CF1757974642326-tsm20250915173524

DNSWHOIS.INFO - spam.wtf

Search for IP or hostnames:

spam.wtf checked at 2025-09-15T22:17:22.236Z 617ms 82/82/82 100% R:14

spam.wtf

MXbott.im
A2a03:4000:41:1c4::1 🇩🇪 netcup GmbH
PTRbott.im
A85.209.49.109🇩🇪 netcup GmbH
PTRbott.im
NSns.udag.de
A2001:8d8:fe:53:217:160:80:253 🇩🇪 IONOS SE
PTRns.udag.de
A217.160.80.253🇩🇪 IONOS SE
PTRns.udag.de
NSns.udag.net
A2607:f1c0:fe:53:185:132:33:253 🇺🇸 IONOS-Anycast
PTRns.udag.net
A185.132.33.253🇩🇪 IONOS-Anycast
PTRns.udag.net
NSns.udag.org
A2607:f1c0:fe:53:185:132:34:253 🇺🇸 IONOS-Anycast
PTRns.udag.org
A185.132.34.253🇩🇪 IONOS-Anycast
PTRns.udag.org
A85.209.49.109🇩🇪 netcup GmbH
PTRbott.im

wtf

NSv0n0.nic.wtf
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf

Starts with same word

Starts similarily

AI analysis

spam.wtf is associated with the IP address 85.209.49.109.

For example, other host names like bott.im share IP numbers with spam.wtf.

Three name servers, ns.udag.de, ns.udag.net, and ns.udag.org, are delegated to spam.wtf.

Other domains, such as gegos-club.com, expresstinte.info, easycredit-bbl.com, rbpl.de, and campingbus-portal.com, share at least a part of their name servers with spam.wtf.

ns.udag.de, 2001:8d8:fe:53:217:160:80:253, and 217.160.80.253 are associated with each other. Similarly, ns.udag.net, 2607:f1c0:fe:53:185:132:33:253, and 185.132.33.253 are linked, as well as ns.udag.org, 2607:f1c0:fe:53:185:132:34:253, and 185.132.34.253.

The mail server, bott.im, manages spam.wtf.

Just like other domains such as nuessknacker.de, spam.wtf also has the same mail server setup.

bott.im refers to two IP addresses: 2a03:4000:41:1c4::1 and 85.209.49.109.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

SGLleHT CF johedugfp 2025-09-15