attacks.work - robtex.com

attacks.work

DNSSECπŸ”’ Signed (DS record present)
A2606:4700:3031::6815:2f7dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3035::ac43:93a5πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.47.125Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.147.165πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSrene.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2cb4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrene.ns.cloudflare.com
A2803:f800:50::6ca2:c3b4πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrene.ns.cloudflare.com
A2a06:98c1:50::ac40:23b4πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRrene.ns.cloudflare.com
A108.162.195.180πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrene.ns.cloudflare.com
A162.159.44.180Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrene.ns.cloudflare.com
A172.64.35.180πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrene.ns.cloudflare.com
NSrobin.ns.cloudflare.com
A2606:4700:50::adf5:3adaπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
A2803:f800:50::6ca2:c0daπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrobin.ns.cloudflare.com
A2a06:98c1:50::ac40:20daπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRrobin.ns.cloudflare.com
A108.162.192.218πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
A172.64.32.218πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
A173.245.58.218πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrobin.ns.cloudflare.com
MXmxext1.mailbox.org ⭐
A2001:67c:2050:104:0:1:25:1πŸ‡©πŸ‡ͺ HPLS-AS2001:67c:2050::/48
PTRmx1.mailbox.org
A80.241.60.212πŸ‡©πŸ‡ͺ HPLS-AS80.241.60.0/24
PTRmx1.mailbox.org
MXmxext2.mailbox.org ⭐
A2001:67c:2050:104:0:2:25:1πŸ‡©πŸ‡ͺ HPLS-AS2001:67c:2050::/48
PTRmx2.mailbox.org
A80.241.60.215πŸ‡©πŸ‡ͺ HPLS-AS80.241.60.0/24
PTRmx2.mailbox.org
MXmxext3.mailbox.org(20)
A2001:67c:2050:104:0:3:25:1πŸ‡©πŸ‡ͺ HPLS-AS2001:67c:2050::/48
PTRmx3.mailbox.org
A80.241.60.216πŸ‡©πŸ‡ͺ HPLS-AS80.241.60.0/24
PTRmx3.mailbox.org
TXTv=spf1 include:mailbox.org -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.47.125, 172.67.147.165
IPv6 hints2606:4700:3031::6815:2f7d, 2606:4700:3035::ac43:93a5
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=59, name=cloudflare-ech.com
SOArene.ns.cloudflare.comdns@cloudflare.com serial=2402411872

work

DNSSECπŸ”’ Signed (DS record present)
NSa.nic.work ⭐
NSb.nic.work
NSc.nic.work
NSx.nic.work
NSy.nic.work
NSz.nic.work
SOAa.nic.workadmin@tldns.godaddy serial=1778674964

Subdomains

Same first word

Similar names

DNS History

15 records (9 active, 6 former)

NSrene.ns.cloudflare.comrobin.ns.cloudflare.comMXmxext1.mailbox.orgmxext2.mailbox.orgmxext3.mailbox.orgA104.21.47.125172.67.147.1652606:4700:3031::6815:2f7d2606:4700:3035::ac43:93a5172.64.80.1188.114.96.0188.114.97.02606:4700:130:436c:6f75:6466:6c61:72652a06:98c1:3120::2a06:98c1:3121::
●NSrene.ns.cloudflare.com2026-04-02 β†’ 2026-05-13 Β· 2 obs
● 2026-04-02 03:06:10
● 2026-05-13 12:32:50
●NSrobin.ns.cloudflare.com2026-04-02 β†’ 2026-05-13 Β· 2 obs
● 2026-04-02 03:06:10
● 2026-05-13 12:32:50
●MXmxext1.mailbox.org2026-04-02 β†’ 2026-05-13 Β· 2 obs
● 2026-04-02 03:06:10
● 2026-05-13 12:32:50
●MXmxext2.mailbox.org2026-04-02 β†’ 2026-05-13 Β· 2 obs
● 2026-04-02 03:06:10
● 2026-05-13 12:32:50
●MXmxext3.mailbox.org2026-04-02 β†’ 2026-05-13 Β· 2 obs
● 2026-04-02 03:06:10
● 2026-05-13 12:32:50
●A104.21.47.1252026-04-21 β†’ 2026-05-13 Β· 3 obs
β—‹ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-05-13 12:32:50
β—‹A172.64.80.12026-04-02 β†’ 2026-05-13 Β· 2 obs
β—‹ 2026-04-02 03:06:10
β—‹ 2026-05-13 12:32:50
●A172.67.147.1652026-04-21 β†’ 2026-05-13 Β· 3 obs
β—‹ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-05-13 12:32:50
β—‹A188.114.96.02026-04-02 β†’ 2026-04-02 Β· 3 obs
● 2026-04-02 03:06:10
β—‹ 2026-04-21 19:26:14
β—‹ 2026-05-13 12:32:50
β—‹A188.114.97.02026-04-02 β†’ 2026-04-02 Β· 3 obs
● 2026-04-02 03:06:10
β—‹ 2026-04-21 19:26:14
β—‹ 2026-05-13 12:32:50
β—‹A2606:4700:130:436c:6f75:6466:6c61:72652026-04-02 β†’ 2026-05-13 Β· 2 obs
β—‹ 2026-04-02 03:06:10
β—‹ 2026-05-13 12:32:50
●A2606:4700:3031::6815:2f7d2026-04-21 β†’ 2026-05-13 Β· 3 obs
β—‹ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-05-13 12:32:50
●A2606:4700:3035::ac43:93a52026-04-21 β†’ 2026-05-13 Β· 3 obs
β—‹ 2026-04-02 03:06:10
● 2026-04-21 19:26:14
● 2026-05-13 12:32:50
β—‹A2a06:98c1:3120::2026-04-02 β†’ 2026-04-02 Β· 3 obs
● 2026-04-02 03:06:10
β—‹ 2026-04-21 19:26:14
β—‹ 2026-05-13 12:32:50
β—‹A2a06:98c1:3121::2026-04-02 β†’ 2026-04-02 Β· 3 obs
● 2026-04-02 03:06:10
β—‹ 2026-04-21 19:26:14
β—‹ 2026-05-13 12:32:50

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
worka.nic.work, b.nic.work, c.nic.work, x.nic.work...12 records
attacks.workrobin.ns.cloudflare.com, rene.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.35.180

NS records: robin.ns.cloudflare.com, rene.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 508ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.147.165, 104.21.47.125
AAAA22606:4700:3031::6815:2f7d, 2606:4700:3035::ac43:93a5
NS2rene.ns.cloudflare.com, robin.ns.cloudflare.com
MX3mxext1.mailbox.org (pri: 10), mxext2.mailbox.org (pri: 10)...
TXT1v=spf1 include:mailbox.org -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1rene.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.work, a.nic.work, b.nic.work...)

Analysis

Hierarchy

The parent of www.attacks.work is attacks.work.

IP Addresses

attacks.work resolves to four IP numbers: 2606:4700:3031::6815:2f7d, 2606:4700:3035::ac43:93a5, 104.21.47.125 and 172.67.147.165.

Other host names such as www.techostartup.center, objcts.com, o2x.net, mostbet-syt0u.top and ajaibdigital.my.id share IPs with attacks.work.

Name Servers

attacks.work is delegated to two name servers: rene.ns.cloudflare.com and robin.ns.cloudflare.com.

attacks.work shares the same name server setup as allmer-bestattung.at, vja1cheq.workers.dev, mobio.network, dei-mama-is.org and ouddl.org.

attacks.work at least partially shares name servers with other domains, for instance gaagleplry.com, 994vulkanvegas3.com, corridor.website, aklagare.se and cirelramos.com.

these name servers are often used in conjunction with the name servers stella.ns.cloudflare.com.

Host names with six IP numbers:

rene.ns.cloudflare.com points to 2606:4700:58::a29f:2cb4, 2803:f800:50::6ca2:c3b4, 2a06:98c1:50::ac40:23b4, 108.162.195.180, 162.159.44.180 and 172.64.35.180.

robin.ns.cloudflare.com points to 2606:4700:50::adf5:3ada, 2803:f800:50::6ca2:c0da, 2a06:98c1:50::ac40:20da, 108.162.192.218, 172.64.32.218 and 173.245.58.218.

Mail Servers

Three mail servers handle attacks.work: mxext1.mailbox.org, mxext2.mailbox.org and mxext3.mailbox.org.

attacks.work shares at least partially some mail servers with other domains, including danielclerc.de, saloncorina.nl, ikator.de, fold.ai and telegrambotting.com.

Host mxext1.mailbox.org points to 2001:67c:2050:104:0:1:25:1 and 80.241.60.212; Host mxext2.mailbox.org points to 2001:67c:2050:104:0:2:25:1 and 80.241.60.215; Host mxext3.mailbox.org points to 2001:67c:2050:104:0:3:25:1 and 80.241.60.216.