leakbase.ws - robtex.com

leakbase.ws

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:3bc7πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3034::ac43:b728πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.59.199Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.183.40πŸ‡ΊπŸ‡Έ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSns1.fbi.seized.gov ⭐
A2400:cb00:2049:1::c629:df65πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A198.41.223.101Cloudflare198.41.223.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcf-198-41-223-101.cloudflare.com
NSns2.fbi.seized.gov
A2400:cb00:2049:1::adf5:3a08πŸ‡ΊπŸ‡Έ Cloudflare2400:cb00:2049::/48 , Inc. 101 Townsend Street
A173.245.58.8πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4104.21.59.199, 172.67.183.40
IPv62606:4700:3030::6815:3bc7, 2606:4700:3034::ac43:b728
SOAns1.fbi.seized.govdns@cloudflare.com serial=2398125024

ws

DNSSECπŸ”’ Signed (DS record present)
A64.70.19.33πŸ‡ΊπŸ‡Έ AS356164.70.0.0/18
NSns2.dns.ws ⭐ πŸ”’
NSa.dns.ws
NSns5.dns.ws
NSs.dns.ws πŸ”’
NSus3.dns.ws πŸ”’
NSus4.dns.ws πŸ”’
MXmail.worldsite.ws ⭐
SOAns2.dns.wshostmaster@dns.ws serial=2603070269
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

10 records (6 active, 4 former)

NSns1.fbi.seized.govns2.fbi.seized.gov1-you.njalla.no2-can.njalla.in3-get.njalla.foA104.21.59.199172.67.183.402606:4700:3030::6815:3bc72606:4700:3034::ac43:b728185.11.145.254
β—‹NS1-you.njalla.no2026-02-17 β†’ 2026-02-27 Β· 4 obs
● 2026-02-17 21:50:16
● 2026-02-27 21:51:52
β—‹ 2026-03-07 16:14:12
β—‹ 2026-03-23 14:15:26
β—‹NS2-can.njalla.in2026-02-17 β†’ 2026-02-27 Β· 4 obs
● 2026-02-17 21:50:16
● 2026-02-27 21:51:52
β—‹ 2026-03-07 16:14:12
β—‹ 2026-03-23 14:15:26
β—‹NS3-get.njalla.fo2026-02-17 β†’ 2026-02-27 Β· 4 obs
● 2026-02-17 21:50:16
● 2026-02-27 21:51:52
β—‹ 2026-03-07 16:14:12
β—‹ 2026-03-23 14:15:26
●NSns1.fbi.seized.gov2026-03-07 β†’ 2026-03-23 Β· 3 obs
β—‹ 2026-02-27 21:51:52
● 2026-03-07 16:14:12
● 2026-03-23 14:15:26
●NSns2.fbi.seized.gov2026-03-07 β†’ 2026-03-23 Β· 3 obs
β—‹ 2026-02-27 21:51:52
● 2026-03-07 16:14:12
● 2026-03-23 14:15:26
●A104.21.59.1992026-03-07 β†’ 2026-03-23 Β· 3 obs
β—‹ 2026-02-27 21:51:52
● 2026-03-07 16:14:12
● 2026-03-23 14:15:26
●A172.67.183.402026-03-07 β†’ 2026-03-23 Β· 3 obs
β—‹ 2026-02-27 21:51:52
● 2026-03-07 16:14:12
● 2026-03-23 14:15:26
β—‹A185.11.145.2542026-02-17 β†’ 2026-02-27 Β· 4 obs
● 2026-02-17 21:50:16
● 2026-02-27 21:51:52
β—‹ 2026-03-07 16:14:12
β—‹ 2026-03-23 14:15:26
●A2606:4700:3030::6815:3bc72026-03-07 β†’ 2026-03-23 Β· 3 obs
β—‹ 2026-02-27 21:51:52
● 2026-03-07 16:14:12
● 2026-03-23 14:15:26
●A2606:4700:3034::ac43:b7282026-03-07 β†’ 2026-03-23 Β· 3 obs
β—‹ 2026-02-27 21:51:52
● 2026-03-07 16:14:12
● 2026-03-23 14:15:26

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
wsus4.dns.ws, s.dns.ws, ns5.dns.ws, a.dns.ws...-
leakbase.wsns2.fbi.seized.gov, ns1.fbi.seized.gov-

βœ… Authoritative Response

Server:173.245.58.8

NS records: ns2.fbi.seized.gov, ns1.fbi.seized.gov

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for leakbase.ws (unsigned zone)

⏱️ Timing

Total: 1009ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.183.40, 104.21.59.199
AAAA22606:4700:3030::6815:3bc7, 2606:4700:3034::ac43:b728
NS2ns1.fbi.seized.gov, ns2.fbi.seized.gov
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1ns1.fbi.seized.gov dns.cloudflare.com

Analysis

IP Addresses

leakbase.ws maps to four IP numbers: 2606:4700:3030::6815:3bc7, 2606:4700:3034::ac43:b728, 104.21.59.199 and 172.67.183.40.

Other host names, for instance mail.kinofilmec.ru, app.champ89.fun, neonking.com.hk, odishabhaskar.in and kinofilmec.ru share IP numbers with leakbase.ws.

Name Servers

Two name servers ns1.fbi.seized.gov and ns2.fbi.seized.gov are delegated to leakbase.ws.

leakbase.ws uses the same name server configuration as other domains, such as nsw2u.com, nulled.to, cracked.to, ghxsjyk.com and idtempl.com.

leakbase.ws shares name servers with other domains at least partially, for instance crypt.guru, cryptor.biz, cryptor.live and seized.gov.

These name servers are commonly used with hans.ns.cloudflare.com and surina.ns.cloudflare.com.

Host names with two IPs:

ns1.fbi.seized.gov points to 2400:cb00:2049:1::c629:df65 and 198.41.223.101.

ns2.fbi.seized.gov points to 2400:cb00:2049:1::adf5:3a08 and 173.245.58.8.