worm.wtf - robtex.com

worm.wtf

DNSSEC⚠️ Not signed
A216.150.1.1🇨🇦 Amazon216.150.1.0/24 EC2 Prefix
NSquentin.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2c07🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRquentin.ns.cloudflare.com
A2803:f800:50::6ca2:c307🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRquentin.ns.cloudflare.com
A2a06:98c1:50::ac40:2307🇺🇸 Cloudflare2a06:98c1:50::/45
PTRquentin.ns.cloudflare.com
A108.162.195.7🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRquentin.ns.cloudflare.com
A162.159.44.7Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRquentin.ns.cloudflare.com
A172.64.35.7🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRquentin.ns.cloudflare.com
NSyolanda.ns.cloudflare.com
A2606:4700:50::adf5:3af1🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyolanda.ns.cloudflare.com
A2803:f800:50::6ca2:c0f1🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRyolanda.ns.cloudflare.com
A2a06:98c1:50::ac40:20f1🇺🇸 Cloudflare2a06:98c1:50::/45
PTRyolanda.ns.cloudflare.com
A108.162.192.241🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyolanda.ns.cloudflare.com
A172.64.32.241🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyolanda.ns.cloudflare.com
A173.245.58.241🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRyolanda.ns.cloudflare.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c1b::1b🇺🇸 Google2607:f8b0:4004::/48
PTRwv-in-f27.1e100.net
A192.178.218.26🇺🇸 Google192.178.218.0/24
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1a🇨🇱 Google2800:3f0:4003::/48
A108.177.123.26🇺🇸 Google108.177.123.0/24
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1b🇮🇪 Google2a00:1450:400b::/48
PTRdj-in-f27.1e100.net
A172.253.116.26🇺🇸 Google172.253.116.0/24
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1b🇬🇧 Google2a00:1450:4009::/48
PTRyulhrs-in-f27.1e100.net
A192.178.223.26🇺🇸 Google192.178.223.0/24
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1a🇧🇪 Google2a00:1450:400c::/48
PTRyubrupd-in-f26.1e100.net
A172.253.157.27🇺🇸 Google172.253.0.0/16
TXTbf39bfa4-b0f7-495e-83bf-f5dce4138749=dd416b653460c6439cb20b63902b8589157bd77a...
TXTgoogle-site-verification=-m0KYHDY0YUxZC1XactR692r1gpUx8-BUmF904mEwqY
TXTgoogle-site-verification=alHgaAm4bdYeSf6O8LDrXmsFHYfwPFrAUgZWXqOKlfQ
TXTv=spf1 include:_spf.google.com -all
SOAquentin.ns.cloudflare.comdns@cloudflare.com serial=2408818437

wtf

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.wtf ⭐
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf
SOAv0n0.nic.wtfhostmaster@donuts.email serial=1783439398
📈 Tranco rank: #381,701

Previously MX for

worm.wtf

Same first word

worm.ws
worm.cz
worm.ca
worm.nl
worm.nu
worm.info
worm.farm
worm.at
worm.is
worm.com.cn
worm.pink
worm.co.in
worm.me
worm.wtf
worm.co.uk
worm.finance
worm.ch
worm.zone
worm.org
worm.sh
worm.co
worm.it
worm.exchange
worm.dance
worm.ae
worm.fr
worm.com.pl
worm.be
worm.ly
worm.su
worm.ee
worm.tv
worm.town
worm.net
worm.com
worm.de
worm.cn
worm.money
worm.com.br
worm.eu
worm.pl
worm.biz
worm.city
worm.kasserver.com
worm.us
worm.org.ua

Similar names

mrow.org
rwmo.cz
wrom.de
mwor.cn
wrom.net
rwmo.eu
mrow.net
mowr.gov.sd
mowr.nic.in
womr.org
wmro.net
mowr.net
omrw.com
wrom.nl
mowr.mobi
rowm.ru
owrm.de
rowm.cn
mowr.gov.sy
mowr.gov.pk
wmro.com
mrwo.com
owrm.com
womr.ru
rmwo.com
wrmo.com
orwm.org
wrom.com
romw.co
mowr.gov.iq
morw.de
romw.com.br
mowr.com.au
mowr.gov.in
wrom.eu
mrow.de
romw.com
wmor.com
ormw.com
rmwo.shop
orwm.com
rwmo.com
mrow.com
rowm.info
wmor.us
mwor.com

DNS History

12 records (8 active, 4 former)

202120222023202420252026NSquentin.ns.cloudflare.comyolanda.ns.cloudflare.comns1.myhigh.websitens2.myhigh.websiteMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comworm.wtfA216.150.1.1199.188.203.92
○NSns1.myhigh.website2020-01-02 → 2020-01-02 · 3 obs
● 2020-01-02 08:10:04
○ 2026-06-11 11:15:34
○ 2026-07-07 16:26:56
○NSns2.myhigh.website2020-01-02 → 2020-01-02 · 3 obs
● 2020-01-02 08:10:04
○ 2026-06-11 11:15:34
○ 2026-07-07 16:26:56
●NSquentin.ns.cloudflare.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
●NSyolanda.ns.cloudflare.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
●MXalt1.aspmx.l.google.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
●MXalt2.aspmx.l.google.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
●MXalt3.aspmx.l.google.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
●MXalt4.aspmx.l.google.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
●MXaspmx.l.google.com2026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56
○MXworm.wtf2020-01-02 → 2020-01-02 · 3 obs
● 2020-01-02 08:10:04
○ 2026-06-11 11:15:34
○ 2026-07-07 16:26:56
○A199.188.203.922020-01-02 → 2020-01-02 · 3 obs
● 2020-01-02 08:10:04
○ 2026-06-11 11:15:34
○ 2026-07-07 16:26:56
●A216.150.1.12026-06-11 → 2026-07-07 · 3 obs
○ 2020-01-02 08:10:04
● 2026-06-11 11:15:34
● 2026-07-07 16:26:56

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
wtfv0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...12 records
worm.wtfquentin.ns.cloudflare.com, yolanda.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.192.241

NS records: quentin.ns.cloudflare.com, yolanda.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for worm.wtf (unsigned zone)

⏱️ Timing

Total: 1768ms | Queries: -

📄 Records

TypeCountSample Data
A1216.150.1.1
NS2quentin.ns.cloudflare.com, yolanda.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT4bf39bfa4-b0f7-495e-83bf-f5dce4138749=dd4, google-site-verification=-m0KYHDY0YUxZC1...
SOA1quentin.ns.cloudflare.com dns.cloudflare

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf...)

Analysis

IP Addresses

worm.wtf directs to one IP number, which is 216.150.1.1.

Among the host names that share IP numbers with worm.wtf are thickac.com, drms.info, dexscreen-vote.com and two others.

Name Servers

DNS delegation for worm.wtf points to two name servers: quentin.ns.cloudflare.com and yolanda.ns.cloudflare.com.

worm.wtf has the same name server delegation as a number of other domains, such as restaurantecasamarino.com, centromipc.com, tie-rack.co.uk and two more.

worm.wtf has at least partial name server overlap with other domains, such as a0248.cn, marywade.org, sketchshortcuts.com and two others.

These name servers tend to appear together with the name servers lia.ns.cloudflare.com, princess.ns.cloudflare.com and syeef.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

quentin.ns.cloudflare.com has IP addresses 108.162.195.7, 162.159.44.7 and 172.64.35.7, plus 3 other.

yolanda.ns.cloudflare.com has IP addresses 108.162.192.241, 172.64.32.241 and 173.245.58.241, plus 3 other.

Mail Servers

Mail for worm.wtf is handled by five mail servers, namely aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

worm.wtf shares at least some of its mail servers with other domains — for example leememphisking.com, ns500671.ns500731.ns500742.ns500742.ns500754.ns500742.ns500671.ns500678.ns500678.ns500291.ns500291.ns500649.ns500291.ns500666.tenderladiesbz.com, ns500742.ns500671.ns500742.ns500671.ns500742.ns500704.ns500731.ns500731.ns500678.ns500649.ns500688.ns500678.ns500671.ns500666.ns500291.ns500131.lustychickser.com and two more.

It is common for these mail servers to co-occur with alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and aspmx3.googlemail.com as mail servers.

Hosts with two IP numbers each:

aspmx.l.google.com has two IP addresses: 192.178.218.26 and 2607:f8b0:4004:c1b::1b.

alt1.aspmx.l.google.com has two IP addresses: 108.177.123.26 and 2800:3f0:4003:c0f::1a.

alt2.aspmx.l.google.com has two IP addresses: 172.253.116.26 and 2a00:1450:400b:c02::1b.

alt3.aspmx.l.google.com has two IP addresses: 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com has two IP addresses: 172.253.157.27 and 2a00:1450:400c:c23::1a.