exploit.zip - dns.ninja
exploit.zip
| DNSSEC | β οΈ Not signed | ||||||
| A | 2606:4700:3030::6815:4831πΊπΈ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 2606:4700:3037::ac43:af19πΊπΈ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 104.21.72.49Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 172.67.175.25πΊπΈ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| NS | dakota.ns.cloudflare.com β | ||||||
| A | 2606:4700:58::a29f:2c4fπΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | dakota.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c34fπ¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | dakota.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:234fπΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | dakota.ns.cloudflare.com | ||||||
| A | 108.162.195.79πΊπΈ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | dakota.ns.cloudflare.com | ||||||
| A | 162.159.44.79Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | dakota.ns.cloudflare.com | ||||||
| A | 172.64.35.79πΊπΈ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | dakota.ns.cloudflare.com | ||||||
| NS | sunny.ns.cloudflare.com | ||||||
| A | 2606:4700:50::a29f:26a6πΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | sunny.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c2a6π¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | sunny.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:22a6πΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | sunny.ns.cloudflare.com | ||||||
| A | 108.162.194.166πΊπΈ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | sunny.ns.cloudflare.com | ||||||
| A | 162.159.38.166Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | sunny.ns.cloudflare.com | ||||||
| A | 172.64.34.166πΊπΈ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | sunny.ns.cloudflare.com | ||||||
| HTTPS | HTTP/3, HTTP/2 β hints match | ||||||
| IPv4 hints | 104.21.72.49, 172.67.175.25 | ||||||
| IPv6 hints | 2606:4700:3030::6815:4831, 2606:4700:3037::ac43:af19 | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=252, name=cloudflare-ech.com | ||||||
| SOA | dakota.ns.cloudflare.comdns@cloudflare.com serial=2416906104 | ||||||
zip
| DNSSEC | π Signed (DS record present) | ||||||
| NS | ns-tld1.charlestonroadregistry.com β | ||||||
| NS | ns-tld2.charlestonroadregistry.com | ||||||
| NS | ns-tld3.charlestonroadregistry.com | ||||||
| NS | ns-tld4.charlestonroadregistry.com | ||||||
| NS | ns-tld5.charlestonroadregistry.com | ||||||
| SOA | ns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1 | ||||||
π HSTS Preload (+subdomains)
Same first word
Similar names
Previous names
Next names
DNS History
10 records (6 active, 4 former)
βNSdakota.ns.cloudflare.com2026-09-18 β 2026-10-12 Β· 2 obs
β 2026-10-12 01:05:48
βNSsunny.ns.cloudflare.com2026-09-18 β 2026-10-12 Β· 2 obs
β 2026-10-12 01:05:48
βA104.21.72.492026-09-20 β 2026-10-12 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA172.67.175.252026-09-20 β 2026-10-12 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA188.114.96.02026-09-18 β 2026-09-27 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA188.114.97.02026-09-18 β 2026-09-27 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA2606:4700:3030::6815:48312026-09-20 β 2026-10-12 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA2606:4700:3037::ac43:af192026-09-20 β 2026-10-12 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA2a06:98c1:3120::2026-09-18 β 2026-09-27 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
βA2a06:98c1:3121::2026-09-18 β 2026-09-27 Β· 5 obs
β 2026-09-20 14:36:22
β 2026-09-27 07:06:54
β 2026-09-28 13:58:34
β 2026-10-12 01:05:48
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| zip | ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com... | 10 records |
| exploit.zip | sunny.ns.cloudflare.com, dakota.ns.cloudflare.com | - |
β Authoritative Response
Server:108.162.195.79
NS records: sunny.ns.cloudflare.com, dakota.ns.cloudflare.com
π DNSSEC Status
β οΈ Insecure (no DNSSEC)
No DS record for exploit.zip (unsigned zone)
β±οΈ Timing
Total: 1154ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.175.25, 104.21.72.49 |
| AAAA | 2 | 2606:4700:3030::6815:4831, 2606:4700:3037::ac43:af19 |
| NS | 2 | dakota.ns.cloudflare.com, sunny.ns.cloudflare.com |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | dakota.ns.cloudflare.com dns.cloudflare. |
π Glue Records Collected
Total: 10
Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)
Analysis
IP Addresses
exploit.zip has four IP addresses: 104.21.72.49, 172.67.175.25, 2606:4700:3030::6815:4831 and 2606:4700:3037::ac43:af19.
Two other host names, along with slimboost.click, safirtema.com and euhedron.net, also share IP numbers with exploit.zip.
Name Servers
exploit.zip uses two name servers for its delegation: dakota.ns.cloudflare.com and sunny.ns.cloudflare.com.
exploit.zip shares its NS records with other domains, for example xn--gmq658asd241drqkqvcz0gf06b.jp.net, sc888.in.net, abelatha.sa.com and two others.
exploit.zip shares at least some of its name servers with other domains, including urlanalysis.online, ajdmjakiur.com, titans.vision and two others.
These name servers are frequently seen alongside the name servers kurt.ns.cloudflare.com.
DNS names with 6 IP addresses:
Hostname dakota.ns.cloudflare.com directs to 108.162.195.79, 162.159.44.79 and 172.64.35.79 along with 3 other IP addresses.
Hostname sunny.ns.cloudflare.com directs to 108.162.194.166, 162.159.38.166 and 172.64.34.166 along with 3 other IP addresses.