🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`distort.wtf`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:28c2^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:bc44^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.40.194^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.188.68^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elliott.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2ce4^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliott.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3e4^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elliott.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23e4^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elliott.ns.cloudflare.com`
		A	108.162.195.228^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliott.ns.cloudflare.com`
		A	162.159.44.228^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliott.ns.cloudflare.com`
		A	172.64.35.228^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elliott.ns.cloudflare.com`
NS	`lindsey.ns.cloudflare.com`
		A	2606:4700:50::a29f:2605^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lindsey.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c205^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lindsey.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2205^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lindsey.ns.cloudflare.com`
		A	108.162.194.5^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lindsey.ns.cloudflare.com`
		A	162.159.38.5^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lindsey.ns.cloudflare.com`
		A	172.64.34.5^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lindsey.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`google-site-verification=SXyIxhZBcj9zxcwPkh7X8ciOyDQ_XEp8cc5YhOz-qE0`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.40.194, 172.67.188.68
		IPv6 hints	2606:4700:3030::6815:28c2, 2606:4700:3036::ac43:bc44
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=72, name=cloudflare-ech.com
SOA	`elliott.ns.cloudflare.com`dns@cloudflare.com serial=2411733198

`wtf`

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.wtf` ⭐
	NS	`v0n1.nic.wtf`
	NS	`v0n2.nic.wtf`
	NS	`v0n3.nic.wtf`
	NS	`v2n0.nic.wtf`
	NS	`v2n1.nic.wtf`
	SOA	`v0n0.nic.wtf`hostmaster@donuts.email serial=1786776882

⚠️ On DNS blocklist: spam-tlds

Same first word

distort.net

distort.ru

distort.wtf

distort.com

Similar names

stordit.com

stortid.com

tridots.de

tridots.com

dotstir.com

drostit.nl

DNS History

11 records (11 active, 0 former)

●NSelliott.ns.cloudflare.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●NSlindsey.ns.cloudflare.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●MXeforward1.registrar-servers.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●MXeforward2.registrar-servers.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●MXeforward3.registrar-servers.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●MXeforward4.registrar-servers.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●MXeforward5.registrar-servers.com2026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●A104.21.40.1942026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●A172.67.188.682026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●A2606:4700:3030::6815:28c22026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

●A2606:4700:3036::ac43:bc442026-07-07 → 2026-08-15 · 2 obs

● 2026-07-07 09:21:08
● 2026-08-15 07:58:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
wtf	v0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...	12 records
distort.wtf	lindsey.ns.cloudflare.com, elliott.ns.cloudflare.com	-

✅ Authoritative Response

Server:162.159.44.228

NS records: lindsey.ns.cloudflare.com, elliott.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for distort.wtf (unsigned zone)

⏱️ Timing

Total: 521ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.188.68, 104.21.40.194`
AAAA	2	`2606:4700:3036::ac43:bc44, 2606:4700:3030::6815:28c2`
NS	2	`elliott.ns.cloudflare.com, lindsey.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	2	`google-site-verification=SXyIxhZBcj9zxcw, v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elliott.ns.cloudflare.com dns.cloudflare`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf...)

Analysis

IP Addresses

distort.wtf directs to four IP numbers, which are 104.21.40.194, 172.67.188.68, 2606:4700:3030::6815:28c2 and 2606:4700:3036::ac43:bc44.

398bet.pro, mytechsolvers.com, xichang123.com plus two other host names have IP numbers in common with distort.wtf.

Name Servers

distort.wtf is delegated to two name servers: elliott.ns.cloudflare.com and lindsey.ns.cloudflare.com.

The name server configuration of distort.wtf is shared with other domains, for instance mitec.in, jkzbjkk2026.com, lupionandrade.com and two others.

The name servers of distort.wtf overlap at least partially with those of other domains — among them mtassociate.com, ilteberdijital.com, restaurant-flammen.dk and two more.

The name servers wells.ns.cloudflare.com, emma.ns.cloudflare.com and jarred.ns.cloudflare.com are commonly seen alongside these name servers.

Hosts with 6 IP addresses each:

elliott.ns.cloudflare.com resolves to 108.162.195.228, 162.159.44.228, 172.64.35.228 and 3 other IP addresses.

lindsey.ns.cloudflare.com resolves to 108.162.194.5, 162.159.38.5, 172.64.34.5 and 3 other IP addresses.

Mail Servers

Five mail servers handle distort.wtf: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

At least some of the mail servers used by distort.wtf are shared with other domains: obviouslylogicalmudfish.shop, godhatesnftees.com, tecnviral.com and two others among them.

The mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com are commonly paired with these mail servers.

Host names resolving to a single IP address:

eforward1.registrar-servers.com points to 162.255.118.51.

eforward2.registrar-servers.com points to 162.255.118.52.

eforward3.registrar-servers.com points to 162.255.118.51.

eforward4.registrar-servers.com points to 162.255.118.52.

eforward5.registrar-servers.com points to 162.255.118.51.

Three host names point to 162.255.118.51: eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com.

eforward2.registrar-servers.com and eforward4.registrar-servers.com are host names that each point to 162.255.118.52 IP addresses.