Skip to content

Hostname

bad-wolf.com

Last fetched

bad-wolf.com resolves to 1 IPv4 address operated by GYRON in GB. WHOIS lists iana:292 as the registrar.

Nutrition Label

WHISPER CANON · bad-wolf.comRouting diversity—Peering density—MOAS conflict—Threat-feed listings—WHOIS transparency—Resolver footprint—canon.whisper.security/host/bad-wolf.com

Resolution chain

bad-wolf.com resolves to 1 distinct IPv4 address via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
185.230.220.108185.230.220.0/24AS29017GYRONGB

WHOIS identity

Registrar
iana:292
Organization
domain administrator
Contact emails

Subdomains

3 observed subdomains of bad-wolf.com.

Subdomain
hostmaster.bad-wolf.com
www.bad-wolf.com
stage.bad-wolf.com

Web-graph footprint

Distinct hostnames that link to or from bad-wolf.com in the public web crawl.

Sample inbound links

Sample outbound links

Threat posture

History

Mail and authentication

MX records

SPF policy

31 SPF mechanisms authorising senders for bad-wolf.com.

MechanismTarget
SPF_INCLUDEspf.protection.outlook.com
SPF_INCLUDEspf.uk.exclaimer.net
SPF_IP109.176.172.122
SPF_IP121.100.43.221
SPF_IP121.100.43.225
SPF_IP121.100.43.226
SPF_IP143.55.149.237
SPF_IP148.59.100.16/28
SPF_IP148.59.101.16/28
SPF_IP148.59.106.0/23
SPF_IP148.59.108.0/23
SPF_IP160.33.194.232
SPF_IP160.33.194.233
SPF_IP160.33.194.234
SPF_IP160.33.194.235
SPF_IP18.168.140.58/32
SPF_IP18.168.51.200/32
SPF_IP185.132.183.11
SPF_IP185.183.30.70
SPF_IP208.185.229.0/24
SPF_IP208.185.235.0/24
SPF_IP35.80.141.6/32
SPF_IP44.229.121.55/32
SPF_IP66.159.232.89
SPF_IP66.159.233.14
SPF_IP66.159.233.15
SPF_IP66.159.233.25
SPF_IP66.159.234.101
SPF_IP66.159.234.90
SPF_IP66.159.234.91
SPF_IP81.128.202.250

Related pages

Pivot deeper into the graph from bad-wolf.com.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "bad-wolf.com"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.