duc.work - dns.ninja

duc.work

DNSSEC⚠️ Not signed
A2606:4700:3033::6815:1ee6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::ac43:adf6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.30.230Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.173.246πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NShans.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bafπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
A2803:f800:50::6ca2:c1afπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRhans.ns.cloudflare.com
A2a06:98c1:50::ac40:21afπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRhans.ns.cloudflare.com
A108.162.193.175πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
A172.64.33.175πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
A173.245.59.175πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
NSmay.ns.cloudflare.com
A2606:4700:50::adf5:3a87πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmay.ns.cloudflare.com
A2803:f800:50::6ca2:c087πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmay.ns.cloudflare.com
A2a06:98c1:50::ac40:2087πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmay.ns.cloudflare.com
A108.162.192.135πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmay.ns.cloudflare.com
A172.64.32.135πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmay.ns.cloudflare.com
A173.245.58.135πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmay.ns.cloudflare.com
MXmx1.larksuite.com ⭐
A18.139.153.173πŸ‡ΈπŸ‡¬ Amazon18.138.0.0/15 EC2 SIN prefix
PTRec2-18-139-153-173.ap-southeast-1.compute.amazonaws.com
MXmx2.larksuite.com(5)
A18.139.153.173πŸ‡ΈπŸ‡¬ Amazon18.138.0.0/15 EC2 SIN prefix
PTRec2-18-139-153-173.ap-southeast-1.compute.amazonaws.com
MXmx3.larksuite.com(10)
A18.139.153.173πŸ‡ΈπŸ‡¬ Amazon18.138.0.0/15 EC2 SIN prefix
PTRec2-18-139-153-173.ap-southeast-1.compute.amazonaws.com
A101.126.58.223πŸ‡¨πŸ‡³ VOLCANO-ENGINE101.126.56.0/21 China Internet Network Information Center Floor1, Building No.1 C/-Chinese Academy of Sciences 4, South 4th Street Haidian District,
A122.14.230.154πŸ‡¨πŸ‡³ CHINAMOBILE-CN122.14.224.0/20
TXTv=spf1 +include:spf.onlarksuite.com -all
TXTverification-code-site-App_lark=sxHkrIjSRLJflU8oUK0m
TXTverification-code-site-App_lark=wfoZf4e6Cha1zkAAQ1wQ
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.30.230, 172.67.173.246
IPv6 hints2606:4700:3033::6815:1ee6, 2606:4700:3033::ac43:adf6
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=53, name=cloudflare-ech.com
SOAhans.ns.cloudflare.comdns@cloudflare.com serial=2407626069

work

DNSSECπŸ”’ Signed (DS record present)
NSa.nic.work ⭐
NSb.nic.work
NSc.nic.work
NSx.nic.work
NSy.nic.work
NSz.nic.work
SOAa.nic.workadmin@tldns.godaddy serial=1785526205
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

15 records (9 active, 6 former)

NShans.ns.cloudflare.commay.ns.cloudflare.comMXmx1.larksuite.commx2.larksuite.commx3.larksuite.comA104.21.30.230172.67.173.2462606:4700:3033::6815:1ee62606:4700:3033::ac43:adf6188.114.96.0188.114.97.02606:4700:3030::6815:1ee62606:4700:3031::ac43:adf62a06:98c1:3120::2a06:98c1:3121::
●NShans.ns.cloudflare.com2026-05-06 β†’ 2026-07-31 Β· 2 obs
● 2026-05-06 18:30:40
● 2026-07-31 20:08:54
●NSmay.ns.cloudflare.com2026-05-06 β†’ 2026-07-31 Β· 2 obs
● 2026-05-06 18:30:40
● 2026-07-31 20:08:54
●MXmx1.larksuite.com2026-05-06 β†’ 2026-07-31 Β· 2 obs
● 2026-05-06 18:30:40
● 2026-07-31 20:08:54
●MXmx2.larksuite.com2026-05-06 β†’ 2026-07-31 Β· 2 obs
● 2026-05-06 18:30:40
● 2026-07-31 20:08:54
●MXmx3.larksuite.com2026-05-06 β†’ 2026-07-31 Β· 2 obs
● 2026-05-06 18:30:40
● 2026-07-31 20:08:54
●A104.21.30.2302026-05-06 β†’ 2026-07-31 Β· 6 obs
● 2026-05-06 18:30:40
● 2026-06-16 02:22:36
β—‹ 2026-06-18 21:08:54
● 2026-07-19 10:35:30
β—‹ 2026-07-30 05:09:38
● 2026-07-31 20:08:54
●A172.67.173.2462026-05-06 β†’ 2026-07-31 Β· 6 obs
● 2026-05-06 18:30:40
● 2026-06-16 02:22:36
β—‹ 2026-06-18 21:08:54
● 2026-07-19 10:35:30
β—‹ 2026-07-30 05:09:38
● 2026-07-31 20:08:54
β—‹A188.114.96.02026-06-18 β†’ 2026-07-30 Β· 5 obs
β—‹ 2026-06-16 02:22:36
● 2026-06-18 21:08:54
β—‹ 2026-07-19 10:35:30
● 2026-07-30 05:09:38
β—‹ 2026-07-31 20:08:54
β—‹A188.114.97.02026-06-18 β†’ 2026-07-30 Β· 5 obs
β—‹ 2026-06-16 02:22:36
● 2026-06-18 21:08:54
β—‹ 2026-07-19 10:35:30
● 2026-07-30 05:09:38
β—‹ 2026-07-31 20:08:54
β—‹A2606:4700:3030::6815:1ee62026-05-06 β†’ 2026-06-16 Β· 4 obs
● 2026-05-06 18:30:40
● 2026-06-16 02:22:36
β—‹ 2026-06-18 21:08:54
β—‹ 2026-07-31 20:08:54
β—‹A2606:4700:3031::ac43:adf62026-05-06 β†’ 2026-06-16 Β· 4 obs
● 2026-05-06 18:30:40
● 2026-06-16 02:22:36
β—‹ 2026-06-18 21:08:54
β—‹ 2026-07-31 20:08:54
●A2606:4700:3033::6815:1ee62026-07-19 β†’ 2026-07-31 Β· 4 obs
β—‹ 2026-06-18 21:08:54
● 2026-07-19 10:35:30
β—‹ 2026-07-30 05:09:38
● 2026-07-31 20:08:54
●A2606:4700:3033::ac43:adf62026-07-19 β†’ 2026-07-31 Β· 4 obs
β—‹ 2026-06-18 21:08:54
● 2026-07-19 10:35:30
β—‹ 2026-07-30 05:09:38
● 2026-07-31 20:08:54
β—‹A2a06:98c1:3120::2026-06-18 β†’ 2026-07-30 Β· 5 obs
β—‹ 2026-06-16 02:22:36
● 2026-06-18 21:08:54
β—‹ 2026-07-19 10:35:30
● 2026-07-30 05:09:38
β—‹ 2026-07-31 20:08:54
β—‹A2a06:98c1:3121::2026-06-18 β†’ 2026-07-30 Β· 5 obs
β—‹ 2026-06-16 02:22:36
● 2026-06-18 21:08:54
β—‹ 2026-07-19 10:35:30
● 2026-07-30 05:09:38
β—‹ 2026-07-31 20:08:54

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
worka.nic.work, b.nic.work, c.nic.work, x.nic.work...12 records
duc.workhans.ns.cloudflare.com, may.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.32.135

NS records: hans.ns.cloudflare.com, may.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for duc.work (unsigned zone)

⏱️ Timing

Total: 1302ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.173.246, 104.21.30.230
AAAA22606:4700:3033::6815:1ee6, 2606:4700:3033::ac43:adf6
NS2hans.ns.cloudflare.com, may.ns.cloudflare.com
MX3mx1.larksuite.com (pri: 1), mx3.larksuite.com (pri: 10)...
TXT3v=spf1 +include:spf.onlarksuite.com -all, verification-code-site-App_lark=sxHkrIjS...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1hans.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.work, a.nic.work, b.nic.work...)

Analysis

IP Addresses

duc.work directs to four IP numbers, which are 104.21.30.230, 172.67.173.246, 2606:4700:3033::6815:1ee6 and 2606:4700:3033::ac43:adf6.

yaesu.com.tw, chok.pl, hoogland.co.za plus two other host names have IP numbers in common with duc.work.

Name Servers

duc.work is delegated to two name servers: hans.ns.cloudflare.com and may.ns.cloudflare.com.

The name server configuration of duc.work is shared with other domains, for instance aqdm527.com, aqdm514.com, freedreams.org and two others.

There is at least partial name server overlap between duc.work and other domains β€” returntobasis.com, 01299.cfd, shivampaw.com and two more among them.

These name servers are routinely deployed together with the name servers brenda.ns.cloudflare.com.

Hosts with 6 IP addresses each:

hans.ns.cloudflare.com resolves to 108.162.193.175, 172.64.33.175, 173.245.59.175 and 3 other IP addresses.

may.ns.cloudflare.com resolves to 108.162.192.135, 172.64.32.135, 173.245.58.135 and 3 other IP addresses.

Mail Servers

Incoming mail for duc.work is delivered via three mail servers: mx1.larksuite.com, mx2.larksuite.com and mx3.larksuite.com.

At least some of the mail servers used by duc.work are shared with other domains: synertec.org, metech.com.vn, wenfu.cn and two others among them.

Host names carrying three IP numbers:

mx3.larksuite.com points to 18.139.153.173, 101.126.58.223 and 122.14.230.154.

Host names resolving to a single IP address:

mx1.larksuite.com points to 18.139.153.173.

mx2.larksuite.com points to 18.139.153.173.

Three host names point to 18.139.153.173: mx3.larksuite.com, mx1.larksuite.com and mx2.larksuite.com.