name servers ajay.ns.cloudflare.com, bonnie.ns.cloudflare.com and cass.ns.cloudflare.com.

DNS names with 6 IP addresses:

aragorn.ns.cloudflare.com maps to 108.162.193.67, 172.64.33.67, 173.245.59.67 and 3 additional IP addresses.

paityn.ns.cloudflare.com maps to 108.162.194.18, 162.159.38.18, 172.64.34.18 and 3 additional IP addresses.

Mail Servers

pay4.work is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

There is at least a partial MX overlap between pay4.work and other domains, including merchantandgreen.com.au, dibolmi.com, re-rentals.com and two others.

These mail servers tend to appear in combination with mail servers alt4.aspmx.l.google.com, alt3.aspmx.l.google.com, aspmx2.googlemail.com and 3 others.

Host names that have two IP addresses:

The A records for aspmx.l.google.com return 172.253.139.27 and 2607:f8b0:4004:c1d::1a.

The A records for alt1.aspmx.l.google.com return 108.177.123.26 and 2800:3f0:4003:c0f::1b.

The A records for alt2.aspmx.l.google.com return 172.253.116.26 and 2a00:1450:400b:c02::1b.

The A records for alt3.aspmx.l.google.com return 192.178.223.27 and 2a00:1450:4009:c0f::1b.

The A records for alt4.aspmx.l.google.com return 172.253.157.27 and 2a00:1450:400c:c23::1b.