hookphish.com - dns.ninja

`hookphish.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3035::6815:23a4^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b1a4^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.35.164^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.177.164^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`amy.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a65^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c065^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`amy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2065^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`amy.ns.cloudflare.com`
		A	108.162.192.101^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
		A	172.64.32.101^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
		A	173.245.58.101^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`amy.ns.cloudflare.com`
NS	`andy.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b65^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`andy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c165^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`andy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2165^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`andy.ns.cloudflare.com`
		A	108.162.193.101^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`andy.ns.cloudflare.com`
		A	172.64.33.101^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`andy.ns.cloudflare.com`
		A	173.245.59.101^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`andy.ns.cloudflare.com`
MX	`mx1.spacemail.com` ⭐
		A	162.255.118.30^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`mx1.spacemail.com`
MX	`mx2.spacemail.com` ⭐
		A	162.255.118.31^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`mx2.spacemail.com`
TXT	`341505a9-5260-4198-9008-964a3273fa64`
TXT	`eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkb21haW4iOiJob29rcGhpc2guY29tIiwiZXhw...`
TXT	`google-site-verification=t89hmp3fafdN2BWhZ4g3_mUF7izajrYqecxkRbnlHa4`
TXT	`v=spf1 include:spf.spacemail.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.35.164, 172.67.177.164
		IPv6 hints	2606:4700:3035::6815:23a4, 2606:4700:3036::ac43:b1a4
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=204, name=cloudflare-ech.com
SOA	`amy.ns.cloudflare.com`dns@cloudflare.com serial=2410264968

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786042029

Same first word

hookphish.com

Similar names

phishhook.com

DNS History

20 records (8 active, 12 former)

●NSamy.ns.cloudflare.com2026-03-07 → 2026-08-06 · 3 obs

○ 2017-08-14 21:24:08
● 2026-03-07 15:07:10
● 2026-08-06 19:09:50

●NSandy.ns.cloudflare.com2026-03-07 → 2026-08-06 · 3 obs

○ 2017-08-14 21:24:08
● 2026-03-07 15:07:10
● 2026-08-06 19:09:50

○NSns43.domaincontrol.com2017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○NSns44.domaincontrol.com2017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○MX_dc-mx.27de246743bc.hookphish.com2026-03-07 → 2026-03-07 · 3 obs

● 2026-03-07 15:07:10
○ 2026-07-23 22:50:50
○ 2026-08-06 19:09:50

●MXmx1.spacemail.com2026-07-11 → 2026-08-06 · 3 obs

○ 2026-03-07 15:07:10
● 2026-07-11 18:06:50
● 2026-08-06 19:09:50

●MXmx2.spacemail.com2026-07-11 → 2026-08-06 · 3 obs

○ 2026-03-07 15:07:10
● 2026-07-11 18:06:50
● 2026-08-06 19:09:50

●A104.21.35.1642026-03-07 → 2026-08-06 · 3 obs

○ 2017-08-14 21:24:08
● 2026-03-07 15:07:10
● 2026-08-06 19:09:50

●A172.67.177.1642026-03-07 → 2026-08-06 · 3 obs

○ 2017-08-14 21:24:08
● 2026-03-07 15:07:10
● 2026-08-06 19:09:50

○A184.168.221.392017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○A184.168.221.442017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○A184.168.221.592017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

●A2606:4700:3035::6815:23a42026-07-11 → 2026-08-06 · 3 obs

○ 2026-03-07 15:07:10
● 2026-07-11 18:06:50
● 2026-08-06 19:09:50

○A2606:4700:3035::ac43:b1a42026-03-07 → 2026-03-07 · 4 obs

○ 2017-08-14 21:24:08
● 2026-03-07 15:07:10
○ 2026-07-11 18:06:50
○ 2026-08-06 19:09:50

●A2606:4700:3036::ac43:b1a42026-07-11 → 2026-08-06 · 3 obs

○ 2026-03-07 15:07:10
● 2026-07-11 18:06:50
● 2026-08-06 19:09:50

○A2606:4700:3037::6815:23a42026-03-07 → 2026-03-07 · 4 obs

○ 2017-08-14 21:24:08
● 2026-03-07 15:07:10
○ 2026-07-11 18:06:50
○ 2026-08-06 19:09:50

○A50.63.202.382017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○A50.63.202.512017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○A50.63.202.612017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

○A50.63.202.622017-08-14 → 2017-08-14 · 3 obs

● 2017-08-14 21:24:08
○ 2026-03-07 15:07:10
○ 2026-08-06 19:09:50

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, d.gtld-servers.net...	-
hookphish.com	amy.ns.cloudflare.com, andy.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.101

NS records: amy.ns.cloudflare.com, andy.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 133ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.35.164, 172.67.177.164`
AAAA	2	`2606:4700:3036::ac43:b1a4, 2606:4700:3035::6815:23a4`
NS	2	`amy.ns.cloudflare.com, andy.ns.cloudflare.com`
MX	2	`mx1.spacemail.com (pri: 0), mx2.spacemail.com (pri: 0)`
TXT	4	`341505a9-5260-4198-9008-964a3273fa64, eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`amy.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (amy.ns.cloudflare.com, amy.ns.cloudflare.com, amy.ns.cloudflare.com...)

Analysis

IP Addresses

hookphish.com points to the four IP addresses 104.21.35.164, 172.67.177.164, 2606:4700:3035::6815:23a4 and 2606:4700:3036::ac43:b1a4.

alipay.ing, vocal74.ru, 365q-uantumanalytics.click plus two other host names have IP numbers in common with hookphish.com.

Name Servers

The NS records for hookphish.com delegate to amy.ns.cloudflare.com and andy.ns.cloudflare.com.

The name server configuration of hookphish.com is shared with other domains, for instance mailboxandpack.com, davidspumpservice.com, nanohanacococli.com and two others.

At least some of hookphish.com's name servers are shared with other domains, for example mountainthirteen.ca, blackstar.com, pgl823.com and two more.

These name servers tend to be used in conjunction with the name servers byron.ns.cloudflare.com.

Hosts with 6 IP addresses each:

amy.ns.cloudflare.com maps to 108.162.192.101, 172.64.32.101, 173.245.58.101 and 3 additional IP addresses.

andy.ns.cloudflare.com maps to 108.162.193.101, 172.64.33.101, 173.245.59.101 and 3 additional IP addresses.

Mail Servers

hookphish.com uses two mail servers, mx1.spacemail.com and mx2.spacemail.com.

The mail server setup of hookphish.com matches that of other domains such as mcdo.cc, cryptoids.info, global-gladiators.com and two others.

hookphish.com partially shares its mail servers with other domains; known examples include thewavemuscat.com, leilomaster.net and stgcculgh.com.

Each of mx1.spacemail.com and mx2.spacemail.com has one IP address: mx1.spacemail.com uses 162.255.118.30 and mx2.spacemail.com uses 162.255.118.31.