attacks.work - dns.ninja

`attacks.work`

DNSSEC	🔒 Signed (DS record present)
A	2606:4700:3036::6815:2f7d^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:93a5^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.47.125^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.147.165^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`rene.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cb4^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rene.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3b4^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rene.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23b4^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rene.ns.cloudflare.com`
		A	108.162.195.180^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rene.ns.cloudflare.com`
		A	162.159.44.180^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rene.ns.cloudflare.com`
		A	172.64.35.180^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rene.ns.cloudflare.com`
NS	`robin.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ada^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0da^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`robin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20da^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`robin.ns.cloudflare.com`
		A	108.162.192.218^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	172.64.32.218^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
		A	173.245.58.218^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`robin.ns.cloudflare.com`
MX	`mxext1.mailbox.org` ⭐
		A	2001:67c:2050:104:0:1:25:1^{🇩🇪 HPLS-AS2001:67c:2050::/48}
			PTR	`mx1.mailbox.org`
		A	80.241.60.212^{🇩🇪 HPLS-AS80.241.60.0/24}
			PTR	`mx1.mailbox.org`
MX	`mxext2.mailbox.org` ⭐
		A	2001:67c:2050:104:0:2:25:1^{🇩🇪 HPLS-AS2001:67c:2050::/48}
			PTR	`mx2.mailbox.org`
		A	80.241.60.215^{🇩🇪 HPLS-AS80.241.60.0/24}
			PTR	`mx2.mailbox.org`
MX	`mxext3.mailbox.org`⁽²⁰⁾
		A	2001:67c:2050:104:0:3:25:1^{🇩🇪 HPLS-AS2001:67c:2050::/48}
			PTR	`mx3.mailbox.org`
		A	80.241.60.216^{🇩🇪 HPLS-AS80.241.60.0/24}
			PTR	`mx3.mailbox.org`
TXT	`v=spf1 include:mailbox.org -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.47.125, 172.67.147.165
		IPv6 hints	2606:4700:3036::6815:2f7d, 2606:4700:3037::ac43:93a5
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=210, name=cloudflare-ech.com
SOA	`rene.ns.cloudflare.com`dns@cloudflare.com serial=2406529454

`work`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.nic.work` ⭐
	NS	`b.nic.work`
	NS	`c.nic.work`
	NS	`x.nic.work`
	NS	`y.nic.work`
	NS	`z.nic.work`
	SOA	`a.nic.work`admin@tldns.godaddy serial=1782046486

Subdomains

www.attacks.work

Same first word

attacks.net

attacks.square7.ch

attacks.cc

attacks.me

attacks.work

attacks.neustar

attacks.website

attacks.com

attacks.ru

Similar names

ttakacs.hu

taskact.com

katscat.ru

atstack.com

stackta.com

tstacka.nz

DNS History

17 records (9 active, 8 former)

●NSrene.ns.cloudflare.com2026-04-02 → 2026-06-21 · 2 obs

● 2026-04-02 03:06:10
● 2026-06-21 13:19:58

●NSrobin.ns.cloudflare.com2026-04-02 → 2026-06-21 · 2 obs

● 2026-04-02 03:06:10
● 2026-06-21 13:19:58

●MXmxext1.mailbox.org2026-04-02 → 2026-06-21 · 2 obs

● 2026-04-02 03:06:10
● 2026-06-21 13:19:58

●MXmxext2.mailbox.org2026-04-02 → 2026-06-21 · 2 obs

● 2026-04-02 03:06:10
● 2026-06-21 13:19:58

●MXmxext3.mailbox.org2026-04-02 → 2026-06-21 · 2 obs

● 2026-04-02 03:06:10
● 2026-06-21 13:19:58

●A104.21.47.1252026-04-21 → 2026-06-21 · 6 obs

○ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-06-14 01:50:52
○ 2026-06-16 15:20:38
● 2026-06-21 11:17:00
● 2026-06-21 13:19:58

○A172.64.80.12026-04-02 → 2026-06-21 · 2 obs

○ 2026-04-02 03:06:10
○ 2026-06-21 13:19:58

●A172.67.147.1652026-04-21 → 2026-06-21 · 6 obs

○ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-06-14 01:50:52
○ 2026-06-16 15:20:38
● 2026-06-21 11:17:00
● 2026-06-21 13:19:58

○A188.114.96.02026-04-02 → 2026-06-16 · 6 obs

● 2026-04-02 03:06:10
○ 2026-04-21 19:26:14
○ 2026-06-14 01:50:52
● 2026-06-16 15:20:38
○ 2026-06-21 11:17:00
○ 2026-06-21 13:19:58

○A188.114.97.02026-04-02 → 2026-06-16 · 6 obs

● 2026-04-02 03:06:10
○ 2026-04-21 19:26:14
○ 2026-06-14 01:50:52
● 2026-06-16 15:20:38
○ 2026-06-21 11:17:00
○ 2026-06-21 13:19:58

○A2606:4700:130:436c:6f75:6466:6c61:72652026-04-02 → 2026-06-21 · 2 obs

○ 2026-04-02 03:06:10
○ 2026-06-21 13:19:58

○A2606:4700:3031::6815:2f7d2026-04-21 → 2026-06-21 · 6 obs

○ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-06-14 01:50:52
○ 2026-06-16 15:20:38
● 2026-06-21 11:17:00
○ 2026-06-21 13:19:58

○A2606:4700:3035::ac43:93a52026-04-21 → 2026-06-21 · 6 obs

○ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-06-14 01:50:52
○ 2026-06-16 15:20:38
● 2026-06-21 11:17:00
○ 2026-06-21 13:19:58

●A2606:4700:3036::6815:2f7d2026-06-21 → 2026-06-21 · 2 obs

○ 2026-06-21 11:17:00
● 2026-06-21 13:19:58

●A2606:4700:3037::ac43:93a52026-06-21 → 2026-06-21 · 2 obs

○ 2026-06-21 11:17:00
● 2026-06-21 13:19:58

○A2a06:98c1:3120::2026-04-02 → 2026-06-16 · 6 obs

● 2026-04-02 03:06:10
○ 2026-04-21 19:26:14
○ 2026-06-14 01:50:52
● 2026-06-16 15:20:38
○ 2026-06-21 11:17:00
○ 2026-06-21 13:19:58

○A2a06:98c1:3121::2026-04-02 → 2026-06-16 · 6 obs

● 2026-04-02 03:06:10
○ 2026-04-21 19:26:14
○ 2026-06-14 01:50:52
● 2026-06-16 15:20:38
○ 2026-06-21 11:17:00
○ 2026-06-21 13:19:58

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
work	b.nic.work, x.nic.work, z.nic.work, c.nic.work...	12 records
attacks.work	rene.ns.cloudflare.com, robin.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.195.180

NS records: rene.ns.cloudflare.com, robin.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 498ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.147.165, 104.21.47.125`
AAAA	2	`2606:4700:3036::6815:2f7d, 2606:4700:3037::ac43:93a5`
NS	2	`rene.ns.cloudflare.com, robin.ns.cloudflare.com`
MX	3	`mxext1.mailbox.org (pri: 10), mxext2.mailbox.org (pri: 10)...`
TXT	1	`v=spf1 include:mailbox.org -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`rene.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (b.nic.work, b.nic.work, x.nic.work...)

Analysis

Hierarchy

attacks.work serves as the parent of www.attacks.work.

IP Addresses

attacks.work has four IP addresses: 104.21.47.125, 172.67.147.165, 2606:4700:3036::6815:2f7d and 2606:4700:3037::ac43:93a5.

Two other host names, along with www.techostartup.center, objcts.com and o2x.net, also share IP numbers with attacks.work.

Name Servers

The NS records for attacks.work delegate to rene.ns.cloudflare.com and robin.ns.cloudflare.com.

attacks.work shares its NS records with other domains, for example allmer-bestattung.at, vja1cheq.workers.dev, mobio.network and two others.

attacks.work has at least partial name server overlap with other domains, such as gaagleplry.com, 994vulkanvegas3.com, corridor.website and two others.

It is common to find these name servers paired with the name servers stella.ns.cloudflare.com.

DNS names with 6 IP addresses:

rene.ns.cloudflare.com maps to 108.162.195.180, 162.159.44.180, 172.64.35.180 and 3 additional IP addresses.

robin.ns.cloudflare.com maps to 108.162.192.218, 172.64.32.218, 173.245.58.218 and 3 additional IP addresses.

Mail Servers

attacks.work has three mail servers: mxext1.mailbox.org, mxext2.mailbox.org and mxext3.mailbox.org.

There is at least a partial MX overlap between attacks.work and other domains, including danielclerc.de, saloncorina.nl, ikator.de and two others.

The hostnames mxext1.mailbox.org, mxext2.mailbox.org and mxext3.mailbox.org each direct to two IP addresses — mxext1.mailbox.org to 80.241.60.212 and 2001:67c:2050:104:0:1:25:1, mxext2.mailbox.org to 80.241.60.215 and 2001:67c:2050:104:0:2:25:1, and mxext3.mailbox.org to 80.241.60.216 and 2001:67c:2050:104:0:3:25:1.