CF1760330426634-tsm20251012143351

MXLIST.NET - ch.wtf

Search for IP or hostnames:

ch.wtf checked at 2025-10-13T04:40:26.513Z 1054ms 115/115/115 100% R:12

ch.wtf

MXcreeperhost.net
A2606:4700:20::681a:405 🇺🇸 Cloudflare
A2606:4700:20::681a:505 🇺🇸 Cloudflare
A2606:4700:20::ac43:4693 🇺🇸 Cloudflare
A104.26.4.5 Cloudflare
A104.26.5.5 Cloudflare
A172.67.70.147🇺🇸 Cloudflare
NSdns1.name-services.com
A2604:4000:2800:2000:64:98:148:137 🇨🇦 TUCOWS-3
A64.98.148.137🇨🇦 TUCOWS-3
NSdns2.name-services.com
A2604:4000:0:d:216:40:47:201 🇨🇦 Tucows
A216.40.47.201🇨🇦 Tucows
NSdns3.name-services.com
A2604:4000:2800:2000:64:98:148:138 🇨🇦 TUCOWS-3
A64.98.148.138🇨🇦 TUCOWS-3
NSdns4.name-services.com
A2604:4000:0:d:216:40:47:202 🇨🇦 Tucows
A216.40.47.202🇨🇦 Tucows
NSdns5.name-services.com
A2604:4000:2800:2000:64:98:148:139 🇨🇦 TUCOWS-3
A64.98.148.139🇨🇦 TUCOWS-3
A149.88.44.164🇺🇸 CreeperHost
PTR164.44.88.149.no-ptr.as201971.net

wtf

NSv0n0.nic.wtf
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf

Starts with same word

Starts similarily

AI analysis

ch.wtf maps to IP address 149.88.44.164.

ch.wtf delegates to five name servers: dns1.name-services.com, dns2.name-services.com, dns3.name-services.com, dns4.name-services.com and dns5.name-services.com.

ch.wtf at least partially shares name servers with other domains such as katyricetherapy.com, gzxingyarui.com, femelle.org, approvedmc.com and otolia.net.

Two IPs per host name:

dns1.name-services.com points to: 2604:4000:2800:2000:64:98:148:137 and 64.98.148.137

dns2.name-services.com points to: 2604:4000:0:d:216:40:47:201 and 216.40.47.201

dns3.name-services.com points to: 2604:4000:2800:2000:64:98:148:138 and 64.98.148.138

dns4.name-services.com points to: 2604:4000:0:d:216:40:47:202 and 216.40.47.202

dns5.name-services.com points to: 2604:4000:2800:2000:64:98:148:139 and 64.98.148.139

Pattern: left IDs ascend by 9 (12, 21, 30, 39, 48); each pair of targets ascend by 9 (15/18, 24/27, 33/36, 42/45, 51/54)

ch.wtf is handled by a single mail server, creeperhost.net.

ch.wtf uses the same mail server setup as other domains, for instance callbacks.io and creeperlabs.com.

creeperhost.net resolves to six IP numbers: 2606:4700:20::681a:405, 2606:4700:20::681a:505, 2606:4700:20::ac43:4693, 104.26.4.5, 104.26.5.5 and 172.67.70.147.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

JePTLwh CF johedugfp 2025-10-13