Hostname
c2.wtf
Last fetched
c2.wtf resolves to 1 IPv4 address operated by AS24940 in DE. WHOIS lists iana:269 as the registrar.
Nutrition Label
Resolution chain
c2.wtf resolves to 1 distinct IPv4 address via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.
| IP | Prefix | ASN | Operator | Country |
|---|---|---|---|---|
| 213.239.200.93 | 213.239.192.0/18 | AS24940 | — | DE |
WHOIS identity
- Registrar
- iana:269
- Organization
- . .
- Contact emails
Subdomains
34 observed subdomains of c2.wtf.
Showing 25 of 34. View all subdomains →
Web-graph footprint
Distinct hostnames that link to or from c2.wtf in the public web crawl.
82 sites link to this hostname.
1 site linked to from this hostname.
Sample inbound links
Sample outbound links
Threat posture
History
Mail and authentication
MX records
SPF policy
5 SPF mechanisms authorising senders for c2.wtf.
| Mechanism | Target |
|---|---|
| SPF_A | c2.wtf |
| SPF_A | call.c2.wtf |
| SPF_A | legacy.c2.wtf |
| SPF_A | minimonster.c2.wtf |
| SPF_MX | c2.wtf |
Related pages
Pivot deeper into the graph from c2.wtf.
Cypher and MCP
Reproduce the resolution chain directly against graph.whisper.security:
MATCH (h:HOSTNAME {name: "c2.wtf"})-[:RESOLVES_TO]->(ip:IPV4)
-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
-[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20Or query Whisper from your own LLM workflow via the Whisper MCP server.