ddocument.work - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`ddocument.work`

DNSSEC	🔒 Signed (DS record present)
A	2606:4700:3033::ac43:916e^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:3183^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.49.131^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.145.110^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`arya.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a46^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arya.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c046^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`arya.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2046^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`arya.ns.cloudflare.com`
		A	108.162.192.70^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arya.ns.cloudflare.com`
		A	172.64.32.70^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arya.ns.cloudflare.com`
		A	173.245.58.70^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`arya.ns.cloudflare.com`
NS	`brad.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b69^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c169^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brad.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2169^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brad.ns.cloudflare.com`
		A	108.162.193.105^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	172.64.33.105^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
		A	173.245.59.105^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brad.ns.cloudflare.com`
TXT	`google-site-verification=41U6dW23fHapQNoHhcH1IoJS2QML8SsCJJVMyUwPtGA`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.49.131, 172.67.145.110
		IPv6 hints	2606:4700:3033::ac43:916e, 2606:4700:3034::6815:3183
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=65, name=cloudflare-ech.com
SOA	`arya.ns.cloudflare.com`dns@cloudflare.com serial=2419367668

`work`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.nic.work` ⭐
	NS	`b.nic.work`
	NS	`c.nic.work`
	NS	`x.nic.work`
	NS	`y.nic.work`
	NS	`z.nic.work`
	SOA	`a.nic.work`admin@tldns.godaddy serial=1794384633

⚠️ On DNS blocklist: spam-tlds

Same first word

ddocument.work

ddocument.com

ddocument.fun

ddocument.pages.dev

Similar names

documentd.com

dmundotec.workers.dev

Previous names

Next names

DNS History

10 records (6 active, 4 former)

●NSarya.ns.cloudflare.com2026-08-19 → 2026-11-11 · 2 obs

● 2026-08-19 14:07:12
● 2026-11-11 08:59:56

●NSbrad.ns.cloudflare.com2026-08-19 → 2026-11-11 · 2 obs

● 2026-08-19 14:07:12
● 2026-11-11 08:59:56

●A104.21.49.1312026-09-22 → 2026-11-11 · 3 obs

○ 2026-08-19 14:07:12
● 2026-09-22 06:51:10
● 2026-11-11 08:59:56

●A172.67.145.1102026-09-22 → 2026-11-11 · 3 obs

○ 2026-08-19 14:07:12
● 2026-09-22 06:51:10
● 2026-11-11 08:59:56

○A188.114.96.02026-08-19 → 2026-08-19 · 3 obs

● 2026-08-19 14:07:12
○ 2026-09-22 06:51:10
○ 2026-11-11 08:59:56

○A188.114.97.02026-08-19 → 2026-08-19 · 3 obs

● 2026-08-19 14:07:12
○ 2026-09-22 06:51:10
○ 2026-11-11 08:59:56

●A2606:4700:3033::ac43:916e2026-09-22 → 2026-11-11 · 3 obs

○ 2026-08-19 14:07:12
● 2026-09-22 06:51:10
● 2026-11-11 08:59:56

●A2606:4700:3034::6815:31832026-09-22 → 2026-11-11 · 3 obs

○ 2026-08-19 14:07:12
● 2026-09-22 06:51:10
● 2026-11-11 08:59:56

○A2a06:98c1:3120::2026-08-19 → 2026-08-19 · 3 obs

● 2026-08-19 14:07:12
○ 2026-09-22 06:51:10
○ 2026-11-11 08:59:56

○A2a06:98c1:3121::2026-08-19 → 2026-08-19 · 3 obs

● 2026-08-19 14:07:12
○ 2026-09-22 06:51:10
○ 2026-11-11 08:59:56

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
work	a.nic.work, b.nic.work, c.nic.work, x.nic.work...	12 records
ddocument.work	arya.ns.cloudflare.com, brad.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.105

NS records: arya.ns.cloudflare.com, brad.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 845ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.49.131, 172.67.145.110`
AAAA	2	`2606:4700:3034::6815:3183, 2606:4700:3033::ac43:916e`
NS	2	`arya.ns.cloudflare.com, brad.ns.cloudflare.com`
TXT	1	`google-site-verification=41U6dW23fHapQNo`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`arya.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.work, a.nic.work, b.nic.work...)

Analysis

IP Addresses

ddocument.work has four IP addresses: 104.21.49.131, 172.67.145.110, 2606:4700:3033::ac43:916e and 2606:4700:3034::6815:3183.

hometgel.com, millbarn.uk, www.rik-s.ru plus two other host names have IP numbers in common with ddocument.work.

Name Servers

ddocument.work is served by two delegated name servers, arya.ns.cloudflare.com and brad.ns.cloudflare.com.

The name server configuration of ddocument.work is shared with other domains, for instance monaghen.com, swissense.de, netblazr.com and two others.

ddocument.work partially shares its NS delegation with several other domains, including huangguomagaiduanju.net.cn, mta-sts-openjij.pages.dev, procuraops.com and two others.

These name servers often co-occur with the name servers serenity.ns.cloudflare.com.

Hosts with 6 IP addresses each:

arya.ns.cloudflare.com carries IP addresses 108.162.192.70, 172.64.32.70 and 173.245.58.70, with 3 other addresses beyond those.

brad.ns.cloudflare.com carries IP addresses 108.162.193.105, 172.64.33.105 and 173.245.59.105, with 3 other addresses beyond those.