🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`attackmetricx.org`

DNSSEC	⚠️ Not signed
A	2606:4700:3032::ac43:a1ad^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:228d^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.34.141^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.161.173^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`ben.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b67^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ben.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c167^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ben.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2167^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ben.ns.cloudflare.com`
		A	108.162.193.103^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ben.ns.cloudflare.com`
		A	172.64.33.103^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ben.ns.cloudflare.com`
		A	173.245.59.103^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ben.ns.cloudflare.com`
NS	`sara.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a90^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c090^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`sara.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2090^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`sara.ns.cloudflare.com`
		A	108.162.192.144^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
		A	172.64.32.144^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
		A	173.245.58.144^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`sara.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.34.141, 172.67.161.173
		IPv6 hints	2606:4700:3032::ac43:a1ad, 2606:4700:3033::6815:228d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=71, name=cloudflare-ech.com
SOA	`ben.ns.cloudflare.com`dns@cloudflare.com serial=2413999290

`org`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.org.afilias-nst.info` ⭐ ⚠️ Not in parent delegation
	NS	`a2.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`b0.org.afilias-nst.org`
	NS	`b2.org.afilias-nst.org`
	NS	`c0.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`d0.org.afilias-nst.org`
	SOA	`a0.org.afilias-nst.info`hostmaster@donuts.email serial=1791806943

Same first word

attackmetricx.net

attackmetricx.org

attackmetricx.io

attackmetricx.com

Previous names

Next names

DNS History

11 records (11 active, 0 former)

●NSben.ns.cloudflare.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●NSsara.ns.cloudflare.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●MXeforward1.registrar-servers.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●MXeforward2.registrar-servers.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●MXeforward3.registrar-servers.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●MXeforward4.registrar-servers.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●MXeforward5.registrar-servers.com2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●A104.21.34.1412026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●A172.67.161.1732026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●A2606:4700:3032::ac43:a1ad2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

●A2606:4700:3033::6815:228d2026-09-10 → 2026-10-12 · 2 obs

● 2026-09-10 08:55:54
● 2026-10-12 12:25:24

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
org	b2.org.afilias-nst.org, d0.org.afilias-nst.org, b0.org.afilias-nst.org	-
attackmetricx.org	ben.ns.cloudflare.com, sara.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.103

NS records: ben.ns.cloudflare.com, sara.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for attackmetricx.org (unsigned zone)

⏱️ Timing

Total: 597ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.34.141, 172.67.161.173`
AAAA	2	`2606:4700:3033::6815:228d, 2606:4700:3032::ac43:a1ad`
NS	2	`ben.ns.cloudflare.com, sara.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`ben.ns.cloudflare.com dns.cloudflare.com`

Analysis

IP Addresses

attackmetricx.org resolves to four IP addresses: 104.21.34.141, 172.67.161.173, 2606:4700:3032::ac43:a1ad and 2606:4700:3033::6815:228d.

Two other host names, along with gpc260107-90.icu, www.welcomenri.com and muxt.app, also share IP numbers with attackmetricx.org.

Name Servers

attackmetricx.org is delegated to two name servers: ben.ns.cloudflare.com and sara.ns.cloudflare.com.

attackmetricx.org shares its NS records with other domains, for example xn520.pages.dev, betsportw3.com, mauder.xyz and two others.

attackmetricx.org partially shares its NS delegation with several other domains, including (0x6469636b)pigs.com, curie.foundation, jay-8ur.pages.dev and two others.

These name servers are regularly seen alongside sonia.ns.cloudflare.com and peaches.ns.cloudflare.com as name servers.

DNS names with 6 IP addresses:

ben.ns.cloudflare.com resolves to 108.162.193.103, 172.64.33.103, 173.245.59.103 and 3 other IP addresses.

sara.ns.cloudflare.com resolves to 108.162.192.144, 172.64.32.144, 173.245.58.144 and 3 other IP addresses.

Mail Servers

attackmetricx.org is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between attackmetricx.org and other domains, including shapexfitness.com, bestcasinosites.live, meditativemind.ac and two others.

The mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com regularly co-occur with these mail servers.

Host names that point to one IP address:

eforward1.registrar-servers.com points to 162.255.118.51.

eforward2.registrar-servers.com points to 162.255.118.52.

eforward3.registrar-servers.com points to 162.255.118.51.

eforward4.registrar-servers.com points to 162.255.118.52.

eforward5.registrar-servers.com points to 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

eforward2.registrar-servers.com and eforward4.registrar-servers.com are host names that each point to 162.255.118.52 IP addresses.