`crayon.works`

DNSSEC	🔒 Signed (DS record present)
A	2606:4700:3033::ac43:a5f4^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::6815:b73^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.11.115^{Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.165.244^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`amir.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b3e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c13e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`amir.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:213e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`amir.ns.cloudflare.com`
		A	108.162.193.62^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
		A	172.64.33.62^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
		A	173.245.59.62^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amir.ns.cloudflare.com`
NS	`dorthy.ns.cloudflare.com`
		A	2606:4700:50::adf5:3af9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dorthy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0f9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dorthy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20f9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dorthy.ns.cloudflare.com`
		A	108.162.192.249^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dorthy.ns.cloudflare.com`
		A	172.64.32.249^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dorthy.ns.cloudflare.com`
		A	173.245.58.249^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dorthy.ns.cloudflare.com`
MX	`mail.protonmail.ch` ⭐
		A	176.119.200.128^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mail.protonmail.ch`
		A	185.70.42.128^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mail.protonmail.ch`
		A	185.205.70.128^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mail.protonmail.ch`
MX	`mailsec.protonmail.ch`⁽²⁰⁾
		A	176.119.200.129^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.70.42.129^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.205.70.129^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mailsec.protonmail.ch`
TXT	`protonmail-verification=0065f0bca2fe686e0625ca2b03964fd626c4f3c1`
TXT	`v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.11.115, 172.67.165.244
		IPv6 hints	2606:4700:3033::ac43:a5f4, 2606:4700:3035::6815:b73
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=35, name=cloudflare-ech.com
SOA	`amir.ns.cloudflare.com`dns@cloudflare.com serial=2411005685

`works`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.works` ⭐
	NS	`v0n1.nic.works`
	NS	`v0n2.nic.works`
	NS	`v0n3.nic.works`
	NS	`v2n0.nic.works`
	NS	`v2n1.nic.works`
	SOA	`v0n0.nic.works`hostmaster@donuts.email serial=1786044939

Same first word

crayon.hu

crayon.ne.jp

crayon.no

crayon.pl

crayon.ru

crayon.is

crayon.at

crayon.ai

crayon.net

crayon.jobs

crayon.ca

crayon.net.au

crayon.es

crayon.com.mx

crayon.se

crayon.world

crayon.us

crayon.cz

crayon.co.jp

crayon.com

crayon.pk

crayon.works

crayon.cl

crayon.nu

crayon.me

crayon.dk

crayon.as

crayon.or.jp

crayon.co

crayon.cn

crayon.org

crayon.de

crayon.or.kr

crayon.fr

crayon.finance

crayon.be

crayon.in

Similar names

cyrano.ca

conary.org

cyrano.cz

yancor.de

cyrano.co.uk

cyrano.herokuapp.com

ryanco.ca

arycon.de

cyrano.us

yancor.com

nacory.com

conary.com

raycon.gr

raycon.com

raycon.com.au

cyraon.com

ryanco.net

caryon.hu

cayron.com

conray.com

carnoy.net

yancor.us

aycron.com

cyrano.org

cynaro.com

cyrano.de

cyrano.ro

caryon.azurewebsites.net

canory.com

orycan.ru

conary.eu

roycan.gitlab.io

conray.net

cyrano.link

yarcon.com

caryon.eu

ryanco.co.uk

ryanco.org

conary.me

conary.de

ryanco.biz

roycan.com

raycon.org

acorny.com

cyrano.tv

ryanco.com

arynco.com

raycon.co.uk

cynora.de

cyrano.eu

coryan.github.io

yarnco.ru

oraycn.com

carnoy.com.cn

raycon.eu

cyrano.ch

aycron.ai

cyrano.biz

nycaro.de

rynoca.com

acrony.com

coyarn.ch

arycon.com

canyro.com

raycon.de

raycon.info

carony.com

cyanor.com

raycon.us

cyrano.lu

caryon.com

arcyon.be

acorny.io

raycon.myshopify.com

DNS History

18 records (8 active, 10 former)

●NSamir.ns.cloudflare.com2026-06-10 → 2026-08-06 · 3 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
● 2026-08-06 20:15:44

●NSdorthy.ns.cloudflare.com2026-06-10 → 2026-08-06 · 3 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
● 2026-08-06 20:15:44

○NSns1.crayon.works2016-12-10 → 2017-11-21 · 4 obs

● 2016-12-10 23:43:30
● 2017-11-21 01:50:44
○ 2026-06-10 05:53:46
○ 2026-08-06 20:15:44

○NSns1.ivyro.net2016-12-10 → 2017-11-21 · 4 obs

● 2016-12-10 23:43:30
● 2017-11-21 01:50:44
○ 2026-06-10 05:53:46
○ 2026-08-06 20:15:44

○NSns2.ivyro.net2016-12-10 → 2017-11-21 · 4 obs

● 2016-12-10 23:43:30
● 2017-11-21 01:50:44
○ 2026-06-10 05:53:46
○ 2026-08-06 20:15:44

○NSns3.ivyro.net2016-12-10 → 2017-11-21 · 4 obs

● 2016-12-10 23:43:30
● 2017-11-21 01:50:44
○ 2026-06-10 05:53:46
○ 2026-08-06 20:15:44

○MXmail.crayon.works2016-12-10 → 2017-11-21 · 4 obs

● 2016-12-10 23:43:30
● 2017-11-21 01:50:44
○ 2026-06-10 05:53:46
○ 2026-08-06 20:15:44

●MXmail.protonmail.ch2026-06-10 → 2026-08-06 · 3 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
● 2026-08-06 20:15:44

●MXmailsec.protonmail.ch2026-06-10 → 2026-08-06 · 3 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
● 2026-08-06 20:15:44

●A104.21.11.1152026-07-01 → 2026-08-06 · 3 obs

○ 2026-06-10 05:53:46
● 2026-07-01 15:14:24
● 2026-08-06 20:15:44

○A115.68.95.1452016-12-10 → 2017-11-21 · 4 obs

● 2016-12-10 23:43:30
● 2017-11-21 01:50:44
○ 2026-06-10 05:53:46
○ 2026-08-06 20:15:44

●A172.67.165.2442026-07-01 → 2026-08-06 · 3 obs

○ 2026-06-10 05:53:46
● 2026-07-01 15:14:24
● 2026-08-06 20:15:44

○A188.114.96.02026-06-10 → 2026-06-10 · 4 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
○ 2026-07-01 15:14:24
○ 2026-08-06 20:15:44

○A188.114.97.02026-06-10 → 2026-06-10 · 4 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
○ 2026-07-01 15:14:24
○ 2026-08-06 20:15:44

●A2606:4700:3033::ac43:a5f42026-07-01 → 2026-08-06 · 3 obs

○ 2026-06-10 05:53:46
● 2026-07-01 15:14:24
● 2026-08-06 20:15:44

●A2606:4700:3035::6815:b732026-07-01 → 2026-08-06 · 3 obs

○ 2026-06-10 05:53:46
● 2026-07-01 15:14:24
● 2026-08-06 20:15:44

○A2a06:98c1:3120::2026-06-10 → 2026-06-10 · 4 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
○ 2026-07-01 15:14:24
○ 2026-08-06 20:15:44

○A2a06:98c1:3121::2026-06-10 → 2026-06-10 · 4 obs

○ 2017-11-21 01:50:44
● 2026-06-10 05:53:46
○ 2026-07-01 15:14:24
○ 2026-08-06 20:15:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
works	v0n0.nic.works, v0n1.nic.works, v0n2.nic.works, v0n3.nic.works...	12 records
crayon.works	amir.ns.cloudflare.com, dorthy.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.32.249

NS records: amir.ns.cloudflare.com, dorthy.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 558ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.11.115, 172.67.165.244`
AAAA	2	`2606:4700:3033::ac43:a5f4, 2606:4700:3035::6815:b73`
NS	2	`amir.ns.cloudflare.com, dorthy.ns.cloudflare.com`
MX	2	`mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)`
TXT	2	`protonmail-verification=0065f0bca2fe686e, v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`amir.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.works, v0n0.nic.works, v0n1.nic.works...)

Analysis

IP Addresses

crayon.works points to the four IP addresses 104.21.11.115, 172.67.165.244, 2606:4700:3033::ac43:a5f4 and 2606:4700:3035::6815:b73.

gooey.ai, www.chinaantsz.com, allo-impot.fr and two other host names share IP numbers with crayon.works.

Name Servers

crayon.works is delegated to two name servers: amir.ns.cloudflare.com and dorthy.ns.cloudflare.com.

crayon.works uses the same name servers as several other domains — among them topersatzteile.at, autonosat24.fi, newhanfu.com and two more.

There is at least partial name server overlap between crayon.works and other domains — chinafxcp.com, hg668hh.com, rokamedia.co and two more among them.

These name servers frequently co-occur with the name servers rayden.ns.cloudflare.com and abdullah.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

amir.ns.cloudflare.com resolves to 108.162.193.62, 172.64.33.62, 173.245.59.62 and 3 other IP addresses.

dorthy.ns.cloudflare.com resolves to 108.162.192.249, 172.64.32.249, 173.245.58.249 and 3 other IP addresses.

Mail Servers

Mail for crayon.works is handled by two mail servers — mail.protonmail.ch and mailsec.protonmail.ch.

crayon.works uses an identical mail server configuration to several other domains — among them nyanyan.moe, finnv.com, melord.net and two more.

crayon.works has at least partial mail server overlap with other domains such as glenmuirtrust.com, cillianbc.com, puzik.cz and two more.

mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128. mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129. Both hosts resolve to three IP numbers.

crayon.works - robtex.com

crayon.works

works

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`crayon.works`

`works`