CF1760351433949-tsm20251012143351

MXLIST.NET - spam.wtf

Search for IP or hostnames:

spam.wtf checked at 2025-10-13T10:30:33.937Z 307ms 82/82/82 100% R:16

spam.wtf

MXbott.im
A2a03:4000:41:1c4::1 🇩🇪 netcup GmbH
PTRbott.im
A85.209.49.109🇩🇪 netcup GmbH
PTRbott.im
NSns.udag.de
A2001:8d8:fe:53:217:160:80:253 🇩🇪 IONOS SE
PTRns.udag.de
A217.160.80.253🇩🇪 IONOS SE
PTRns.udag.de
NSns.udag.net
A2607:f1c0:fe:53:185:132:33:253 🇺🇸 IONOS-Anycast
PTRns.udag.net
A185.132.33.253🇩🇪 IONOS-Anycast
PTRns.udag.net
NSns.udag.org
A2607:f1c0:fe:53:185:132:34:253 🇺🇸 IONOS-Anycast
PTRns.udag.org
A185.132.34.253🇩🇪 IONOS-Anycast
PTRns.udag.org
A85.209.49.109🇩🇪 netcup GmbH
PTRbott.im

wtf

NSv0n0.nic.wtf
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf

Starts with same word

Starts similarily

AI analysis

spam.wtf resolves to a single IP: 85.209.49.109.

Other host names share IP numbers with spam.wtf; for instance bott.im.

spam.wtf delegates to three name servers: ns.udag.de, ns.udag.net and ns.udag.org.

spam.wtf shares some name servers with other domains, for example gegos-club.com, expresstinte.info, easycredit-bbl.com, rbpl.de and campingbus-portal.com.

Host names with two IP numbers:

ns.udag.de: 2001:8d8:fe:53:217:160:80:253 and 217.160.80.253

ns.udag.net: 2607:f1c0:fe:53:185:132:33:253 and 185.132.33.253

ns.udag.org: 2607:f1c0:fe:53:185:132:34:253 and 185.132.34.253

spam.wtf is handled by a single mail server, bott.im.

spam.wtf uses the same mail server setup as other domains, for example nuessknacker.de.

bott.im resolves to two IPs: 2a03:4000:41:1c4::1 and 85.209.49.109.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

qHSznbw CF johedugfp 2025-10-13