phi.sh - dns.ninja

phi.sh

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:9d7e🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:3908🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.57.8Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.157.126🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSmario.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bcb🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmario.ns.cloudflare.com
A2803:f800:50::6ca2:c1cb🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmario.ns.cloudflare.com
A2a06:98c1:50::ac40:21cb🇺🇸 Cloudflare2a06:98c1:50::/45
PTRmario.ns.cloudflare.com
A108.162.193.203🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmario.ns.cloudflare.com
A172.64.33.203🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmario.ns.cloudflare.com
A173.245.59.203🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmario.ns.cloudflare.com
NSzita.ns.cloudflare.com
A2606:4700:50::adf5:3af3🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
A2803:f800:50::6ca2:c0f3🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRzita.ns.cloudflare.com
A2a06:98c1:50::ac40:20f3🇺🇸 Cloudflare2a06:98c1:50::/45
PTRzita.ns.cloudflare.com
A108.162.192.243🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
A172.64.32.243🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
A173.245.58.243🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRzita.ns.cloudflare.com
TXTgoogle-site-verification=mWNBnFCVSQnbDR-k47_hQLInofDCEhBmJDBSm9ZAOH4
TXTv=spf1 redirect=phish.net
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.57.8, 172.67.157.126
IPv6 hints2606:4700:3033::ac43:9d7e, 2606:4700:3037::6815:3908
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=177, name=cloudflare-ech.com
SOAmario.ns.cloudflare.comdns@cloudflare.com serial=2404953143

sh

DNSSEC🔒 Signed (DS record present)
NSa0.nic.sh ⭐
NSa2.nic.sh
NSb0.nic.sh
NSc0.nic.sh
SOAa0.nic.shhostmaster@donuts.email serial=1784287538

Same first word

phi.net.my
phi.lt
phi.box
phi.pt
phi.net.au
phi.edu.eg
phi.rs
phi.company
phi.co.com
phi.com.my
phi.technology
phi.cool
phi.healthcare
phi.com
phi.fi
phi.red
phi.lol
phi.eu
phi.hu
phi.at
phi.life
phi.or.id
phi.ca
phi.archi
phi.com.pe
phi.cc
phi.lv
phi.gs
phi.com.tw
phi.bio
phi.ma
phi.co
phi.com.mx
phi.services
phi.co.jp
phi.rs.ba
phi.net
phi.jobs
phi.bz
phi.al
phi.ro
phi.llc
phi.nu
phi.pl
phi.im
phi.mobi
phi.productions
phi.dk
phi.es
phi.me
phi.foundation
phi.agency
phi.com.au
phi.fm
phi.zone
phi.email
phi.si
phi.solutions
phi.asia
phi.cafe
phi.org
phi.ltd
phi.de
phi.tw
phi.gr
phi.sk
phi.cn
phi.network
phi.com.br
phi.biz
phi.international
phi.jp
phi.ch
phi.lu
phi.sg
phi.health
phi.it
phi.lk
phi.se
phi.sh
phi.us
phi.systems
phi.mx
phi.co.in
phi.co.uk
phi.ac.id
phi.no
phi.cz
phi.co.il

Similar names

iph.com.pl
hip.ly
hpi.asia
ihp.fr
hpi.ag
hip.co.at
hpi.co
iph.me
hpi.cm
hpi.at
hip.camp
iph.dk
hpi.fr
hip.lu
ihp.com.py
pih.one
hpi.co.jp
hpi.com.br
ihp.ch
hip.one
hpi.world
hip.institute
pih.com
hip.cool
hip.pp.ru
pih.ch
ihp.lk
hpi.ws
hip.immo
hpi.gr
ihp.ro
hip.ws
iph.net
hpi.blue
ihp.edu
ihp.name
hip.life
iph.com.br
iph.osaka.jp
iph.uk.net
hip.care
iph.se
hpi.eu
ihp.se
pih.me
ihp.org
hip.it
hpi.hk
ihp.at
iph.com.mx
hpi.by
hpi.academy
iph.cn
pih.us
iph.net.nz
hpi.com.vn
ihp.de
ihp.lu
pih.fr
hip.church
hip.su
hip.property
hpi.re
hip.healthcare
iph.biz
ihp.ie
hip.com.ua
ihp.it
hpi.immo
hip.pl
hpi.be
hip.com
hpi.org.uk

DNS History

11 records (6 active, 5 former)

20162017201820192020202120222023202420252026NSmario.ns.cloudflare.comzita.ns.cloudflare.comns1.endpoint.comns2.endpoint.comns3.endpoint.comA104.21.57.8172.67.157.1262606:4700:3033::ac43:9d7e2606:4700:3037::6815:3908198.58.123.1172606:4700:3032::6815:3908
●NSmario.ns.cloudflare.com2026-02-14 → 2026-07-17 · 3 obs
○ 2016-12-02 11:44:32
● 2026-02-14 22:58:56
● 2026-07-17 11:39:04
○NSns1.endpoint.com2015-07-04 → 2016-12-02 · 4 obs
● 2015-07-04 14:31:44
● 2016-12-02 11:44:32
○ 2026-02-14 22:58:56
○ 2026-07-17 11:39:04
○NSns2.endpoint.com2015-07-04 → 2016-12-02 · 4 obs
● 2015-07-04 14:31:44
● 2016-12-02 11:44:32
○ 2026-02-14 22:58:56
○ 2026-07-17 11:39:04
○NSns3.endpoint.com2015-07-04 → 2016-12-02 · 4 obs
● 2015-07-04 14:31:44
● 2016-12-02 11:44:32
○ 2026-02-14 22:58:56
○ 2026-07-17 11:39:04
●NSzita.ns.cloudflare.com2026-02-14 → 2026-07-17 · 3 obs
○ 2016-12-02 11:44:32
● 2026-02-14 22:58:56
● 2026-07-17 11:39:04
●A104.21.57.82026-02-14 → 2026-07-17 · 3 obs
○ 2016-12-02 11:44:32
● 2026-02-14 22:58:56
● 2026-07-17 11:39:04
●A172.67.157.1262026-02-14 → 2026-07-17 · 3 obs
○ 2016-12-02 11:44:32
● 2026-02-14 22:58:56
● 2026-07-17 11:39:04
○A198.58.123.1172015-07-04 → 2016-12-02 · 4 obs
● 2015-07-04 14:31:44
● 2016-12-02 11:44:32
○ 2026-02-14 22:58:56
○ 2026-07-17 11:39:04
○A2606:4700:3032::6815:39082026-02-14 → 2026-06-13 · 5 obs
○ 2016-12-02 11:44:32
● 2026-02-14 22:58:56
● 2026-06-13 16:46:26
○ 2026-07-04 01:15:52
○ 2026-07-17 11:39:04
●A2606:4700:3033::ac43:9d7e2026-02-14 → 2026-07-17 · 3 obs
○ 2016-12-02 11:44:32
● 2026-02-14 22:58:56
● 2026-07-17 11:39:04
●A2606:4700:3037::6815:39082026-07-04 → 2026-07-17 · 3 obs
○ 2026-06-13 16:46:26
● 2026-07-04 01:15:52
● 2026-07-17 11:39:04

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
sha0.nic.sh, a2.nic.sh, b0.nic.sh, c0.nic.sh8 records
phi.shzita.ns.cloudflare.com, mario.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.33.203

NS records: zita.ns.cloudflare.com, mario.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phi.sh (unsigned zone)

⏱️ Timing

Total: 468ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.57.8, 172.67.157.126
AAAA22606:4700:3037::6815:3908, 2606:4700:3033::ac43:9d7e
NS2mario.ns.cloudflare.com, zita.ns.cloudflare.com
TXT2google-site-verification=mWNBnFCVSQnbDR-, v=spf1 redirect=phish.net
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1mario.ns.cloudflare.com dns.cloudflare.c

📌 Glue Records Collected

Total: 8

In-bailiwick: 8 (a0.nic.sh, a2.nic.sh, b0.nic.sh...)

Analysis

IP Addresses

phi.sh resolves to four IP addresses: 104.21.57.8, 172.67.157.126, 2606:4700:3033::ac43:9d7e and 2606:4700:3037::6815:3908.

Two other host names, along with moolbora.cn, universityofsweden.com and a-s-e.pl, also share IP numbers with phi.sh.

Name Servers

Two name servers handle the delegation for phi.sh: mario.ns.cloudflare.com and zita.ns.cloudflare.com.

phi.sh shares its NS records with other domains, for example asymbl.com, leblanchvac.com, vavada-casino-kk.space and two others.

phi.sh partially shares its NS delegation with several other domains, including dl-file.xyz, derrop.dev, loisir-asahikawa.com and two others.

These name servers are regularly seen alongside elaine.ns.cloudflare.com and nataly.ns.cloudflare.com as name servers.

DNS names with 6 IP addresses:

mario.ns.cloudflare.com resolves to 108.162.193.203, 172.64.33.203 and 173.245.59.203 among others, with 3 other IP addresses in total.

zita.ns.cloudflare.com resolves to 108.162.192.243, 172.64.32.243 and 173.245.58.243 among others, with 3 other IP addresses in total.