CF1760348661576-tsm20251012143351

MXLIST.NET - shutdown-r.wtf

Search for IP or hostnames:

shutdown-r.wtf checked at 2025-10-13T09:44:21.563Z 340ms 146/146/146 100% R:13

shutdown-r.wtf

MXmail.protonmail.ch
A176.119.200.128🇨🇭 Proton AG
PTRmail.protonmail.ch
A185.70.42.128🇨🇭 Proton AG
PTRmail.protonmail.ch
A185.205.70.128🇫🇷 Proton AG
PTRmail.protonmail.ch
MXmailsec.protonmail.ch
A176.119.200.129🇨🇭 Proton AG
PTRmailsec.protonmail.ch
A185.70.42.129🇨🇭 Proton AG
PTRmailsec.protonmail.ch
A185.205.70.129🇫🇷 Proton AG
PTRmailsec.protonmail.ch
NSernest.ns.cloudflare.com
A2606:4700:58::adf5:3ba4 🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A2803:f800:50::6ca2:c1a4 🇨🇷 Cloudflare
PTRernest.ns.cloudflare.com
A2a06:98c1:50::ac40:21a4 🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A108.162.193.164🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A172.64.33.164🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A173.245.59.164🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
NSlia.ns.cloudflare.com
A2606:4700:50::adf5:3ab9 🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A2803:f800:50::6ca2:c0b9 🇨🇷 Cloudflare
PTRlia.ns.cloudflare.com
A2a06:98c1:50::ac40:20b9 🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A108.162.192.185🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A172.64.32.185🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A173.245.58.185🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A2606:4700:3033::ac43:d531 🇺🇸 Cloudflare
A2606:4700:3035::6815:232c 🇺🇸 Cloudflare
A104.21.35.44 Cloudflare
A172.67.213.49🇺🇸 Cloudflare

wtf

NSv0n0.nic.wtf
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf

Starts with same word

Starts similarily

AI analysis

shutdown-r.wtf maps to four IP numbers: 2606:4700:3033::ac43:d531, 2606:4700:3035::6815:232c, 104.21.35.44 and 172.67.213.49.

Other host names, for instance utters.io, borostyanapartmanok.hu, cleanenergytraining.org, www.jsminjuryfirm.com and carpaine.cn share IP numbers with shutdown-r.wtf.

Two name servers ernest.ns.cloudflare.com and lia.ns.cloudflare.com handle delegation for shutdown-r.wtf.

shutdown-r.wtf uses the same name server setup as other domains, for example faharas.net, covue.cloud, ithotdesk.com, uaveditor.com and covueit.com.

shutdown-r.wtf partially shares name servers with other domains; examples include aad67.com, icas.es, animalsaustralia-media.org, silencertalk.com and gifts4promo.co.uk.

these name servers are commonly used with the name servers coco.ns.cloudflare.com.

Host names with six IP numbers: ernest.ns.cloudflare.com points to: 2606:4700:58::adf5:3ba4, 2803:f800:50::6ca2:c1a4, 2a06:98c1:50::ac40:21a4, 108.162.193.164, 172.64.33.164 and 173.245.59.164; lia.ns.cloudflare.com points to: 2606:4700:50::adf5:3ab9, 2803:f800:50::6ca2:c0b9, 2a06:98c1:50::ac40:20b9, 108.162.192.185, 172.64.32.185 and 173.245.58.185.

shutdown-r.wtf is handled by two mail servers: mail.protonmail.ch and mailsec.protonmail.ch.

shutdown-r.wtf has the same mail server setup as other domains, including lamia.nl, stoneveden.com, base-six.com, drone404.com and gendarling.com.

shutdown-r.wtf shares some mail servers with other domains, at least partially, such as tannartconsulting.com, teledisc.com, apgef.com, jsiegel.org and modolo.fr.

Host names with three IP numbers:

mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128.

mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

YKSIcPb CF johedugfp 2025-10-13