exploit.observer - dns.ninja
exploit.observer
| DNSSEC | π Signed (DS record present) | ||||||
| A | 2606:4700:3034::6815:27b1πΊπΈ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 2606:4700:3035::ac43:93afπΊπΈ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 104.21.39.177Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 172.67.147.175πΊπΈ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| NS | damian.ns.cloudflare.com β | ||||||
| A | 2606:4700:58::a29f:2c32πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | damian.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c332π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | damian.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2332πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | damian.ns.cloudflare.com | ||||||
| A | 108.162.195.50πΊπΈ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | damian.ns.cloudflare.com | ||||||
| A | 162.159.44.50Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | damian.ns.cloudflare.com | ||||||
| A | 172.64.35.50πΊπΈ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | damian.ns.cloudflare.com | ||||||
| NS | ligia.ns.cloudflare.com | ||||||
| A | 2606:4700:50::a29f:2604πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | ligia.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c204π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | ligia.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2204πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | ligia.ns.cloudflare.com | ||||||
| A | 108.162.194.4πΊπΈ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | ligia.ns.cloudflare.com | ||||||
| A | 162.159.38.4Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | ligia.ns.cloudflare.com | ||||||
| A | 172.64.34.4πΊπΈ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | ligia.ns.cloudflare.com | ||||||
| TXT | google-site-verification=0N4L1LIQpFdimwySrEOly6J-AxrF9P_htu0S8oFB3jk | ||||||
| HTTPS | HTTP/3, HTTP/2 β hints match | ||||||
| IPv4 hints | 104.21.39.177, 172.67.147.175 | ||||||
| IPv6 hints | 2606:4700:3034::6815:27b1, 2606:4700:3035::ac43:93af | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=44, name=cloudflare-ech.com | ||||||
| SOA | damian.ns.cloudflare.comdns@cloudflare.com serial=2413048309 | ||||||
observer
| DNSSEC | π Signed (DS record present) | ||||||
| NS | ns01.trs-dns.com β | ||||||
| NS | ns.trs-dns.com | ||||||
| NS | ns01.trs-dns.net | ||||||
| NS | ns10.trs-dns.info | ||||||
| NS | ns10.trs-dns.org | ||||||
| SOA | ns.trs-dns.comtrs-ops@tucows.com serial=1788271866 | ||||||
Same first word
Similar names
Previous names
Next names
DNS History
6 records (6 active, 0 former)
βNSdamian.ns.cloudflare.com2026-08-29 β 2026-09-01 Β· 2 obs
β 2026-09-01 14:13:44
βNSligia.ns.cloudflare.com2026-08-29 β 2026-09-01 Β· 2 obs
β 2026-09-01 14:13:44
βA104.21.39.1772026-08-29 β 2026-09-01 Β· 2 obs
β 2026-09-01 14:13:44
βA172.67.147.1752026-08-29 β 2026-09-01 Β· 2 obs
β 2026-09-01 14:13:44
βA2606:4700:3034::6815:27b12026-08-29 β 2026-09-01 Β· 2 obs
β 2026-09-01 14:13:44
βA2606:4700:3035::ac43:93af2026-08-29 β 2026-09-01 Β· 2 obs
β 2026-09-01 14:13:44
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| observer | ns01.trs-dns.net, ns10.trs-dns.org, ns01.trs-dns.com, ns10.trs-dns.info | 8 records |
| exploit.observer | ligia.ns.cloudflare.com, damian.ns.cloudflare.com | - |
β Authoritative Response
Server:108.162.194.4
NS records: ligia.ns.cloudflare.com, damian.ns.cloudflare.com
π DNSSEC Status
π Secure (DNSSEC validated)
Chain of trust verified from root to domain
β±οΈ Timing
Total: 969ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 104.21.39.177, 172.67.147.175 |
| AAAA | 2 | 2606:4700:3034::6815:27b1, 2606:4700:3035::ac43:93af |
| NS | 2 | damian.ns.cloudflare.com, ligia.ns.cloudflare.com |
| TXT | 1 | google-site-verification=0N4L1LIQpFdimwy |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | damian.ns.cloudflare.com dns.cloudflare. |
π Glue Records Collected
Total: 8
Out-of-bailiwick: 8 (ns01.trs-dns.net, ns01.trs-dns.net, ns10.trs-dns.org...)
Analysis
IP Addresses
exploit.observer points to the four IP addresses 104.21.39.177, 172.67.147.175, 2606:4700:3034::6815:27b1 and 2606:4700:3035::ac43:93af.
Among the host names that share IP numbers with exploit.observer are br(0x6469636b)ey.com, newboom.ru.com, situs888.today and two others.
Name Servers
exploit.observer is served by two delegated name servers, damian.ns.cloudflare.com and ligia.ns.cloudflare.com.
exploit.observer has the same name server delegation as a number of other domains, such as free-spins-no-deposit.com, srcne.com, codingjoa4.workers.dev and two more.
There is at least partial name server overlap between exploit.observer and other domains β higomalls.com, rlocliens.com, granitefamilychiropracticcom-databaseadminku.pages.dev and two more among them.
The name servers norah.ns.cloudflare.com, lucy.ns.cloudflare.com and titan.ns.cloudflare.com are often found in combination with these name servers.
Host names resolving to 6 IP numbers:
damian.ns.cloudflare.com carries IP addresses 108.162.195.50, 162.159.44.50 and 172.64.35.50, with 3 other addresses beyond those.
ligia.ns.cloudflare.com carries IP addresses 108.162.194.4, 162.159.38.4 and 172.64.34.4, with 3 other addresses beyond those.