exploit0.com - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

exploit0.com

DNSSEC⚠️ Not signed
NSbill.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b4aπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbill.ns.cloudflare.com
A2803:f800:50::6ca2:c14aπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbill.ns.cloudflare.com
A2a06:98c1:50::ac40:214aπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRbill.ns.cloudflare.com
A108.162.193.74πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbill.ns.cloudflare.com
A172.64.33.74πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbill.ns.cloudflare.com
A173.245.59.74πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbill.ns.cloudflare.com
NSveda.ns.cloudflare.com
A2606:4700:50::a29f:2693πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRveda.ns.cloudflare.com
A2803:f800:50::6ca2:c293πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRveda.ns.cloudflare.com
A2a06:98c1:50::ac40:2293πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRveda.ns.cloudflare.com
A108.162.194.147πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRveda.ns.cloudflare.com
A162.159.38.147Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRveda.ns.cloudflare.com
A172.64.34.147πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRveda.ns.cloudflare.com
MXmx1.alias.proton.me ⭐
A176.119.200.136πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
A185.205.70.136πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
MXmx2.alias.proton.me(20)
A176.119.200.136πŸ‡¨πŸ‡­ Proton176.119.200.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
A185.205.70.136πŸ‡«πŸ‡· Proton185.205.70.0/24
PTRmx1.simplelogin.co
PTRmx2.simplelogin.co
TXTpm-verification=dgeahcnfimnvdfszfkhvzjythawoey
TXTv=spf1 include:alias.proton.me ~all
SOAbill.ns.cloudflare.comdns@cloudflare.com serial=2412609384

com

Same first word

Similar names

Previous names

Next names

DNS History

8 records (4 active, 4 former)

2017201820192020202120222023202420252026NSbill.ns.cloudflare.comveda.ns.cloudflare.comns73.domaincontrol.comns74.domaincontrol.comMXmx1.alias.proton.memx2.alias.proton.meexploit0-com.mail.protection.outlook.comA184.168.221.37
●NSbill.ns.cloudflare.com2026-08-24 β†’ 2026-09-09 Β· 3 obs
β—‹ 2018-06-23 18:16:54
● 2026-08-24 13:00:24
● 2026-09-09 09:29:50
β—‹NSns73.domaincontrol.com2016-12-17 β†’ 2018-06-23 Β· 4 obs
● 2016-12-17 13:45:00
● 2018-06-23 18:16:54
β—‹ 2026-08-24 13:00:24
β—‹ 2026-09-09 09:29:50
β—‹NSns74.domaincontrol.com2016-12-17 β†’ 2018-06-23 Β· 4 obs
● 2016-12-17 13:45:00
● 2018-06-23 18:16:54
β—‹ 2026-08-24 13:00:24
β—‹ 2026-09-09 09:29:50
●NSveda.ns.cloudflare.com2026-08-24 β†’ 2026-09-09 Β· 3 obs
β—‹ 2018-06-23 18:16:54
● 2026-08-24 13:00:24
● 2026-09-09 09:29:50
β—‹MXexploit0-com.mail.protection.outlook.com2016-12-17 β†’ 2018-06-23 Β· 4 obs
● 2016-12-17 13:45:00
● 2018-06-23 18:16:54
β—‹ 2026-08-24 13:00:24
β—‹ 2026-09-09 09:29:50
●MXmx1.alias.proton.me2026-08-24 β†’ 2026-09-09 Β· 3 obs
β—‹ 2018-06-23 18:16:54
● 2026-08-24 13:00:24
● 2026-09-09 09:29:50
●MXmx2.alias.proton.me2026-08-24 β†’ 2026-09-09 Β· 3 obs
β—‹ 2018-06-23 18:16:54
● 2026-08-24 13:00:24
● 2026-09-09 09:29:50
β—‹A184.168.221.372016-12-17 β†’ 2018-06-23 Β· 4 obs
● 2016-12-17 13:45:00
● 2018-06-23 18:16:54
β—‹ 2026-08-24 13:00:24
β—‹ 2026-09-09 09:29:50

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
exploit0.combill.ns.cloudflare.com, veda.ns.cloudflare.com12 records

βœ… Authoritative Response

Server:108.162.194.147

NS records: bill.ns.cloudflare.com, veda.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 921ms | Queries: -

πŸ“„ Records

TypeCountSample Data
NS2bill.ns.cloudflare.com, veda.ns.cloudflare.com
MX2mx1.alias.proton.me (pri: 10), mx2.alias.proton.me (pri: 20)
TXT2pm-verification=dgeahcnfimnvdfszfkhvzjyt, v=spf1 include:alias.proton.me ~all
SOA1bill.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (bill.ns.cloudflare.com, bill.ns.cloudflare.com, bill.ns.cloudflare.com...)

Analysis

Name Servers

Two name servers handle the delegation for exploit0.com: bill.ns.cloudflare.com and veda.ns.cloudflare.com.

exploit0.com shares its NS records with other domains, for example fiowersfluffy02-7cc.workers.dev, salescaptain.com, deivid9044.workers.dev and two others.

There is at least partial name server overlap between exploit0.com and other domains β€” arax17.workers.dev, nene57.workers.dev, plantculturehub.com and two more among them.

These name servers frequently co-occur with the name servers love.ns.cloudflare.com and ganz.ns.cloudflare.com.

DNS names with 6 IP addresses:

bill.ns.cloudflare.com resolves to 108.162.193.74, 172.64.33.74 and 173.245.59.74 among others, with 3 other IP addresses in total.

veda.ns.cloudflare.com resolves to 108.162.194.147, 162.159.38.147 and 172.64.34.147 among others, with 3 other IP addresses in total.

Mail Servers

exploit0.com is served by two mail servers, mx1.alias.proton.me and mx2.alias.proton.me.

Among the domains sharing a mail server setup with exploit0.com are timelost.de, justforjunkmail.com, dontsellthis.com and two others.

There is at least a partial MX overlap between exploit0.com and other domains, including flurinryffel.ch, hamedina.net, paher.org and two others.

These mail servers are routinely seen in conjunction with the mail servers mail.protonmail.ch and mailsec.protonmail.ch.

mx1.alias.proton.me and mx2.alias.proton.me each point to two IP numbers β€” 176.119.200.136 and 185.205.70.136 β€” making both hosts identical in their DNS resolution.

mx1.alias.proton.me along with mx2.alias.proton.me each resolve to 176.119.200.136 IP addresses.

mx1.alias.proton.me along with mx2.alias.proton.me each resolve to 185.205.70.136 IP addresses.