exploit.ba - robtex.com

exploit.ba

DNSSEC⚠️ Not signed
A2606:4700:3034::ac43:a93cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3035::6815:4f44πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.79.68Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.169.60πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSgreg.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b73πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
A2803:f800:50::6ca2:c173πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRgreg.ns.cloudflare.com
A2a06:98c1:50::ac40:2173πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRgreg.ns.cloudflare.com
A108.162.193.115πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
A172.64.33.115πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
A173.245.59.115πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRgreg.ns.cloudflare.com
NSrita.ns.cloudflare.com
A2606:4700:50::adf5:3a8cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
A2803:f800:50::6ca2:c08cπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRrita.ns.cloudflare.com
A2a06:98c1:50::ac40:208cπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRrita.ns.cloudflare.com
A108.162.192.140πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
A172.64.32.140πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
A173.245.58.140πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRrita.ns.cloudflare.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c21::1aπŸ‡ΊπŸ‡Έ Google2607:f8b0:4004::/48
PTRpe-in-f26.1e100.net
A142.251.167.26πŸ‡ΊπŸ‡Έ Google142.251.167.0/24
PTRww-in-f26.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1bπŸ‡¨πŸ‡± Google2800:3f0:4003::/48
A108.177.123.26πŸ‡ΊπŸ‡Έ Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXalt2.aspmx.l.google.com(10)
A2607:f8b0:4023:3003::1aπŸ‡ΊπŸ‡Έ Google2607:f8b0::/32
PTRyulnkjt-in-f26.1e100.net
A172.253.145.26πŸ‡ΊπŸ‡Έ Google172.253.145.0/24
PTRyulnkjt-in-f26.1e100.net
MXaspmx2.googlemail.com(15)
A2607:f8b0:4023:2801::1bπŸ‡ΊπŸ‡Έ Google2607:f8b0::/32
PTRlcausi-in-f27.1e100.net
A192.178.128.26πŸ‡ΊπŸ‡Έ Google192.178.128.0/24
PTRlcausi-in-f26.1e100.net
MXaspmx3.googlemail.com(20)
A2607:f8b0:4023:3003::1bπŸ‡ΊπŸ‡Έ Google2607:f8b0::/32
PTRyulnkjt-in-f27.1e100.net
A172.253.145.27πŸ‡ΊπŸ‡Έ Google172.253.145.0/24
PTRyulnkjt-in-f27.1e100.net
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.79.68, 172.67.169.60
IPv6 hints2606:4700:3034::ac43:a93c, 2606:4700:3035::6815:4f44
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=141, name=cloudflare-ech.com
SOAgreg.ns.cloudflare.comdns@cloudflare.com serial=2401690313

ba

DNSSEC⚠️ Not signed
NSbosna.utic.net.ba ⭐
NSlim.utic.net.ba
NSsava.utic.net.ba
NSuna.utic.net.ba
SOAbosna.utic.net.bahostmaster@bosna.utic.net.ba serial=1778371202

Same first word

Similar names

DNS History

15 records (11 active, 4 former)

201820192020202120222023202420252026NSgreg.ns.cloudflare.comrita.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comA104.21.79.68172.67.169.602606:4700:3034::ac43:a93c2606:4700:3035::6815:4f44104.27.146.208104.27.147.2082400:cb00:2048:1::681b:92d02400:cb00:2048:1::681b:93d0
●NSgreg.ns.cloudflare.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●NSrita.ns.cloudflare.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●MXalt1.aspmx.l.google.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●MXalt2.aspmx.l.google.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●MXaspmx.l.google.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●MXaspmx2.googlemail.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●MXaspmx3.googlemail.com2017-03-16 β†’ 2026-05-10 Β· 2 obs
● 2017-03-16 17:29:38
● 2026-05-10 03:07:56
●A104.21.79.682026-02-24 β†’ 2026-05-10 Β· 3 obs
β—‹ 2017-03-16 17:29:38
● 2026-02-24 22:25:54
● 2026-05-10 03:07:56
β—‹A104.27.146.2082017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:29:38
β—‹ 2026-02-24 22:25:54
β—‹ 2026-05-10 03:07:56
β—‹A104.27.147.2082017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:29:38
β—‹ 2026-02-24 22:25:54
β—‹ 2026-05-10 03:07:56
●A172.67.169.602026-02-24 β†’ 2026-05-10 Β· 3 obs
β—‹ 2017-03-16 17:29:38
● 2026-02-24 22:25:54
● 2026-05-10 03:07:56
β—‹A2400:cb00:2048:1::681b:92d02017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:29:38
β—‹ 2026-02-24 22:25:54
β—‹ 2026-05-10 03:07:56
β—‹A2400:cb00:2048:1::681b:93d02017-03-16 β†’ 2017-03-16 Β· 3 obs
● 2017-03-16 17:29:38
β—‹ 2026-02-24 22:25:54
β—‹ 2026-05-10 03:07:56
●A2606:4700:3034::ac43:a93c2026-02-24 β†’ 2026-05-10 Β· 3 obs
β—‹ 2017-03-16 17:29:38
● 2026-02-24 22:25:54
● 2026-05-10 03:07:56
●A2606:4700:3035::6815:4f442026-02-24 β†’ 2026-05-10 Β· 3 obs
β—‹ 2017-03-16 17:29:38
● 2026-02-24 22:25:54
● 2026-05-10 03:07:56

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
basava.utic.net.ba, bosna.utic.net.ba, lim.utic.net.ba, una.utic.net.ba6 records
exploit.bagreg.ns.cloudflare.com, rita.ns.cloudflare.com-

βœ… Authoritative Response

Server:173.245.58.140

NS records: greg.ns.cloudflare.com, rita.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ba (unsigned zone)

⏱️ Timing

Total: 624ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.169.60, 104.21.79.68
AAAA22606:4700:3035::6815:4f44, 2606:4700:3034::ac43:a93c
NS2greg.ns.cloudflare.com, rita.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 0), alt2.aspmx.l.google.com (pri: 10)...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1greg.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 6

In-bailiwick: 6 (bosna.utic.net.ba, sava.utic.net.ba, una.utic.net.ba...)

Analysis

IP Addresses

exploit.ba maps to four IP numbers: 2606:4700:3034::ac43:a93c, 2606:4700:3035::6815:4f44, 104.21.79.68 and 172.67.169.60.

Other host names, for instance geminidw.com, koodler.de, rimex.com, www.aislater.com.mx and shubhapallaba.in share IP numbers with exploit.ba.

Name Servers

Two name servers greg.ns.cloudflare.com and rita.ns.cloudflare.com are delegated to exploit.ba.

exploit.ba uses the same name server configuration as other domains, such as gm2u.co, gbbm.org.my, mertcanisler.com, ktwg.org and hestra.no.

exploit.ba at least partially shares name servers with other domains such as hostablanca.com, ankaraicmimarlik.com, apiscout.dev, as51430.net and inmedi.xyz.

These name servers are commonly used alongside andy.ns.cloudflare.com, tim.ns.cloudflare.com and adaline.ns.cloudflare.com.

Host names with six IP numbers: Host name greg.ns.cloudflare.com points to 2606:4700:58::adf5:3b73, 2803:f800:50::6ca2:c173, 2a06:98c1:50::ac40:2173, 108.162.193.115, 172.64.33.115 and 173.245.59.115; host name rita.ns.cloudflare.com points to 2606:4700:50::adf5:3a8c, 2803:f800:50::6ca2:c08c, 2a06:98c1:50::ac40:208c, 108.162.192.140, 172.64.32.140 and 173.245.58.140.

Mail Servers

exploit.ba is handled by five mail servers: aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx.l.google.com, alt1.aspmx.l.google.com and alt2.aspmx.l.google.com.

exploit.ba shares mail servers with other domains at least in part, for instance elabmexico.com, exposer.no, ns500821.ns500821.ns500821.ns500794.ns500841.ns500794.ns500795.ns500794.ns500794.lustypartnersfinder.com, ns500742.ns500754.ns500731.ns500754.ns500705.ns500731.ns500671.ns500671.ns500671.ns500705.ns500671.ns500678.ns500649.ns500649.ns500291.ns500131.lustychickser.com and ns500731.ns500742.ns500731.ns500742.ns500671.ns500742.ns500671.ns500704.ns500671.ns500666.ns500153.tenderladiesbz.com.

These mail servers are often used together with alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx4.googlemail.com and aspmx5.googlemail.com.

Two IPs per host name:

aspmx2.googlemail.com points to: 2607:f8b0:4023:2801::1b and 192.178.128.26

aspmx3.googlemail.com points to: 2607:f8b0:4023:3003::1b and 172.253.145.27

aspmx.l.google.com points to: 2607:f8b0:4004:c21::1a and 142.251.167.26

alt1.aspmx.l.google.com points to: 2800:3f0:4003:c0f::1b and 108.177.123.26

alt2.aspmx.l.google.com points to: 2607:f8b0:4023:3003::1a and 172.253.145.26

Pattern: left IDs ascend by 9 (12, 21, 30, 39, 48); each pair of targets ascend by 9 (15/18, 24/27, 33/36, 42/45, 51/54)