attack.ch - dns.ninja

attack.ch

DNSSEC⚠️ Not signed
A2a05:d014:5d5:ad00:1bb2:1ef1:a62f:4799🇩🇪 Amazon2a05:d014:400::/38 AMAZON AWS
A18.196.126.78🇩🇪 Amazon18.196.0.0/15 EC2 FRA prefix
NSmaggie.goeast.ch
A2001:67c:1bc::100🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast
PTRns1.comteam.at
PTRsec1.rcode0.at
PTRns3.arcade.ch
PTRns1.dynanet.ch
PTRmaggie.goeast.ch
PTRsec1.rcode0.com
PTRsec1.rcode0.eu
PTRns2.is-fun.net
PTRns1.nic53.net
PTRsec1.rcode0.net
PTRsec.rcode0.net
PTRns1.vaiadigital.net
PTRb.itconsult-dns.org
PTRsec1.rcode0.org
PTRc.ns.unihost.eu
A192.174.68.100🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net
PTRns1.comteam.at
PTRns1.ebit.at
PTRsec1.rcode0.at
PTRns3.arcade.ch
PTRns1.dynanet.ch
PTRmaggie.goeast.ch
PTRns1.cid.com
PTRsec1.rcode0.com
PTRsec1.rcode0.eu
PTRns2.is-fun.net
PTRns1.nic53.net
PTRsec1.rcode0.net
PTRsec.rcode0.net
PTRns1.vaiadigital.net
PTRb.itconsult-dns.org
PTRsec1.rcode0.org
PTRc.ns.unihost.eu
NShomer.goeast.ch
A2001:67c:10b8::100🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net
PTRns2.comteam.at
PTRsec2.rcode0.at
PTRns3.arcade.ch
PTRns2.dynanet.ch
PTRhomer.goeast.ch
PTRlisa.goeast.com
PTRsec2.rcode0.com
PTRns2.nic53.de
PTRsec2.rcode0.eu
PTRsec2.rcode0.net
PTRsec.rcode0.net
PTRns2.vaiadigital.net
PTRsec2.rcode0.org
PTRd.ns.unihost.eu
PTRd.itconsult-dns.co.uk
A176.97.158.100🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net
PTRns2.comteam.at
PTRns2.ebit.at
PTRsec2.rcode0.at
PTRns3.arcade.ch
PTRns2.dynanet.ch
PTRhomer.goeast.ch
PTRlisa.goeast.com
PTRsec2.rcode0.com
PTRns2.cid.de
PTRns2.nic53.de
PTRsec2.rcode0.eu
PTRsec2.rcode0.net
PTRsec.rcode0.net
PTRns2.vaiadigital.net
PTRsec2.rcode0.org
PTRd.ns.unihost.eu
PTRd.itconsult-dns.co.uk
MXmx01.eu.mailspec.com
A163.172.108.133🇫🇷 AS12876163.172.0.0/16 Scaleway Paris, France
PTRmx01.eu.mailspec.com
MXmx02.eu.mailspec.com
A163.172.52.103🇫🇷 AS12876163.172.0.0/16 Scaleway Paris, France
PTRmx02.eu.mailspec.com
TXTv=spf1 include:_spf.goeast.ch -all
SOAmaggie.goeast.chpostmaster@goeast.ch 2025-07-07 #2

ch

DNSSEC🔒 Signed (DS record present)
NSa.nic.ch
NSb.nic.ch
NSd.nic.ch
NSe.nic.ch
NSf.nic.ch
SOAa.nic.chdns-operation@switch.ch 2026-06-04 #6

Same first word

Similar names

DNS History

8 records (6 active, 2 former)

20162017201820192020202120222023202420252026NShomer.goeast.chmaggie.goeast.chMXmx01.eu.mailspec.commx02.eu.mailspec.commail.goeast.chA18.196.126.782a05:d014:5d5:ad00:1bb2:1ef1:a62f:479991.222.86.6
NShomer.goeast.ch2015-05-27 → 2026-06-04 · 2 obs
● 2015-05-27 01:05:26
● 2026-06-04 01:20:10
NSmaggie.goeast.ch2015-05-27 → 2026-06-04 · 2 obs
● 2015-05-27 01:05:26
● 2026-06-04 01:20:10
MXmail.goeast.ch2015-05-27 → 2017-03-20 · 4 obs
● 2015-05-27 01:05:26
● 2017-03-20 02:48:46
○ 2026-03-16 07:05:32
○ 2026-06-04 01:20:10
MXmx01.eu.mailspec.com2026-03-16 → 2026-06-04 · 3 obs
○ 2017-03-20 02:48:46
● 2026-03-16 07:05:32
● 2026-06-04 01:20:10
MXmx02.eu.mailspec.com2026-03-16 → 2026-06-04 · 3 obs
○ 2017-03-20 02:48:46
● 2026-03-16 07:05:32
● 2026-06-04 01:20:10
A18.196.126.782026-03-16 → 2026-06-04 · 3 obs
○ 2017-03-20 02:48:46
● 2026-03-16 07:05:32
● 2026-06-04 01:20:10
A2a05:d014:5d5:ad00:1bb2:1ef1:a62f:47992026-03-16 → 2026-06-04 · 3 obs
○ 2017-03-20 02:48:46
● 2026-03-16 07:05:32
● 2026-06-04 01:20:10
A91.222.86.62015-05-27 → 2017-03-20 · 4 obs
● 2015-05-27 01:05:26
● 2017-03-20 02:48:46
○ 2026-03-16 07:05:32
○ 2026-06-04 01:20:10

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
chf.nic.ch, a.nic.ch, d.nic.ch, b.nic.ch...-
attack.chhomer.goeast.ch, maggie.goeast.ch2 records

✅ Authoritative Response

Server:176.97.158.100

NS records: homer.goeast.ch, maggie.goeast.ch

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attack.ch (unsigned zone)

⏱️ Timing

Total: 2587ms | Queries: -

📄 Records

TypeCountSample Data
A118.196.126.78
AAAA12a05:d014:5d5:ad00:1bb2:1ef1:a62f:4799
NS2maggie.goeast.ch, homer.goeast.ch
MX2mx01.eu.mailspec.com (pri: 10), mx02.eu.mailspec.com (pri: 10)
TXT1v=spf1 include:_spf.goeast.ch -all
SOA1maggie.goeast.ch postmaster.goeast.ch

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (maggie.goeast.ch, maggie.goeast.ch)

Analysis

IP Addresses

attack.ch points to two IP numbers: 18.196.126.78 and 2a05:d014:5d5:ad00:1bb2:1ef1:a62f:4799.

Additional host names — caratello.ch, center-sonnenhof.ch, swissloop.at and two others — share IP numbers with attack.ch.

Name Servers

attack.ch uses two name servers for its delegation: homer.goeast.ch and maggie.goeast.ch.

attack.ch shares its name server setup with other domains, including elastotec.ch, venturelab.ch, echinaforce.co.uk and two others.

attack.ch partially shares its NS delegation with several other domains, including swissloop.com, siiag.ch, richle.com and two others.

These name servers often co-occur with the name servers lisa.goeast.com.

The two host names homer.goeast.ch and maggie.goeast.ch each have a pair of IP addresses: homer.goeast.ch has 176.97.158.100 and 2001:67c:10b8::100, and maggie.goeast.ch has 192.174.68.100 and 2001:67c:1bc::100.

Mail Servers

attack.ch has two mail servers: mx01.eu.mailspec.com and mx02.eu.mailspec.com.

attack.ch shares the same mail server setup as other domains, including avogel.si, queer-lake.net, thewater.ch and two others.

attack.ch shares mail servers — at least in part — with other domains, including avogel.it, zeitgarten.ch, avogel.ie and two others.

mx01.eu.mailspec.com resolves to 163.172.108.133. mx02.eu.mailspec.com resolves to 163.172.52.103. Both host names point to a single IP number.