Skip to content

Hostname

thethief.com

Last fetched

thethief.com resolves to 2 IPv4 addresses operated by CLOUDFLARENET - Cloudflare, Inc. in CA. WHOIS lists iana:1052 as the registrar.

Nutrition Label

WHISPER CANON · thethief.comRouting diversity2.4/10Peering density10.0/10MOAS conflict✓ noneThreat-feed listings10.0/10WHOIS transparency10.0/10Resolver footprint3.2/10canon.whisper.security/host/thethief.com

Resolution chain

thethief.com resolves to 2 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
104.21.93.108104.21.80.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA
172.67.209.60172.67.208.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA

WHOIS identity

Registrar
iana:1052
Organization
integrity brand
Contact emails

Subdomains

12 observed subdomains of thethief.com.

Subdomain
beta.thethief.com
book.thethief.com
cloudflare.thethief.com
demo.thethief.com
giftcard.thethief.com
sst.thethief.com
staging.thethief.com
stagingv2.thethief.com
v2.thethief.com
www.thethief.com

Showing 10 of 12. View all subdomains →

Web-graph footprint

Distinct hostnames that link to or from thethief.com in the public web crawl.

362 sites link to this hostname.

155 sites linked to from this hostname.

Sample inbound links

Sample outbound links

Threat posture

History

Mail and authentication

MX records

SPF policy

22 SPF mechanisms authorising senders for thethief.com.

MechanismTarget
SPF_INCLUDE_spf.google.com
SPF_INCLUDEltxmail.synxis.com
SPF_INCLUDEmailgun.org
SPF_INCLUDEsendgrid.net
SPF_INCLUDEservers.mcsv.net
SPF_INCLUDEspf.protection.outlook.com
SPF_INCLUDEspf.zml0.com
SPF_IP193.183.80.11
SPF_IP193.183.80.12
SPF_IP193.183.80.17
SPF_IP193.183.80.6
SPF_IP199.167.221.225/32
SPF_IP2001:4db8:e004:0:0:0:0:2
SPF_IP2001:67c:1b2c:0:0:0:0:6
SPF_IP2001:67c:1b2c:0:0:0:0:c
SPF_IP2001:67c:1b2c:0:0:0:0:d
SPF_IP2001:67c:1b2c:0:0:0:4:6
SPF_IP213.180.71.108/32
SPF_IP217.10.116.210
SPF_IP62.92.62.113
SPF_IP82.99.18.62/32
SPF_IP89.221.253.184

Related pages

Pivot deeper into the graph from thethief.com.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "thethief.com"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.