Hostname
when.works
Last fetched
when.works resolves to 8 IPv4 addresses operated by AMAZON-02 - Amazon.com, Inc. in IE. WHOIS lists iana:81 as the registrar.
Nutrition Label
Resolution chain
when.works resolves to 8 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.
| IP | Prefix | ASN | Operator | Country |
|---|---|---|---|---|
| 18.161.111.16 | 18.161.104.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | IE |
| 18.161.111.32 | 18.161.104.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | IE |
| 18.161.111.54 | 18.161.104.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | IE |
| 18.161.111.90 | 18.161.104.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | IE |
| 18.172.213.106 | 18.172.208.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | ES |
| 18.172.213.122 | 18.172.208.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | ES |
| 18.172.213.17 | 18.172.208.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | ES |
| 18.172.213.36 | 18.172.208.0/21 | AS16509 | AMAZON-02 - Amazon.com, Inc. | ES |
WHOIS identity
- Registrar
- iana:81
- Organization
- contact privacy inc. customer 1241327859
- Contact emails
Subdomains
8 observed subdomains of when.works.
Web-graph footprint
Distinct hostnames that link to or from when.works in the public web crawl.
20 sites link to this hostname.
Sample inbound links
Threat posture
History
Mail and authentication
MX records
SPF policy
4 SPF mechanisms authorising senders for when.works.
| Mechanism | Target |
|---|---|
| SPF_INCLUDE | email.freshdesk.com |
| SPF_INCLUDE | mail.zendesk.com |
| SPF_INCLUDE | spf.protection.outlook.com |
| SPF_INCLUDE | zoho.eu |
Related pages
Pivot deeper into the graph from when.works.
- IP · 18.161.111.16
- ASN · AS16509AMAZON-02 - Amazon.com, Inc.
- Registrar · iana:81
- Country · IE
- Email · when.works@protecteddomainservices.com
- TLD · .works
- Browse hostnames · wh…
- Glossary · What is a hostname?
- Whisper Internet Directory — home
- Live MOAS conflicts feed
- Threat feed · Spamhaus DROP
- United States internet infrastructure
Cypher and MCP
Reproduce the resolution chain directly against graph.whisper.security:
MATCH (h:HOSTNAME {name: "when.works"})-[:RESOLVES_TO]->(ip:IPV4)
-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
-[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20Or query Whisper from your own LLM workflow via the Whisper MCP server.