attackonfloki.world - dns.ninja

`attackonfloki.world`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::6815:1c03^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::ac43:aa1c^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.28.3^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.170.28^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`james.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3bb2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`james.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1b2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`james.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21b2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`james.ns.cloudflare.com`
		A	108.162.193.178^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`james.ns.cloudflare.com`
		A	172.64.33.178^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`james.ns.cloudflare.com`
		A	173.245.59.178^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`james.ns.cloudflare.com`
NS	`magdalena.ns.cloudflare.com`
		A	2606:4700:50::a29f:2608^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`magdalena.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c208^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`magdalena.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2208^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`magdalena.ns.cloudflare.com`
		A	108.162.194.8^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`magdalena.ns.cloudflare.com`
		A	162.159.38.8^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`magdalena.ns.cloudflare.com`
		A	172.64.34.8^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`magdalena.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.28.3, 172.67.170.28
		IPv6 hints	2606:4700:3032::6815:1c03, 2606:4700:3032::ac43:aa1c
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=206, name=cloudflare-ech.com
SOA	`james.ns.cloudflare.com`dns@cloudflare.com serial=2409610712

`world`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.world` ⭐
	NS	`v0n1.nic.world`
	NS	`v0n2.nic.world`
	NS	`v0n3.nic.world`
	NS	`v2n0.nic.world`
	NS	`v2n1.nic.world`
	SOA	`v0n0.nic.world`hostmaster@donuts.email serial=1785919257

⚠️ On DNS blocklist: tif
⚠️ On DNS blocklist: spam-tlds

Same first word

attackonfloki.world

DNS History

14 records (6 active, 8 former)

●NSjames.ns.cloudflare.com2026-07-28 → 2026-08-05 · 2 obs

● 2026-07-28 12:48:56
● 2026-08-05 08:50:24

●NSmagdalena.ns.cloudflare.com2026-07-28 → 2026-08-05 · 2 obs

● 2026-07-28 12:48:56
● 2026-08-05 08:50:24

●A104.21.28.32026-08-01 → 2026-08-05 · 3 obs

○ 2026-07-28 14:20:54
● 2026-08-01 04:35:26
● 2026-08-05 08:50:24

●A172.67.170.282026-08-01 → 2026-08-05 · 3 obs

○ 2026-07-28 14:20:54
● 2026-08-01 04:35:26
● 2026-08-05 08:50:24

○A188.114.96.02026-07-28 → 2026-07-28 · 4 obs

○ 2026-07-28 12:48:56
● 2026-07-28 14:20:54
○ 2026-08-01 04:35:26
○ 2026-08-05 08:50:24

○A188.114.96.42026-07-28 → 2026-07-28 · 3 obs

● 2026-07-28 12:48:56
○ 2026-07-28 14:20:54
○ 2026-08-05 08:50:24

○A188.114.97.02026-07-28 → 2026-07-28 · 4 obs

○ 2026-07-28 12:48:56
● 2026-07-28 14:20:54
○ 2026-08-01 04:35:26
○ 2026-08-05 08:50:24

○A188.114.97.42026-07-28 → 2026-07-28 · 3 obs

● 2026-07-28 12:48:56
○ 2026-07-28 14:20:54
○ 2026-08-05 08:50:24

●A2606:4700:3032::6815:1c032026-08-01 → 2026-08-05 · 3 obs

○ 2026-07-28 14:20:54
● 2026-08-01 04:35:26
● 2026-08-05 08:50:24

●A2606:4700:3032::ac43:aa1c2026-08-01 → 2026-08-05 · 3 obs

○ 2026-07-28 14:20:54
● 2026-08-01 04:35:26
● 2026-08-05 08:50:24

○A2a06:98c1:3120::2026-07-28 → 2026-07-28 · 4 obs

○ 2026-07-28 12:48:56
● 2026-07-28 14:20:54
○ 2026-08-01 04:35:26
○ 2026-08-05 08:50:24

○A2a06:98c1:3120::42026-07-28 → 2026-07-28 · 3 obs

● 2026-07-28 12:48:56
○ 2026-07-28 14:20:54
○ 2026-08-05 08:50:24

○A2a06:98c1:3121::2026-07-28 → 2026-07-28 · 4 obs

○ 2026-07-28 12:48:56
● 2026-07-28 14:20:54
○ 2026-08-01 04:35:26
○ 2026-08-05 08:50:24

○A2a06:98c1:3121::42026-07-28 → 2026-07-28 · 3 obs

● 2026-07-28 12:48:56
○ 2026-07-28 14:20:54
○ 2026-08-05 08:50:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
world	v2n1.nic.world, v0n0.nic.world, v0n3.nic.world, v0n1.nic.world...	12 records
attackonfloki.world	james.ns.cloudflare.com, magdalena.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.178

NS records: james.ns.cloudflare.com, magdalena.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attackonfloki.world (unsigned zone)

⏱️ Timing

Total: 642ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.170.28, 104.21.28.3`
AAAA	2	`2606:4700:3032::6815:1c03, 2606:4700:3032::ac43:aa1c`
NS	2	`james.ns.cloudflare.com, magdalena.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`james.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v2n1.nic.world, v2n0.nic.world, v0n3.nic.world...)

Analysis

IP Addresses

attackonfloki.world points to the four IP addresses 104.21.28.3, 172.67.170.28, 2606:4700:3032::6815:1c03 and 2606:4700:3032::ac43:aa1c.

mx5.isikhnas.com, n165sdzn.878997.com, k3.redboda.com and two other host names share IP numbers with attackonfloki.world.

Name Servers

attackonfloki.world uses two name servers for its delegation: james.ns.cloudflare.com and magdalena.ns.cloudflare.com.

attackonfloki.world uses the same name servers as several other domains — among them bubacrosswords.com, theatomicwallet.com, novrila.com and two more.

There is at least partial name server overlap between attackonfloki.world and other domains — arctus.io, perfectingsystems.eu, 9idrslot138.xyz and two more among them.

The name servers jason.ns.cloudflare.com, vivienne.ns.cloudflare.com and melinda.ns.cloudflare.com are often found in combination with these name servers.

Hostnames that resolve to 6 IP addresses:

Hostname james.ns.cloudflare.com directs to 108.162.193.178, 172.64.33.178 and 173.245.59.178 along with 3 other IP addresses.

Hostname magdalena.ns.cloudflare.com directs to 108.162.194.8, 162.159.38.8 and 172.64.34.8 along with 3 other IP addresses.