phishpost.com - dns.ninja

`phishpost.com`

DNSSEC	⚠️ Not signed
A	104.21.91.15^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.207.156^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`heidi.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:26ec^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c2ec^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`heidi.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:22ec^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`heidi.ns.cloudflare.com`
		A	108.162.194.236^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
		A	162.159.38.236^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
		A	172.64.34.236^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`heidi.ns.cloudflare.com`
NS	`ivan.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b78^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ivan.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c178^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ivan.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2178^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ivan.ns.cloudflare.com`
		A	108.162.193.120^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ivan.ns.cloudflare.com`
		A	172.64.33.120^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ivan.ns.cloudflare.com`
		A	173.245.59.120^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ivan.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.91.15, 172.67.207.156
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=8, name=cloudflare-ech.com
SOA	`heidi.ns.cloudflare.com`dns@cloudflare.com serial=2404948888

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1783909472

Same first word

phishpost.com

Similar names

stopphish.ru

phishstop.com

stopphish.com

stopphish.online

spotphish.com

DNS History

8 records (4 active, 4 former)

●NSheidi.ns.cloudflare.com2026-07-13 → 2026-07-13 · 3 obs

○ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-13 02:37:50

●NSivan.ns.cloudflare.com2026-07-13 → 2026-07-13 · 3 obs

○ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-13 02:37:50

○NSns55.domaincontrol.com2020-01-08 → 2020-01-08 · 3 obs

● 2020-01-08 02:16:46
○ 2026-07-13 02:37:48
○ 2026-07-13 02:37:50

○NSns56.domaincontrol.com2020-01-08 → 2020-01-08 · 3 obs

● 2020-01-08 02:16:46
○ 2026-07-13 02:37:48
○ 2026-07-13 02:37:50

○MXmail.phishpost.com2020-01-08 → 2020-01-08 · 3 obs

● 2020-01-08 02:16:46
○ 2026-07-13 02:37:48
○ 2026-07-13 02:37:50

●A104.21.91.152026-07-13 → 2026-07-13 · 3 obs

○ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-13 02:37:50

●A172.67.207.1562026-07-13 → 2026-07-13 · 3 obs

○ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-13 02:37:50

○A184.168.221.492020-01-08 → 2020-01-08 · 3 obs

● 2020-01-08 02:16:46
○ 2026-07-13 02:37:48
○ 2026-07-13 02:37:50

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	c.gtld-servers.net, k.gtld-servers.net, m.gtld-servers.net, i.gtld-servers.net...	-
phishpost.com	ivan.ns.cloudflare.com, heidi.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.194.236

NS records: ivan.ns.cloudflare.com, heidi.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phishpost.com (unsigned zone)

⏱️ Timing

Total: 301ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.207.156, 104.21.91.15`
NS	2	`heidi.ns.cloudflare.com, ivan.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`heidi.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ivan.ns.cloudflare.com, ivan.ns.cloudflare.com, ivan.ns.cloudflare.com...)

Analysis

IP Addresses

phishpost.com directs to two IP numbers, 104.21.91.15 and 172.67.207.156

Among the host names that share IP numbers with phishpost.com are paula.app, fiverr.secure-customers.com, saylor-give.cc and two others.

Name Servers

phishpost.com is delegated to two name servers: heidi.ns.cloudflare.com and ivan.ns.cloudflare.com.

phishpost.com shares its name server setup with other domains, such as immediatescript-9app.com.

phishpost.com shares at least some of its name servers with other domains, including itsmedan.net, tamborinemountain.net, aljeelgulf.com and two others.

These name servers are frequently paired with the name servers jaziel.ns.cloudflare.com and erin.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

heidi.ns.cloudflare.com resolves to 108.162.194.236, 162.159.38.236, 172.64.34.236 and 3 other IP addresses.

ivan.ns.cloudflare.com resolves to 108.162.193.120, 172.64.33.120, 173.245.59.120 and 3 other IP addresses.