exploit.wtf - dns.ninja

exploit.wtf

DNSSEC⚠️ Not signed
A52.20.84.62πŸ‡ΊπŸ‡Έ Amazon52.20.0.0/14 EC2 IAD prefix
PTRec2-52-20-84-62.compute-1.amazonaws.com
NSns1.atom.com ⭐
A44.219.81.145πŸ‡ΊπŸ‡Έ Amazon44.192.0.0/11 EC2 IAD prefix
PTRec2-44-219-81-145.compute-1.amazonaws.com
NSns2.atom.com
A50.19.240.86πŸ‡ΊπŸ‡Έ Amazon50.19.128.0/17 EC2 IAD prefix
PTRec2-50-19-240-86.compute-1.amazonaws.com
SOAns1.atom.comhostmaster@exploit.wtf 2026-04-09 #3

wtf

DNSSECπŸ”’ Signed (DS record present)
NSv0n0.nic.wtf ⭐
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf
SOAv0n0.nic.wtfhostmaster@donuts.email serial=1781337521

Same first word

Similar names

DNS History

14 records (3 active, 11 former)

2017201820192020202120222023202420252026NSns1.atom.comns2.atom.comdns1.p05.nsone.netdns2.p05.nsone.netdns3.p05.nsone.netdns4.p05.nsone.netns1.systemdns.comns2.systemdns.comns3.systemdns.comA52.20.84.62198.185.159.144198.185.159.145198.49.23.144198.49.23.145
β—‹NSdns1.p05.nsone.net2017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
β—‹NSdns2.p05.nsone.net2017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
β—‹NSdns3.p05.nsone.net2017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
β—‹NSdns4.p05.nsone.net2017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
●NSns1.atom.com2026-06-11 β†’ 2026-06-13 Β· 3 obs
β—‹ 2017-06-29 21:20:56
● 2026-06-11 03:43:16
● 2026-06-13 08:16:16
β—‹NSns1.systemdns.com2016-12-10 β†’ 2016-12-10 Β· 3 obs
● 2016-12-10 23:53:10
β—‹ 2017-06-29 21:20:56
β—‹ 2026-06-13 08:16:16
●NSns2.atom.com2026-06-11 β†’ 2026-06-13 Β· 3 obs
β—‹ 2017-06-29 21:20:56
● 2026-06-11 03:43:16
● 2026-06-13 08:16:16
β—‹NSns2.systemdns.com2016-12-10 β†’ 2016-12-10 Β· 3 obs
● 2016-12-10 23:53:10
β—‹ 2017-06-29 21:20:56
β—‹ 2026-06-13 08:16:16
β—‹NSns3.systemdns.com2016-12-10 β†’ 2016-12-10 Β· 3 obs
● 2016-12-10 23:53:10
β—‹ 2017-06-29 21:20:56
β—‹ 2026-06-13 08:16:16
β—‹A198.185.159.1442017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
β—‹A198.185.159.1452017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
β—‹A198.49.23.1442016-12-10 β†’ 2017-06-29 Β· 4 obs
● 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
β—‹A198.49.23.1452017-06-29 β†’ 2017-06-29 Β· 4 obs
β—‹ 2016-12-10 23:53:10
● 2017-06-29 21:20:56
β—‹ 2026-06-11 03:43:16
β—‹ 2026-06-13 08:16:16
●A52.20.84.622026-06-11 β†’ 2026-06-13 Β· 3 obs
β—‹ 2017-06-29 21:20:56
● 2026-06-11 03:43:16
● 2026-06-13 08:16:16

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
wtfv0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...12 records
exploit.wtfns2.atom.com, ns1.atom.com-

βœ… Authoritative Response

Server:50.19.240.86

NS records: ns2.atom.com, ns1.atom.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for exploit.wtf (unsigned zone)

⏱️ Timing

Total: 333ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A152.20.84.62
NS2ns2.atom.com, ns1.atom.com
SOA1ns1.atom.com hostmaster.exploit.wtf

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n0.nic.wtf, v0n1.nic.wtf...)

Analysis

IP Addresses

exploit.wtf resolves to just one IP address, 52.20.84.62.

Two other host names, along with metacryptics.com, styleloop.com and busyforce.com, also share IP numbers with exploit.wtf.

Name Servers

exploit.wtf uses two name servers for its delegation: ns1.atom.com and ns2.atom.com.

exploit.wtf shares its NS records with other domains, for example pazew.com, gulistan.com, fais.org and two others.

Some name servers delegated to exploit.wtf are also used by other domains, notably mvable.com and truzr.com.

These name servers are routinely deployed together with the name servers verification-j8yfce5btmdxy4vrwdyypd.ns101.verify.hn.

ns1.atom.com β†’ 44.219.81.145 and ns2.atom.com β†’ 50.19.240.86: one IP number per host name.