Skip to content

Hostname

elfin.works

Last fetched

elfin.works resolves to 1 IPv4 address operated by AS34011 in DE. WHOIS lists iana:1390 as the registrar.

Nutrition Label

WHISPER CANON · elfin.worksRouting diversity1.5/10Peering density1.2/10MOAS conflict✓ noneThreat-feed listings10.0/10WHOIS transparency10.0/10Resolver footprint3.2/10canon.whisper.security/host/elfin.works

Resolution chain

elfin.works resolves to 1 distinct IPv4 address via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
176.28.32.46176.28.32.0/22AS34011—DE

WHOIS identity

Registrar
iana:1390
Organization
elfin
Contact emails

Subdomains

1 observed subdomain of elfin.works.

Subdomain
www.elfin.works

Web-graph footprint

Distinct hostnames that link to or from elfin.works in the public web crawl.

1 site linked to from this hostname.

Sample inbound links

Sample outbound links

Threat posture

History

Mail and authentication

MX records

SPF policy

2 SPF mechanisms authorising senders for elfin.works.

MechanismTarget
SPF_INCLUDEspf.protection.outlook.com
SPF_IP94.79.174.114

Related pages

Pivot deeper into the graph from elfin.works.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "elfin.works"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.