ssh.wtf - dns.ninja

ssh.wtf

DNSSEC⚠️ Not signed
A13.248.169.48🇺🇸 Amazon13.248.160.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
A76.223.54.146🇺🇸 Amazon76.223.48.0/20
NSns1.afternic.com ⭐
A2603:5:2126::45🇺🇸 GODADDY-DNS2603:5:2120::/44
PTRns1.afternic.com
A97.74.98.69🇺🇸 GODADDY-DNS97.74.98.0/23
PTRns1.afternic.com
NSns2.afternic.com
A2603:5:2226::45🇺🇸 GODADDY-DNS2603:5:2220::/44
PTRns2.afternic.com
A173.201.66.69🇺🇸 GODADDY-DNS173.201.66.0/23
PTRns2.afternic.com
NSverification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn ⚠️ Not in zone NS records
A13.248.169.48🇺🇸 Amazon13.248.160.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
A76.223.54.146🇺🇸 Amazon76.223.48.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
TXTv=spf1 -all
SOAns1.afternic.comdns@jomax.net serial=1

wtf

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.wtf ⭐
NSv0n1.nic.wtf
NSv0n2.nic.wtf
NSv0n3.nic.wtf
NSv2n0.nic.wtf
NSv2n1.nic.wtf
SOAv0n0.nic.wtfhostmaster@donuts.email serial=1784321095

Same first word

ssh.chat
ssh.us
ssh.rs
ssh.dk
ssh.is
ssh.tw
ssh.world
ssh.it
ssh.info
ssh.run
ssh.net
ssh.ma
ssh.monster
ssh.surf
ssh.be
ssh.contact
ssh.ch
ssh.town
ssh.su
ssh.to
ssh.yt
ssh.cc
ssh.fail
ssh.web.id
ssh.ca
ssh.ru
ssh.zone
ssh.lu
ssh.kz
ssh.biz
ssh.if.ua
ssh.asia
ssh.me
ssh.com.vn
ssh.bz
ssh.co.uk
ssh.no
ssh.co.kr
ssh.sh
ssh.im
ssh.ie
ssh.com.co
ssh.cx
ssh.ng
ssh.nu
ssh.tv
ssh.my.id
ssh.ninja
ssh.co
ssh.in.ua
ssh.dnsalias.org
ssh.fr
ssh.com.cn
ssh.gob.mx
ssh.org.pe
ssh.lv
ssh.center
ssh.fo
ssh.wf
ssh.de
ssh.io
ssh.nl
ssh.cn
ssh.ac
ssh.tf
ssh.kiev.ua
ssh.fi
ssh.network
ssh.vn
ssh.co.in
ssh.es
ssh.com
ssh.se
ssh.consulting
ssh.pl
ssh.cat
ssh.co.jp
ssh.uz
ssh.org
ssh.ink
ssh.giize.com
ssh.am
ssh.engineering
ssh.edu
ssh.rocks
ssh.moe
ssh.cz
ssh.support
ssh.wtf
ssh.at
ssh.blue
ssh.org.sg
ssh.hu
ssh.ls
ssh.guru
ssh.dz
ssh.in

Similar names

hss.cc
hss.com.mx
hss.lv
hss.org.cn
hss.blog.br
hss.gmbh
hss.us
shs.ltd
shs.ru
hss.com
shs.be
shs.is
hss.xyz
hss.or.kr
shs.gr
shs.gmbh
shs.co
shs.net
shs.com.ua
hss.cz
shs.k12.ny.us
hss.fi
hss.ge
hss.sakura.ne.jp
shs.support
hss.edu.tw
hss.asia
shs.ch
hss.rs
shs.org
shs.net.tw
shs.me
hss.hu
hss.gb.net
shs.mx
shs.pt
shs.fr
shs.co.kr
shs.gov.hk
hss.be
hss.ee
hss.cl
hss.is
shs.ro
hss.org.au
shs.tv
hss.center
hss.ro
hss.co
hss.no
shs.sh.cn
shs.hu
shs.lu
shs.vn
hss.im
shs.jp
shs.co.id
hss.ie
shs.ca
hss.ru
hss.nl
hss.eu
shs.cc
hss.jpn.com
shs.by
shs.at
hss.it
shs.nu
hss.systems
hss.de
hss.biz
hss.co.in
shs.co.nz
hss.cn
shs.eu
hss.lu
hss.co.uk
shs.no
shs.pe

DNS History

21 records (5 active, 16 former)

2017201820192020202120222023202420252026NSns1.afternic.comns2.afternic.comverification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hnalex.ns.cloudflare.comdale.ns.cloudflare.comdora.ns.cloudflare.compat.ns.cloudflare.comMXmail.protonmail.chmailsec.protonmail.chmailstore1.secureserver.netsmtp.secureserver.netA13.248.169.4876.223.54.146104.24.110.200104.24.111.200104.28.8.113104.28.9.1132400:cb00:2048:1::681c:8712400:cb00:2048:1::681c:9712606:4700:3033::6818:6fc82606:4700:3035::6818:6ec8
○NSalex.ns.cloudflare.com2016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
○NSdale.ns.cloudflare.com2020-02-29 → 2020-02-29 · 4 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
○ 2026-02-15 02:11:44
○ 2026-07-17 21:14:26
○NSdora.ns.cloudflare.com2016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
●NSns1.afternic.com2026-02-15 → 2026-07-17 · 3 obs
○ 2020-02-29 19:53:08
● 2026-02-15 02:11:44
● 2026-07-17 21:14:26
●NSns2.afternic.com2026-02-15 → 2026-07-17 · 3 obs
○ 2020-02-29 19:53:08
● 2026-02-15 02:11:44
● 2026-07-17 21:14:26
○NSpat.ns.cloudflare.com2020-02-29 → 2020-02-29 · 4 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
○ 2026-02-15 02:11:44
○ 2026-07-17 21:14:26
●NSverification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn2026-02-15 → 2026-07-17 · 3 obs
○ 2020-02-29 19:53:08
● 2026-02-15 02:11:44
● 2026-07-17 21:14:26
○MXmail.protonmail.ch2020-02-29 → 2026-02-15 · 5 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
● 2026-02-15 02:11:44
○ 2026-03-04 23:28:46
○ 2026-07-17 21:14:26
○MXmailsec.protonmail.ch2020-02-29 → 2026-02-15 · 5 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
● 2026-02-15 02:11:44
○ 2026-03-04 23:28:46
○ 2026-07-17 21:14:26
○MXmailstore1.secureserver.net2016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
○MXsmtp.secureserver.net2016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
○A104.24.110.2002020-02-29 → 2020-02-29 · 4 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
○ 2026-02-15 02:11:44
○ 2026-07-17 21:14:26
○A104.24.111.2002020-02-29 → 2020-02-29 · 4 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
○ 2026-02-15 02:11:44
○ 2026-07-17 21:14:26
○A104.28.8.1132016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
○A104.28.9.1132016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
●A13.248.169.482026-02-15 → 2026-07-17 · 3 obs
○ 2020-02-29 19:53:08
● 2026-02-15 02:11:44
● 2026-07-17 21:14:26
○A2400:cb00:2048:1::681c:8712016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
○A2400:cb00:2048:1::681c:9712016-12-11 → 2016-12-11 · 3 obs
● 2016-12-11 00:43:12
○ 2020-02-29 19:53:08
○ 2026-07-17 21:14:26
○A2606:4700:3033::6818:6fc82020-02-29 → 2020-02-29 · 4 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
○ 2026-02-15 02:11:44
○ 2026-07-17 21:14:26
○A2606:4700:3035::6818:6ec82020-02-29 → 2020-02-29 · 4 obs
○ 2016-12-11 00:43:12
● 2020-02-29 19:53:08
○ 2026-02-15 02:11:44
○ 2026-07-17 21:14:26
●A76.223.54.1462026-02-15 → 2026-07-17 · 3 obs
○ 2020-02-29 19:53:08
● 2026-02-15 02:11:44
● 2026-07-17 21:14:26

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
wtfv0n0.nic.wtf, v0n1.nic.wtf, v0n2.nic.wtf, v0n3.nic.wtf...12 records
ssh.wtfns1.afternic.com, ns2.afternic.com, verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn-

✅ Authoritative Response

Server:173.201.66.69

NS records: ns1.afternic.com, ns2.afternic.com, verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ssh.wtf (unsigned zone)

⏱️ Timing

Total: 3476ms | Queries: -

📄 Records

TypeCountSample Data
A276.223.54.146, 13.248.169.48
NS2ns1.afternic.com, ns2.afternic.com
MX1. (pri: 0)
TXT1v=spf1 -all
SOA1ns2.afternic.com dns.jomax.net

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.wtf, v0n0.nic.wtf, v0n1.nic.wtf...)

Analysis

IP Addresses

ssh.wtf points to the IP addresses 13.248.169.48 and 76.223.54.146

jp3333.com, seroes.com, biketents.com plus two other host names have IP numbers in common with ssh.wtf.

Name Servers

ssh.wtf is served by three name servers: ns1.afternic.com, ns2.afternic.com and verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn.

There is at least partial name server overlap between ssh.wtf and other domains — enduranceforlife.com, illinoistinyhomes.com, stefi.net and two more among them.

These name servers are routinely deployed together with the name servers verification-k4ibaefv92b8mcahic8cdo.ns101.verify.hn.

The hostnames ns1.afternic.com, ns2.afternic.com and verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn each direct to two IP addresses — ns1.afternic.com to 97.74.98.69 and 2603:5:2126::45, ns2.afternic.com to 173.201.66.69 and 2603:5:2226::45, and verification-q2yfbmuxrvnsdnaogqtqft.ns101.verify.hn to 13.248.169.48 and 76.223.54.146.