317.wtf - robtex.com
317.wtf
| DNSSEC | β οΈ Not signed | ||||||
| A | 2606:4700:3032::6815:171πΊπΈ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 2606:4700:3035::ac43:8130πΊπΈ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 104.21.1.113Cloudflare104.21.0.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| A | 172.67.129.48πΊπΈ Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US β In HTTPS hints | ||||||
| NS | johnny.ns.cloudflare.com β | ||||||
| A | 2606:4700:58::a29f:2cbaπΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnny.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c3baπ¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | johnny.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:23baπΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | johnny.ns.cloudflare.com | ||||||
| A | 108.162.195.186πΊπΈ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnny.ns.cloudflare.com | ||||||
| A | 162.159.44.186Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnny.ns.cloudflare.com | ||||||
| A | 172.64.35.186πΊπΈ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnny.ns.cloudflare.com | ||||||
| NS | noor.ns.cloudflare.com | ||||||
| A | 2606:4700:50::a29f:264aπΊπΈ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | noor.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c24aπ¨π· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | noor.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:224aπΊπΈ Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | noor.ns.cloudflare.com | ||||||
| A | 108.162.194.74πΊπΈ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | noor.ns.cloudflare.com | ||||||
| A | 162.159.38.74Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | noor.ns.cloudflare.com | ||||||
| A | 172.64.34.74πΊπΈ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | noor.ns.cloudflare.com | ||||||
| HTTPS | HTTP/3, HTTP/2 β hints match | ||||||
| IPv4 hints | 104.21.1.113, 172.67.129.48 | ||||||
| IPv6 hints | 2606:4700:3032::6815:171, 2606:4700:3035::ac43:8130 | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=7, name=cloudflare-ech.com | ||||||
| SOA | johnny.ns.cloudflare.comdns@cloudflare.com serial=2410761980 | ||||||
wtf
| DNSSEC | π Signed (DS record present) | ||||||
| NS | v0n0.nic.wtf β | ||||||
| NS | v0n1.nic.wtf | ||||||
| NS | v0n2.nic.wtf | ||||||
| NS | v0n3.nic.wtf | ||||||
| NS | v2n0.nic.wtf | ||||||
| NS | v2n1.nic.wtf | ||||||
| SOA | v0n0.nic.wtfhostmaster@donuts.email serial=1785311293 | ||||||
WOT: SUSPICIOUS (1/100)
Same first word
Similar names
DNS History
10 records (6 active, 4 former)
βNSjohnny.ns.cloudflare.com2026-07-25 β 2026-07-29 Β· 2 obs
β 2026-07-29 08:18:22
βNSnoor.ns.cloudflare.com2026-07-25 β 2026-07-29 Β· 2 obs
β 2026-07-29 08:18:22
βA104.21.1.1132026-07-29 β 2026-07-29 Β· 2 obs
β 2026-07-29 08:18:22
βA172.67.129.482026-07-29 β 2026-07-29 Β· 2 obs
β 2026-07-29 08:18:22
βA188.114.96.02026-07-25 β 2026-07-25 Β· 2 obs
β 2026-07-29 08:18:22
βA188.114.97.02026-07-25 β 2026-07-25 Β· 2 obs
β 2026-07-29 08:18:22
βA2606:4700:3032::6815:1712026-07-29 β 2026-07-29 Β· 2 obs
β 2026-07-29 08:18:22
βA2606:4700:3035::ac43:81302026-07-29 β 2026-07-29 Β· 2 obs
β 2026-07-29 08:18:22
βA2a06:98c1:3120::2026-07-25 β 2026-07-25 Β· 2 obs
β 2026-07-29 08:18:22
βA2a06:98c1:3121::2026-07-25 β 2026-07-25 Β· 2 obs
β 2026-07-29 08:18:22
π DNS Trace
π Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| wtf | v0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf... | 12 records |
| 317.wtf | johnny.ns.cloudflare.com, noor.ns.cloudflare.com | - |
β Authoritative Response
Server:162.159.44.186
NS records: johnny.ns.cloudflare.com, noor.ns.cloudflare.com
π DNSSEC Status
β οΈ Insecure (no DNSSEC)
No DS record for 317.wtf (unsigned zone)
β±οΈ Timing
Total: 752ms | Queries: -
π Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 104.21.1.113, 172.67.129.48 |
| AAAA | 2 | 2606:4700:3035::ac43:8130, 2606:4700:3032::6815:171 |
| NS | 2 | johnny.ns.cloudflare.com, noor.ns.cloudflare.com |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | johnny.ns.cloudflare.com dns.cloudflare. |
π Glue Records Collected
Total: 12
In-bailiwick: 12 (v0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf...)
Analysis
IP Addresses
317.wtf points to the four IP addresses 104.21.1.113, 172.67.129.48, 2606:4700:3032::6815:171 and 2606:4700:3035::ac43:8130.
Two other host names, along with www.anterolopes.com, www.krgv.ru and ifret.xyz, also share IP numbers with 317.wtf.
Name Servers
The NS records for 317.wtf delegate to johnny.ns.cloudflare.com and noor.ns.cloudflare.com.
317.wtf shares its NS records with other domains, for example limanbet.net, saloc.net, monchinese.me and two others.
There is at least partial name server overlap between 317.wtf and other domains β yomovies.luxe, (0x736578)vrchat.com, mobile3g.com and two more among them.
These name servers frequently co-occur with the name servers rachel.ns.cloudflare.com and colin.ns.cloudflare.com.
DNS names with 6 IP addresses:
johnny.ns.cloudflare.com maps to 108.162.195.186, 162.159.44.186, 172.64.35.186 and 3 additional IP addresses.
noor.ns.cloudflare.com maps to 108.162.194.74, 162.159.38.74, 172.64.34.74 and 3 additional IP addresses.