exploit.run - dns.ninja
exploit.run
| DNSSEC | ⚠️ Not signed | ||||||
| A | 13.248.169.48🇺🇸 Amazon13.248.160.0/20 | ||||||
| PTR | a904c694c05102f30.awsglobalaccelerator.com | ||||||
| A | 76.223.54.146🇺🇸 Amazon76.223.48.0/20 | ||||||
| NS | ns3.afternic.com ⭐ | ||||||
| A | 97.74.98.65🇺🇸 GODADDY-DNS97.74.98.0/23 | ||||||
| PTR | ns3.afternic.com | ||||||
| NS | ns4.afternic.com | ||||||
| A | 173.201.66.65🇺🇸 GODADDY-DNS173.201.66.0/23 | ||||||
| PTR | ns4.namefind.com | ||||||
| TXT | v=spf1 -all | ||||||
| SOA | ns3.afternic.comdns@jomax.net 2025-10-01 #0 | ||||||
run
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.run ⭐ | ||||||
| NS | v0n1.nic.run | ||||||
| NS | v0n2.nic.run | ||||||
| NS | v0n3.nic.run | ||||||
| NS | v2n0.nic.run | ||||||
| NS | v2n1.nic.run | ||||||
| SOA | v0n0.nic.runhostmaster@donuts.email serial=1780741315 | ||||||
Same first word
Similar names
DNS History
18 records (4 active, 14 former)
○NSa.misconfigured.powerdns.server2021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○NSdns1.zyro.com2021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○NSdns2.zyro.com2021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
●NSns3.afternic.com2026-03-28 → 2026-06-06 · 3 obs
● 2026-03-28 11:19:48
● 2026-06-06 11:02:44
●NSns4.afternic.com2026-03-28 → 2026-06-06 · 3 obs
● 2026-03-28 11:19:48
● 2026-06-06 11:02:44
○NSns75.domaincontrol.com2016-12-10 → 2017-08-19 · 4 obs
● 2017-08-19 03:40:58
○ 2021-08-29 23:25:40
○ 2026-06-06 11:02:44
○NSns76.domaincontrol.com2016-12-10 → 2017-08-19 · 4 obs
● 2017-08-19 03:40:58
○ 2021-08-29 23:25:40
○ 2026-06-06 11:02:44
○MXmailstore1.secureserver.net2016-12-10 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○MXsmtp.secureserver.net2016-12-10 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
●A13.248.169.482026-03-28 → 2026-06-06 · 3 obs
● 2026-03-28 11:19:48
● 2026-06-06 11:02:44
○A156.67.223.472021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○A184.168.221.72016-12-10 → 2017-08-19 · 4 obs
● 2017-08-19 03:40:58
○ 2021-08-29 23:25:40
○ 2026-06-06 11:02:44
○A185.201.11.2352021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○A185.224.136.372021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○A2a02:4780:1:8::3a2021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○A2a02:4780:3:1::402021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
○A2a02:4780:8::262021-08-29 → 2021-08-29 · 4 obs
● 2021-08-29 23:25:40
○ 2026-03-28 11:19:48
○ 2026-06-06 11:02:44
●A76.223.54.1462026-03-28 → 2026-06-06 · 3 obs
● 2026-03-28 11:19:48
● 2026-06-06 11:02:44
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| run | v0n0.nic.run, v0n1.nic.run, v0n2.nic.run, v0n3.nic.run... | 12 records |
| exploit.run | ns4.afternic.com, ns3.afternic.com | - |
✅ Authoritative Response
Server:97.74.98.65
NS records: ns4.afternic.com, ns3.afternic.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for exploit.run (unsigned zone)
⏱️ Timing
Total: 449ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 13.248.169.48, 76.223.54.146 |
| NS | 2 | ns3.afternic.com, ns4.afternic.com |
| MX | 1 | . (pri: 0) |
| TXT | 1 | v=spf1 -all |
| SOA | 1 | ns3.afternic.com dns.jomax.net |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v0n0.nic.run, v0n1.nic.run, v0n2.nic.run...)
Analysis
IP Addresses
exploit.run points to two IP numbers: 13.248.169.48 and 76.223.54.146.
Additional host names — rbpv.com, modelgames.com, missionmojo.com and two others — share IP numbers with exploit.run.
Name Servers
The NS records for exploit.run delegate to ns3.afternic.com and ns4.afternic.com.
exploit.run shares its name server setup with other domains, including genene.com, orrtech.com, 23.83.154.132.rdns.ubiquity.io and two others.
At least some of exploit.run's name servers are shared with other domains, for example moniken.com, xmys.com, mlsim.com and two more.
Each of ns3.afternic.com and ns4.afternic.com has one IP address: ns3.afternic.com uses 97.74.98.65 and ns4.afternic.com uses 173.201.66.65.