bandit.wtf - robtex.com

bandit.wtf

DNSSECโš ๏ธ Not signed
A2606:4700:3031::ac43:b1f2๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A2606:4700:3037::6815:439d๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A104.21.67.157Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
A172.67.177.242๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US โœ“ In HTTPS hints
NSabdullah.ns.cloudflare.com โญ
A2606:4700:58::a29f:2ccb๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRabdullah.ns.cloudflare.com
A2803:f800:50::6ca2:c3cb๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRabdullah.ns.cloudflare.com
A2a06:98c1:50::ac40:23cb๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRabdullah.ns.cloudflare.com
A108.162.195.203๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRabdullah.ns.cloudflare.com
A162.159.44.203Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRabdullah.ns.cloudflare.com
A172.64.35.203๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRabdullah.ns.cloudflare.com
NSkia.ns.cloudflare.com
A2606:4700:50::adf5:3ab3๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkia.ns.cloudflare.com
A2803:f800:50::6ca2:c0b3๐Ÿ‡จ๐Ÿ‡ท Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkia.ns.cloudflare.com
A2a06:98c1:50::ac40:20b3๐Ÿ‡บ๐Ÿ‡ธ Cloudflare2a06:98c1:50::/45
PTRkia.ns.cloudflare.com
A108.162.192.179๐Ÿ‡บ๐Ÿ‡ธ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkia.ns.cloudflare.com
A172.64.32.179๐Ÿ‡บ๐Ÿ‡ธ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkia.ns.cloudflare.com
A173.245.58.179๐Ÿ‡บ๐Ÿ‡ธ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkia.ns.cloudflare.com
MXaspmx.l.google.com โญ
A2607:f8b0:4004:c07::1b๐Ÿ‡บ๐Ÿ‡ธ Google2607:f8b0:4004::/48
PTRbc-in-f27.1e100.net
A142.251.179.26๐Ÿ‡บ๐Ÿ‡ธ Google142.251.179.0/24
PTRpd-in-f26.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1b๐Ÿ‡จ๐Ÿ‡ฑ Google2800:3f0:4003::/48
A108.177.123.26๐Ÿ‡บ๐Ÿ‡ธ Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1b๐Ÿ‡ฎ๐Ÿ‡ช Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.26๐Ÿ‡บ๐Ÿ‡ธ Google172.253.116.0/24
PTRdj-in-f26.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b๐Ÿ‡ฌ๐Ÿ‡ง Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.26๐Ÿ‡บ๐Ÿ‡ธ Google192.178.223.0/24
PTRyulhrs-in-f26.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1a๐Ÿ‡ง๐Ÿ‡ช Google2a00:1450:400c::/48
PTRyubrupd-in-f26.1e100.net
A172.253.157.27๐Ÿ‡บ๐Ÿ‡ธ Google172.253.0.0/16
PTRyubrupd-in-f27.1e100.net
TXTbrevo-code:8fd5df3ebe5593f3f05654c8b2815e69
TXTgoogle-site-verification=Htl3dqbbsn0raVI4XbLXtKxrftaWv6hWpSO2h-HugUo
TXTv=spf1 include:_spf.google.com -all
HTTPSHTTP/3, HTTP/2 โœ“ hints match
IPv4 hints104.21.67.157, 172.67.177.242
IPv6 hints2606:4700:3031::ac43:b1f2, 2606:4700:3037::6815:439d
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=148, name=cloudflare-ech.com
SOAabdullah.ns.cloudflare.comdns@cloudflare.com serial=2408909838

wtf

DNSSEC๐Ÿ”’ Signed (DS record present)
NSv0n0.nic.wtf โญ
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf
SOAv0n0.nic.wtfhostmaster@donuts.email serial=1784710563
โš ๏ธ On DNS blocklist: tif

Same first word

Similar names

DNS History

13 records (11 active, 2 former)

NSabdullah.ns.cloudflare.comkia.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA104.21.67.157172.67.177.2422606:4700:3031::ac43:b1f22606:4700:3037::6815:439d2606:4700:3033::6815:439d2606:4700:3033::ac43:b1f2
โ—NSabdullah.ns.cloudflare.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—NSkia.ns.cloudflare.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—MXalt1.aspmx.l.google.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—MXalt2.aspmx.l.google.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—MXalt3.aspmx.l.google.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—MXalt4.aspmx.l.google.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—MXaspmx.l.google.com2026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—A104.21.67.1572026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—A172.67.177.2422026-06-01 โ†’ 2026-07-22 ยท 2 obs
โ— 2026-06-01 14:37:34
โ— 2026-07-22 09:34:20
โ—A2606:4700:3031::ac43:b1f22026-07-02 โ†’ 2026-07-22 ยท 3 obs
โ—‹ 2026-06-01 14:37:34
โ— 2026-07-02 16:37:30
โ— 2026-07-22 09:34:20
โ—‹A2606:4700:3033::6815:439d2026-06-01 โ†’ 2026-06-01 ยท 3 obs
โ— 2026-06-01 14:37:34
โ—‹ 2026-07-02 16:37:30
โ—‹ 2026-07-22 09:34:20
โ—‹A2606:4700:3033::ac43:b1f22026-06-01 โ†’ 2026-06-01 ยท 3 obs
โ— 2026-06-01 14:37:34
โ—‹ 2026-07-02 16:37:30
โ—‹ 2026-07-22 09:34:20
โ—A2606:4700:3037::6815:439d2026-07-02 โ†’ 2026-07-22 ยท 3 obs
โ—‹ 2026-06-01 14:37:34
โ— 2026-07-02 16:37:30
โ— 2026-07-22 09:34:20

๐Ÿ” DNS Trace

๐Ÿ“‹ Delegation Chain

ZoneNameserversGlue
wtfv0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...12 records
bandit.wtfkia.ns.cloudflare.com, abdullah.ns.cloudflare.com-

โœ… Authoritative Response

Server:108.162.195.203

NS records: kia.ns.cloudflare.com, abdullah.ns.cloudflare.com

๐Ÿ”’ DNSSEC Status

โš ๏ธ Insecure (no DNSSEC)

No DS record for bandit.wtf (unsigned zone)

โฑ๏ธ Timing

Total: 2145ms | Queries: -

๐Ÿ“„ Records

TypeCountSample Data
A2104.21.67.157, 172.67.177.242
AAAA22606:4700:3037::6815:439d, 2606:4700:3031::ac43:b1f2
NS2abdullah.ns.cloudflare.com, kia.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT3brevo-code:8fd5df3ebe5593f3f05654c8b2815, google-site-verification=Htl3dqbbsn0raVI...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1abdullah.ns.cloudflare.com dns.cloudflar

๐Ÿ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n0.nic.wtf, v0n1.nic.wtf...)

Analysis

IP Addresses

bandit.wtf resolves to four IP addresses: 104.21.67.157, 172.67.177.242, 2606:4700:3031::ac43:b1f2 and 2606:4700:3037::6815:439d.

Among the host names that share IP numbers with bandit.wtf are designstream.net, artotorium.net, 9999929.com and two others.

Name Servers

bandit.wtf is served by two delegated name servers, abdullah.ns.cloudflare.com and kia.ns.cloudflare.com.

bandit.wtf has the same name server delegation as a number of other domains, such as degengames.fun, boxmanga.online, xn--e1agpbetw.xn--p1ai and two more.

bandit.wtf has at least partial name server overlap with other domains, such as rantaffiliates.com, zanzibar-web.com, eterntoy.com and two others.

It is common to find these name servers paired with the name servers tom.ns.cloudflare.com, dorthy.ns.cloudflare.com, aleena.ns.cloudflare.com and darwin.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

abdullah.ns.cloudflare.com carries IP addresses 108.162.195.203, 162.159.44.203 and 172.64.35.203, with 3 other addresses beyond those.

kia.ns.cloudflare.com carries IP addresses 108.162.192.179, 172.64.32.179 and 173.245.58.179, with 3 other addresses beyond those.

Mail Servers

bandit.wtf is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

bandit.wtf shares at least some of its mail servers with other domains โ€” for example ayrush.com, ns500759.ns500759.ns500698.ns500698.ns500735.ns500735.ns500735.ns500735.ns500736.ns500735.ns500698.ns500698.ns500708.ns500619.ns500698.ns500652.ns500576.trackreceptor.com, ns500759.ns500758.ns500698.ns500698.ns500736.ns500735.ns500736.ns500698.ns500698.ns500735.ns500619.ns500576.ns500576.trackreceptor.com and two more.

It is common to find these mail servers paired with mail servers alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 more.

Hosts with two IP numbers each:

aspmx.l.google.com maps to two IP addresses โ€” 142.251.179.26 and 2607:f8b0:4004:c07::1b.

alt1.aspmx.l.google.com maps to two IP addresses โ€” 108.177.123.26 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com maps to two IP addresses โ€” 172.253.116.26 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com maps to two IP addresses โ€” 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com maps to two IP addresses โ€” 172.253.157.27 and 2a00:1450:400c:c23::1a.