movp-firestore-proxy.developerxploit.workers.dev - dns.ninja

movp-firestore-proxy.developerxploit.workers.dev

DNSSEC⚠️ Not signed
A2606:4700:3032::6815:41b1🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:93e1🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.65.177Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.147.225🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.65.177, 172.67.147.225
IPv6 hints2606:4700:3032::6815:41b1, 2606:4700:3037::ac43:93e1
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=208, name=cloudflare-ech.com

developerxploit.workers.dev

DNSSEC⚠️ Not signed
NSelliot.ns.cloudflare.com
NShaley.ns.cloudflare.com
SOAelliot.ns.cloudflare.comdns@cloudflare.com serial=2408260534

DNS History

6 records (4 active, 2 former)

A104.21.65.177172.67.147.2252606:4700:3032::6815:41b12606:4700:3037::ac43:93e12606:4700:3030::6815:41b12606:4700:3033::ac43:93e1
A104.21.65.1772026-05-24 → 2026-06-30 · 2 obs
● 2026-05-24 09:44:32
● 2026-06-30 20:38:38
A172.67.147.2252026-05-24 → 2026-06-30 · 2 obs
● 2026-05-24 09:44:32
● 2026-06-30 20:38:38
A2606:4700:3030::6815:41b12026-05-24 → 2026-05-24 · 2 obs
● 2026-05-24 09:44:32
○ 2026-06-30 20:38:38
A2606:4700:3032::6815:41b12026-06-30 → 2026-06-30 · 2 obs
○ 2026-05-24 09:44:32
● 2026-06-30 20:38:38
A2606:4700:3033::ac43:93e12026-05-24 → 2026-05-24 · 2 obs
● 2026-05-24 09:44:32
○ 2026-06-30 20:38:38
A2606:4700:3037::ac43:93e12026-06-30 → 2026-06-30 · 2 obs
○ 2026-05-24 09:44:32
● 2026-06-30 20:38:38

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
workers.devsofia.ns.cloudflare.com, clyde.ns.cloudflare.com-
developerxploit.workers.develliot.ns.cloudflare.com, haley.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.33.162

NS records: elliot.ns.cloudflare.com, haley.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for workers.dev (unsigned zone)

⏱️ Timing

Total: 453ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.65.177, 172.67.147.225
AAAA22606:4700:3032::6815:41b1, 2606:4700:3037::ac43:93e1
HTTPS1{"priority":1,"target":".","alpn":["h3",

Analysis

IP Addresses

movp-firestore-proxy.developerxploit.workers.dev has four IP addresses: 104.21.65.177, 172.67.147.225, 2606:4700:3032::6815:41b1 and 2606:4700:3037::ac43:93e1.

Two other host names, along with razotadu.pro, www.gz-zq.com and computermegait.in, also share IP numbers with movp-firestore-proxy.developerxploit.workers.dev.