🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`tabshift.work`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:c9eb^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:4ce2^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.76.226^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.201.235^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`moura.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cd9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`moura.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3d9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`moura.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23d9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`moura.ns.cloudflare.com`
		A	108.162.195.217^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`moura.ns.cloudflare.com`
		A	162.159.44.217^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`moura.ns.cloudflare.com`
		A	172.64.35.217^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`moura.ns.cloudflare.com`
NS	`ulla.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ae9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0e9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ulla.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20e9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ulla.ns.cloudflare.com`
		A	108.162.192.233^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	172.64.32.233^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
		A	173.245.58.233^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ulla.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.76.226, 172.67.201.235
		IPv6 hints	2606:4700:3033::ac43:c9eb, 2606:4700:3036::6815:4ce2
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=177, name=cloudflare-ech.com
SOA	`moura.ns.cloudflare.com`dns@cloudflare.com serial=2418883245

`work`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.nic.work` ⭐
	NS	`b.nic.work`
	NS	`c.nic.work`
	NS	`x.nic.work`
	NS	`y.nic.work`
	NS	`z.nic.work`
	SOA	`a.nic.work`admin@tldns.godaddy serial=1794339400

⚠️ On DNS blocklist: spam-tlds

Same first word

tabshift.blog

tabshift.com

tabshift.nl

tabshift.dev

tabshift.ai

tabshift.work

Similar names

shifttab.xyz

bitshaft.pl

batshift.com

bathfits.com

shifttab.myshopify.com

shiftbat.xyz

siftbath.com

batshift.xyz

bitshaft.com

shifttab.my.id

bashfitt.com

shifttab.ai

Previous names

Next names

DNS History

12 records (6 active, 6 former)

●NSmoura.ns.cloudflare.com2026-09-08 → 2026-11-10 · 2 obs

● 2026-09-08 02:51:46
● 2026-11-10 20:32:44

●NSulla.ns.cloudflare.com2026-09-08 → 2026-11-10 · 2 obs

● 2026-09-08 02:51:46
● 2026-11-10 20:32:44

●A104.21.76.2262026-09-09 → 2026-11-10 · 9 obs

○ 2026-09-08 02:51:46
● 2026-09-09 12:48:28
○ 2026-09-14 18:39:06
● 2026-09-15 05:49:42
○ 2026-09-17 13:29:30
● 2026-10-16 22:52:46
○ 2026-11-06 11:35:04
● 2026-11-09 04:21:50
● 2026-11-10 20:32:44

●A172.67.201.2352026-09-09 → 2026-11-10 · 9 obs

○A188.114.96.02026-09-08 → 2026-11-06 · 9 obs

● 2026-09-08 02:51:46
○ 2026-09-09 12:48:28
● 2026-09-14 18:39:06
○ 2026-09-15 05:49:42
● 2026-09-17 13:29:30
○ 2026-10-16 22:52:46
● 2026-11-06 11:35:04
○ 2026-11-09 04:21:50
○ 2026-11-10 20:32:44

○A188.114.97.02026-09-08 → 2026-11-06 · 9 obs

●A2606:4700:3033::ac43:c9eb2026-09-09 → 2026-11-10 · 9 obs

●A2606:4700:3036::6815:4ce22026-09-09 → 2026-11-10 · 9 obs

○A2a06:98c1:3120::2026-09-08 → 2026-11-06 · 7 obs

● 2026-09-08 02:51:46
○ 2026-09-09 12:48:28
● 2026-09-14 18:39:06
○ 2026-09-15 05:49:42
● 2026-11-06 11:35:04
○ 2026-11-09 04:21:50
○ 2026-11-10 20:32:44

○A2a06:98c1:3120::42026-09-17 → 2026-09-17 · 4 obs

○ 2026-09-15 05:49:42
● 2026-09-17 13:29:30
○ 2026-10-16 22:52:46
○ 2026-11-10 20:32:44

○A2a06:98c1:3121::2026-09-08 → 2026-11-06 · 7 obs

● 2026-09-08 02:51:46
○ 2026-09-09 12:48:28
● 2026-09-14 18:39:06
○ 2026-09-15 05:49:42
● 2026-11-06 11:35:04
○ 2026-11-09 04:21:50
○ 2026-11-10 20:32:44

○A2a06:98c1:3121::42026-09-17 → 2026-09-17 · 4 obs

○ 2026-09-15 05:49:42
● 2026-09-17 13:29:30
○ 2026-10-16 22:52:46
○ 2026-11-10 20:32:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
work	y.nic.work, a.nic.work, c.nic.work, b.nic.work...	12 records
tabshift.work	moura.ns.cloudflare.com, ulla.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.192.233

NS records: moura.ns.cloudflare.com, ulla.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for tabshift.work (unsigned zone)

⏱️ Timing

Total: 476ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.201.235, 104.21.76.226`
AAAA	2	`2606:4700:3033::ac43:c9eb, 2606:4700:3036::6815:4ce2`
NS	2	`moura.ns.cloudflare.com, ulla.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`moura.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (z.nic.work, y.nic.work, x.nic.work...)

Analysis

IP Addresses

tabshift.work resolves to four IP addresses: 104.21.76.226, 172.67.201.235, 2606:4700:3033::ac43:c9eb and 2606:4700:3036::6815:4ce2.

Additional host names — phim(0x736578).online, careerinsightscentral.shop, smartboxstore.com and two others — share IP numbers with tabshift.work.

Name Servers

tabshift.work is delegated to two name servers: moura.ns.cloudflare.com and ulla.ns.cloudflare.com.

tabshift.work shares its name server setup with other domains, including megacoast.site, nfsoi.org, ultraaction.site and two others.

tabshift.work partially shares its NS delegation with several other domains, including 3dbetjaya7.xyz, swissmoda.com, posishell.com.au and two others.

These name servers regularly co-occur with the name servers clay.ns.cloudflare.com, becky.ns.cloudflare.com and donna.ns.cloudflare.com.

Host names with 6 IP numbers:

moura.ns.cloudflare.com resolves to 108.162.195.217, 162.159.44.217, 172.64.35.217 and 3 other IP addresses.

ulla.ns.cloudflare.com resolves to 108.162.192.233, 172.64.32.233, 173.245.58.233 and 3 other IP addresses.

tabshift.work - robtex.com

tabshift.work

work