scan.wtf - robtex.com
scan.wtf
| DNSSEC | ⚠️ Not signed | ||||||
| A | 13.248.169.48🇺🇸 Amazon13.248.160.0/20 | ||||||
| PTR | a904c694c05102f30.awsglobalaccelerator.com | ||||||
| A | 76.223.54.146🇺🇸 Amazon76.223.48.0/20 | ||||||
| NS | ns1.afternic.com ⭐ | ||||||
| A | 2603:5:2126::45🇺🇸 GODADDY-DNS2603:5:2120::/44 | ||||||
| PTR | ns1.afternic.com | ||||||
| A | 97.74.98.69🇺🇸 GODADDY-DNS97.74.98.0/23 | ||||||
| PTR | ns1.afternic.com | ||||||
| NS | ns2.afternic.com | ||||||
| A | 2603:5:2226::45🇺🇸 GODADDY-DNS2603:5:2220::/44 | ||||||
| PTR | ns2.afternic.com | ||||||
| A | 173.201.66.69🇺🇸 GODADDY-DNS173.201.66.0/23 | ||||||
| PTR | ns2.afternic.com | ||||||
| NS | verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn ⚠️ Not in zone NS records | ||||||
| A | 13.248.169.48🇺🇸 Amazon13.248.160.0/20 | ||||||
| PTR | a904c694c05102f30.awsglobalaccelerator.com | ||||||
| A | 76.223.54.146🇺🇸 Amazon76.223.48.0/20 | ||||||
| PTR | a904c694c05102f30.awsglobalaccelerator.com | ||||||
| TXT | v=spf1 -all | ||||||
| SOA | ns1.afternic.comdns@jomax.net serial=1 | ||||||
wtf
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.wtf ⭐ | ||||||
| NS | v0n1.nic.wtf | ||||||
| NS | v0n2.nic.wtf | ||||||
| NS | v0n3.nic.wtf | ||||||
| NS | v2n0.nic.wtf | ||||||
| NS | v2n1.nic.wtf | ||||||
| SOA | v0n0.nic.wtfhostmaster@donuts.email serial=1783779360 | ||||||
Same first word
Similar names
DNS History
13 records (5 active, 8 former)
○NSns-uk.1and1-dns.biz2016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
○NSns-uk.1and1-dns.co.uk2016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
○NSns-uk.1and1-dns.com2016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
○NSns-uk.1and1-dns.org2016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
●NSns1.afternic.com2026-06-26 → 2026-07-11 · 3 obs
● 2026-06-26 13:29:22
● 2026-07-11 14:57:00
●NSns2.afternic.com2026-06-26 → 2026-07-11 · 3 obs
● 2026-06-26 13:29:22
● 2026-07-11 14:57:00
●NSverification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn2026-06-26 → 2026-07-11 · 3 obs
● 2026-06-26 13:29:22
● 2026-07-11 14:57:00
○MXmx00.1and1.co.uk2016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
○MXmx01.1and1.co.uk2016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
●A13.248.169.482026-06-26 → 2026-07-11 · 3 obs
● 2026-06-26 13:29:22
● 2026-07-11 14:57:00
○A2001:8d8:1000:90b6:d173:abab:e425:a0372016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
○A217.160.233.512016-12-11 → 2016-12-11 · 3 obs
○ 2026-06-26 13:29:22
○ 2026-07-11 14:57:00
●A76.223.54.1462026-06-26 → 2026-07-11 · 3 obs
● 2026-06-26 13:29:22
● 2026-07-11 14:57:00
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| wtf | v0n3.nic.wtf, v0n1.nic.wtf, v0n0.nic.wtf, v2n0.nic.wtf... | 12 records |
| scan.wtf | ns2.afternic.com, verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn, ns1.afternic.com | - |
✅ Authoritative Response
Server:97.74.98.69
NS records: ns2.afternic.com, verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn, ns1.afternic.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for scan.wtf (unsigned zone)
⏱️ Timing
Total: 3523ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 76.223.54.146, 13.248.169.48 |
| NS | 2 | ns1.afternic.com, ns2.afternic.com |
| MX | 1 | . (pri: 0) |
| TXT | 1 | v=spf1 -all |
| SOA | 1 | ns1.afternic.com dns.jomax.net |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v0n3.nic.wtf, v0n3.nic.wtf, v0n1.nic.wtf...)
Analysis
IP Addresses
scan.wtf has two IP addresses: 13.248.169.48 and 76.223.54.146
hostmaster.tankedup.com, kpqn.com, theschooldepot.com plus two other host names have IP numbers in common with scan.wtf.
Name Servers
scan.wtf carries NS records delegating to ns1.afternic.com, ns2.afternic.com and verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn.
There is at least partial name server overlap between scan.wtf and other domains — icuz.com, poog.com, invogue.org and two more among them.
These name servers are routinely deployed together with the name servers verification-hegmxyoxv95qmrgtt3aukn.ns101.verify.hn.
ns1.afternic.com, ns2.afternic.com and verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn are three hostnames that each resolve to a pair of IP addresses: ns1.afternic.com to 97.74.98.69 and 2603:5:2126::45, ns2.afternic.com to 173.201.66.69 and 2603:5:2226::45, and verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn to 13.248.169.48 and 76.223.54.146.