scriptloader.wtf - robtex.com

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

scriptloader.wtf

DNSSEC⚠️ Not signed
A2606:4700:3031::ac43:976e🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3034::6815:58aa🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.88.170Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.151.110🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSamos.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c78🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamos.ns.cloudflare.com
A2803:f800:50::6ca2:c378🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRamos.ns.cloudflare.com
A2a06:98c1:50::ac40:2378🇺🇸 Cloudflare2a06:98c1:50::/45
PTRamos.ns.cloudflare.com
A108.162.195.120🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamos.ns.cloudflare.com
A162.159.44.120Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamos.ns.cloudflare.com
A172.64.35.120🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRamos.ns.cloudflare.com
NSannalise.ns.cloudflare.com
A2606:4700:50::a29f:26ea🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannalise.ns.cloudflare.com
A2803:f800:50::6ca2:c2ea🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRannalise.ns.cloudflare.com
A2a06:98c1:50::ac40:22ea🇺🇸 Cloudflare2a06:98c1:50::/45
PTRannalise.ns.cloudflare.com
A108.162.194.234🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannalise.ns.cloudflare.com
A162.159.38.234Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannalise.ns.cloudflare.com
A172.64.34.234🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRannalise.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.88.170, 172.67.151.110
IPv6 hints2606:4700:3031::ac43:976e, 2606:4700:3034::6815:58aa
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=201, name=cloudflare-ech.com
SOAamos.ns.cloudflare.comdns@cloudflare.com serial=2415159407

wtf

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.wtf ⭐
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf
SOAv0n0.nic.wtfhostmaster@donuts.email serial=1791226683
⚠️ On DNS blocklist: spam-tlds

Same first word

scriptloader.com
scriptloader.wtf
scriptloader.xyz
scriptloader.online

Similar names

directorspal.com
delistarcorp.com
predictsolar.com
creditprosla.com
creditporsal.com
sicredportal.info
solarpredict.com
placidresort.com
droparticles.com
sportclearid.com
declairsport.com
predictsolar.xyz

Previous names

scr111casino.wtf
scr55casino.wtf
scrambld.wtf
scrape.wtf
scrappy.wtf
scraps.wtf
scratch.wtf
scratchcard.wtf
scrawl.wtf
screed.wtf
screw.wtf
screwed.wtf
screwtape.wtf
scribble.wtf
scribblecat.wtf
scribbltrump.wtf
scribe.wtf
scrimps.wtf
scripting.wtf
scriptkitty.wtf

Next names

scripts.wtf
scriptus-kaktus.wtf
scriptware.wtf
scroll.wtf
scrooge.wtf
scrpt.wtf
scrr.wtf
scrub.wtf
scrum.wtf
sct.wtf
sctflash.wtf
scuba.wtf
scubaninja.wtf
scully.wtf
scum.wtf
scumbags.wtf
scuttieball.wtf
scx.wtf
scy.wtf

DNS History

6 records (6 active, 0 former)

NSamos.ns.cloudflare.comannalise.ns.cloudflare.comA104.21.88.170172.67.151.1102606:4700:3031::ac43:976e2606:4700:3034::6815:58aa
●NSamos.ns.cloudflare.com2026-09-18 → 2026-10-05 · 2 obs
● 2026-09-18 01:13:12
● 2026-10-05 20:01:28
●NSannalise.ns.cloudflare.com2026-09-18 → 2026-10-05 · 2 obs
● 2026-09-18 01:13:12
● 2026-10-05 20:01:28
●A104.21.88.1702026-09-18 → 2026-10-05 · 2 obs
● 2026-09-18 01:13:12
● 2026-10-05 20:01:28
●A172.67.151.1102026-09-18 → 2026-10-05 · 2 obs
● 2026-09-18 01:13:12
● 2026-10-05 20:01:28
●A2606:4700:3031::ac43:976e2026-09-18 → 2026-10-05 · 2 obs
● 2026-09-18 01:13:12
● 2026-10-05 20:01:28
●A2606:4700:3034::6815:58aa2026-09-18 → 2026-10-05 · 2 obs
● 2026-09-18 01:13:12
● 2026-10-05 20:01:28

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
wtfv0n0.nic.wtf, v2n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...12 records
scriptloader.wtfamos.ns.cloudflare.com, annalise.ns.cloudflare.com-

✅ Authoritative Response

Server:162.159.44.120

NS records: amos.ns.cloudflare.com, annalise.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 570ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.88.170, 172.67.151.110
AAAA22606:4700:3034::6815:58aa, 2606:4700:3031::ac43:976e
NS2amos.ns.cloudflare.com, annalise.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1amos.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf...)

Analysis

IP Addresses

scriptloader.wtf directs to four IP numbers, which are 104.21.88.170, 172.67.151.110, 2606:4700:3031::ac43:976e and 2606:4700:3034::6815:58aa.

dizipal1233.com, bassbetag.com, sekabelt-rsm.com and two other host names share IP numbers with scriptloader.wtf.

Name Servers

scriptloader.wtf is served by two delegated name servers, amos.ns.cloudflare.com and annalise.ns.cloudflare.com.

scriptloader.wtf uses the same name servers as several other domains — among them rustultimate.com, trashbin-notreallyreal.workers.dev, saltajewellery.com and two more.

At least some of scriptloader.wtf's name servers are shared with other domains, for example fibeno6009-22683-0-ukp.pages.dev, chitarroni.ar, tyler-80d.workers.dev and two more.

These name servers tend to be deployed in combination with the name servers millie.ns.cloudflare.com and cass.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

amos.ns.cloudflare.com carries IP addresses 108.162.195.120, 162.159.44.120 and 172.64.35.120, with 3 other addresses beyond those.

annalise.ns.cloudflare.com carries IP addresses 108.162.194.234, 162.159.38.234 and 172.64.34.234, with 3 other addresses beyond those.