Hostname
fwh.is
Last fetched
fwh.is resolves to 31.22.4.234, announced in 31.22.4.0/24 by WILDCARD-AS - Wildcard UK Limited in GB. fwh.is is listed by 1 threat feed; reconciled level HIGH.
Threat posture
40threat score (procedure-native scale)
HIGHListed by 1 threat feed. At least one source recommends blocking.
- Threat feeds listing this
- 1
- Verdict coverage
- malicious-evidenced
- First seen on a feed
- Wed, 26 Aug 2026 14:45:24 GMT
- Last seen on a feed
- Sat, 05 Sep 2026 23:33:39 GMT
Nutrition Label
Resolution chain
- 31.22.4.234
31.22.4.0/24 · WILDCARD-AS - Wildcard UK Limited · Newcastle upon Tyne, GB
Attribution
wildcard uk
ORIGIN_AS
Subdomains
Mail and authentication
Nameservers
- ns1.fwh.is
- ns2.fwh.is
- ns1.byet.org
- ns2.byet.org
- ns3.byet.org
- ns4.byet.org
- ns5.byet.org
MX records
- sv62.ifastnet11.org
SPF policy
- a: fwh.is
- mx: fwh.is
- ip: 207.182.136.179
- ip: 209.190.85.158
- ip: 209.190.9.26
- ip: 69.197.12.1
Threat-feed evidence
History
Related pages
Pivot from fwh.is into the addresses, networks and registries it depends on.
Cypher and MCP
Reproduce this hostname's resolution chain against graph.whisper.security:
MATCH (h:HOSTNAME {name: "fwh.is"})-[:RESOLVES_TO]->(ip:IPV4)
-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)-[:ROUTES]->(a:ASN)
OPTIONAL MATCH (a)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, a.name AS asn, n.name AS network
LIMIT 20Or query Whisper from your own LLM workflow via the Whisper MCP server.