exploit.observer - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

exploit.observer

DNSSECπŸ”’ Signed (DS record present)
A2606:4700:3034::6815:27b1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3035::ac43:93afπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.39.177Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.147.175πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSdamian.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c32πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamian.ns.cloudflare.com
A2803:f800:50::6ca2:c332πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdamian.ns.cloudflare.com
A2a06:98c1:50::ac40:2332πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRdamian.ns.cloudflare.com
A108.162.195.50πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamian.ns.cloudflare.com
A162.159.44.50Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamian.ns.cloudflare.com
A172.64.35.50πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdamian.ns.cloudflare.com
NSligia.ns.cloudflare.com
A2606:4700:50::a29f:2604πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRligia.ns.cloudflare.com
A2803:f800:50::6ca2:c204πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRligia.ns.cloudflare.com
A2a06:98c1:50::ac40:2204πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRligia.ns.cloudflare.com
A108.162.194.4πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRligia.ns.cloudflare.com
A162.159.38.4Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRligia.ns.cloudflare.com
A172.64.34.4πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRligia.ns.cloudflare.com
TXTgoogle-site-verification=0N4L1LIQpFdimwySrEOly6J-AxrF9P_htu0S8oFB3jk
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.39.177, 172.67.147.175
IPv6 hints2606:4700:3034::6815:27b1, 2606:4700:3035::ac43:93af
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=44, name=cloudflare-ech.com
SOAdamian.ns.cloudflare.comdns@cloudflare.com serial=2413048309

observer

DNSSECπŸ”’ Signed (DS record present)
NSns01.trs-dns.com ⭐
NSns.trs-dns.com
NSns01.trs-dns.net
NSns10.trs-dns.info
NSns10.trs-dns.org
SOAns.trs-dns.comtrs-ops@tucows.com serial=1788271866
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSdamian.ns.cloudflare.comligia.ns.cloudflare.comA104.21.39.177172.67.147.1752606:4700:3034::6815:27b12606:4700:3035::ac43:93af
●NSdamian.ns.cloudflare.com2026-08-29 β†’ 2026-09-01 Β· 2 obs
● 2026-08-29 17:10:32
● 2026-09-01 14:13:44
●NSligia.ns.cloudflare.com2026-08-29 β†’ 2026-09-01 Β· 2 obs
● 2026-08-29 17:10:32
● 2026-09-01 14:13:44
●A104.21.39.1772026-08-29 β†’ 2026-09-01 Β· 2 obs
● 2026-08-29 17:10:32
● 2026-09-01 14:13:44
●A172.67.147.1752026-08-29 β†’ 2026-09-01 Β· 2 obs
● 2026-08-29 17:10:32
● 2026-09-01 14:13:44
●A2606:4700:3034::6815:27b12026-08-29 β†’ 2026-09-01 Β· 2 obs
● 2026-08-29 17:10:32
● 2026-09-01 14:13:44
●A2606:4700:3035::ac43:93af2026-08-29 β†’ 2026-09-01 Β· 2 obs
● 2026-08-29 17:10:32
● 2026-09-01 14:13:44

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
observerns01.trs-dns.net, ns10.trs-dns.org, ns01.trs-dns.com, ns10.trs-dns.info8 records
exploit.observerligia.ns.cloudflare.com, damian.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.194.4

NS records: ligia.ns.cloudflare.com, damian.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 969ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.39.177, 172.67.147.175
AAAA22606:4700:3034::6815:27b1, 2606:4700:3035::ac43:93af
NS2damian.ns.cloudflare.com, ligia.ns.cloudflare.com
TXT1google-site-verification=0N4L1LIQpFdimwy
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1damian.ns.cloudflare.com dns.cloudflare.

πŸ“Œ Glue Records Collected

Total: 8

Out-of-bailiwick: 8 (ns01.trs-dns.net, ns01.trs-dns.net, ns10.trs-dns.org...)

Analysis

IP Addresses

exploit.observer points to the four IP addresses 104.21.39.177, 172.67.147.175, 2606:4700:3034::6815:27b1 and 2606:4700:3035::ac43:93af.

Among the host names that share IP numbers with exploit.observer are br(0x6469636b)ey.com, newboom.ru.com, situs888.today and two others.

Name Servers

exploit.observer is served by two delegated name servers, damian.ns.cloudflare.com and ligia.ns.cloudflare.com.

exploit.observer has the same name server delegation as a number of other domains, such as free-spins-no-deposit.com, srcne.com, codingjoa4.workers.dev and two more.

There is at least partial name server overlap between exploit.observer and other domains β€” higomalls.com, rlocliens.com, granitefamilychiropracticcom-databaseadminku.pages.dev and two more among them.

The name servers norah.ns.cloudflare.com, lucy.ns.cloudflare.com and titan.ns.cloudflare.com are often found in combination with these name servers.

Host names resolving to 6 IP numbers:

damian.ns.cloudflare.com carries IP addresses 108.162.195.50, 162.159.44.50 and 172.64.35.50, with 3 other addresses beyond those.

ligia.ns.cloudflare.com carries IP addresses 108.162.194.4, 162.159.38.4 and 172.64.34.4, with 3 other addresses beyond those.