CF1759652577331-tsm20251004101907

NSLIST.NET - shutdown-r.wtf

Search for IP or hostnames:

shutdown-r.wtf checked at 2025-10-05T08:22:57.319Z 228ms 149/149/149 100% R:13

shutdown-r.wtf

MXmail.protonmail.ch
A176.119.200.128🇨🇭 Proton AG
PTRmail.protonmail.ch
A185.70.42.128🇨🇭 Proton AG
PTRmail.protonmail.ch
A185.205.70.128🇫🇷 Proton AG
PTRmail.protonmail.ch
MXmailsec.protonmail.ch
A176.119.200.129🇨🇭 Proton AG
PTRmailsec.protonmail.ch
A185.70.42.129🇨🇭 Proton AG
PTRmailsec.protonmail.ch
A185.205.70.129🇫🇷 Proton AG
PTRmailsec.protonmail.ch
NSernest.ns.cloudflare.com
A2606:4700:58::adf5:3ba4 🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A2803:f800:50::6ca2:c1a4 🇨🇷 Cloudflare
PTRernest.ns.cloudflare.com
A2a06:98c1:50::ac40:21a4 🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A108.162.193.164🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A172.64.33.164🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
A173.245.59.164🇺🇸 Cloudflare
PTRernest.ns.cloudflare.com
NSlia.ns.cloudflare.com
A2606:4700:50::adf5:3ab9 🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A2803:f800:50::6ca2:c0b9 🇨🇷 Cloudflare
PTRlia.ns.cloudflare.com
A2a06:98c1:50::ac40:20b9 🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A108.162.192.185🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A172.64.32.185🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A173.245.58.185🇺🇸 Cloudflare
PTRlia.ns.cloudflare.com
A2606:4700:3033::ac43:d531 🇺🇸 Cloudflare
A2606:4700:3035::6815:232c 🇺🇸 Cloudflare
A104.21.35.44 Cloudflare
A172.67.213.49🇺🇸 Cloudflare

wtf

Starts with same word

Starts similarily

AI analysis

shutdown-r.wtf refers to four IP numbers: 2606:4700:3033::ac43:d531, 2606:4700:3035::6815:232c, 104.21.35.44 and 172.67.213.49.

Other host names, for instance utters.io, borostyanapartmanok.hu, cleanenergytraining.org, www.jsminjuryfirm.com and carpaine.cn share IP numbers with shutdown-r.wtf.

shutdown-r.wtf's delegation uses two name servers: ernest.ns.cloudflare.com and lia.ns.cloudflare.com.

shutdown-r.wtf uses the same name server setup as other domains, such as faharas.net, covue.cloud, ithotdesk.com, uaveditor.com and covueit.com.

shutdown-r.wtf at least partially shares name servers with other domains, including aad67.com, icas.es, animalsaustralia-media.org, silencertalk.com and gifts4promo.co.uk.

These name servers are commonly used with coco.ns.cloudflare.com.

Host names with six IP numbers:

ernest.ns.cloudflare.com points to 2606:4700:58::adf5:3ba4, 2803:f800:50::6ca2:c1a4, 2a06:98c1:50::ac40:21a4, 108.162.193.164, 172.64.33.164 and 173.245.59.164.

lia.ns.cloudflare.com points to 2606:4700:50::adf5:3ab9, 2803:f800:50::6ca2:c0b9, 2a06:98c1:50::ac40:20b9, 108.162.192.185, 172.64.32.185 and 173.245.58.185.

shutdown-r.wtf is served by two mail servers mail.protonmail.ch and mailsec.protonmail.ch.

shutdown-r.wtf shares the same mail server setup as other domains, for instance lamia.nl, stoneveden.com, base-six.com, drone404.com and gendarling.com.

shutdown-r.wtf shares at least some mail servers with other domains, for example tannartconsulting.com, teledisc.com, apgef.com, jsiegel.org and modolo.fr.

These mail servers are often used together with the mail servers mx2.zoho.com.

Host names with three IP numbers:

The host name mail.protonmail.ch resolves to 176.119.200.128, 185.70.42.128 and 185.205.70.128.

The host name mailsec.protonmail.ch resolves to 176.119.200.129, 185.70.42.129 and 185.205.70.129.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

HixrdVM CF johedugfp 2025-10-05