exploit.zip - robtex.com

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

exploit.zip

DNSSEC⚠️ Not signed
A2606:4700:3030::6815:4831πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::ac43:af19πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.72.49Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.175.25πŸ‡ΊπŸ‡Έ Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSdakota.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c4fπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdakota.ns.cloudflare.com
A2803:f800:50::6ca2:c34fπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRdakota.ns.cloudflare.com
A2a06:98c1:50::ac40:234fπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRdakota.ns.cloudflare.com
A108.162.195.79πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdakota.ns.cloudflare.com
A162.159.44.79Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdakota.ns.cloudflare.com
A172.64.35.79πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRdakota.ns.cloudflare.com
NSsunny.ns.cloudflare.com
A2606:4700:50::a29f:26a6πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsunny.ns.cloudflare.com
A2803:f800:50::6ca2:c2a6πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsunny.ns.cloudflare.com
A2a06:98c1:50::ac40:22a6πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRsunny.ns.cloudflare.com
A108.162.194.166πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsunny.ns.cloudflare.com
A162.159.38.166Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsunny.ns.cloudflare.com
A172.64.34.166πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsunny.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.72.49, 172.67.175.25
IPv6 hints2606:4700:3030::6815:4831, 2606:4700:3037::ac43:af19
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=237, name=cloudflare-ech.com
SOAdakota.ns.cloudflare.comdns@cloudflare.com serial=2415221644

zip

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
⚠️ On DNS blocklist: spam-tlds
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

10 records (6 active, 4 former)

NSdakota.ns.cloudflare.comsunny.ns.cloudflare.comA104.21.72.49172.67.175.252606:4700:3030::6815:48312606:4700:3037::ac43:af19188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSdakota.ns.cloudflare.com2026-09-18 β†’ 2026-09-28 Β· 2 obs
● 2026-09-18 22:54:04
● 2026-09-28 21:20:40
●NSsunny.ns.cloudflare.com2026-09-18 β†’ 2026-09-28 Β· 2 obs
● 2026-09-18 22:54:04
● 2026-09-28 21:20:40
●A104.21.72.492026-09-20 β†’ 2026-09-28 Β· 5 obs
β—‹ 2026-09-18 22:54:04
● 2026-09-20 14:36:22
β—‹ 2026-09-27 07:06:54
● 2026-09-28 13:58:34
● 2026-09-28 21:20:40
●A172.67.175.252026-09-20 β†’ 2026-09-28 Β· 5 obs
β—‹ 2026-09-18 22:54:04
● 2026-09-20 14:36:22
β—‹ 2026-09-27 07:06:54
● 2026-09-28 13:58:34
● 2026-09-28 21:20:40
β—‹A188.114.96.02026-09-18 β†’ 2026-09-27 Β· 5 obs
● 2026-09-18 22:54:04
β—‹ 2026-09-20 14:36:22
● 2026-09-27 07:06:54
β—‹ 2026-09-28 13:58:34
β—‹ 2026-09-28 21:20:40
β—‹A188.114.97.02026-09-18 β†’ 2026-09-27 Β· 5 obs
● 2026-09-18 22:54:04
β—‹ 2026-09-20 14:36:22
● 2026-09-27 07:06:54
β—‹ 2026-09-28 13:58:34
β—‹ 2026-09-28 21:20:40
●A2606:4700:3030::6815:48312026-09-20 β†’ 2026-09-28 Β· 5 obs
β—‹ 2026-09-18 22:54:04
● 2026-09-20 14:36:22
β—‹ 2026-09-27 07:06:54
● 2026-09-28 13:58:34
● 2026-09-28 21:20:40
●A2606:4700:3037::ac43:af192026-09-20 β†’ 2026-09-28 Β· 5 obs
β—‹ 2026-09-18 22:54:04
● 2026-09-20 14:36:22
β—‹ 2026-09-27 07:06:54
● 2026-09-28 13:58:34
● 2026-09-28 21:20:40
β—‹A2a06:98c1:3120::2026-09-18 β†’ 2026-09-27 Β· 5 obs
● 2026-09-18 22:54:04
β—‹ 2026-09-20 14:36:22
● 2026-09-27 07:06:54
β—‹ 2026-09-28 13:58:34
β—‹ 2026-09-28 21:20:40
β—‹A2a06:98c1:3121::2026-09-18 β†’ 2026-09-27 Β· 5 obs
● 2026-09-18 22:54:04
β—‹ 2026-09-20 14:36:22
● 2026-09-27 07:06:54
β—‹ 2026-09-28 13:58:34
β—‹ 2026-09-28 21:20:40

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
zipns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...10 records
exploit.zipsunny.ns.cloudflare.com, dakota.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.195.79

NS records: sunny.ns.cloudflare.com, dakota.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for exploit.zip (unsigned zone)

⏱️ Timing

Total: 1106ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.175.25, 104.21.72.49
AAAA22606:4700:3037::ac43:af19, 2606:4700:3030::6815:4831
NS2dakota.ns.cloudflare.com, sunny.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1dakota.ns.cloudflare.com dns.cloudflare.

πŸ“Œ Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)

Analysis

IP Addresses

exploit.zip resolves to four IP addresses: 104.21.72.49, 172.67.175.25, 2606:4700:3030::6815:4831 and 2606:4700:3037::ac43:af19.

slimboost.click, safirtema.com, euhedron.net plus two other host names have IP numbers in common with exploit.zip.

Name Servers

DNS delegation for exploit.zip points to two name servers: dakota.ns.cloudflare.com and sunny.ns.cloudflare.com.

The name server configuration of exploit.zip is shared with other domains, for instance xn--gmq658asd241drqkqvcz0gf06b.jp.net, sc888.in.net, abelatha.sa.com and two others.

exploit.zip partially shares its NS delegation with several other domains, including ajdmjakiur.com, titans.vision, domusoft.com and two others.

These name servers are regularly seen alongside kurt.ns.cloudflare.com and ricardo.ns.cloudflare.com as name servers.

Hosts with 6 IP addresses each:

dakota.ns.cloudflare.com has IP addresses 108.162.195.79, 162.159.44.79 and 172.64.35.79, plus 3 other.

sunny.ns.cloudflare.com has IP addresses 108.162.194.166, 162.159.38.166 and 172.64.34.166, plus 3 other.