phishop.work - dns.ninja

`phishop.work`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:291a^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:9f12^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.41.26^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.159.18^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`michael.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c0c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c30c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`michael.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:230c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`michael.ns.cloudflare.com`
		A	108.162.195.12^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
		A	162.159.44.12^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
		A	172.64.35.12^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
NS	`rafe.ns.cloudflare.com`
		A	2606:4700:50::adf5:3ad8^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rafe.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0d8^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rafe.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20d8^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rafe.ns.cloudflare.com`
		A	108.162.192.216^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	172.64.32.216^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	173.245.58.216^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.41.26, 172.67.159.18
		IPv6 hints	2606:4700:3034::6815:291a, 2606:4700:3035::ac43:9f12
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=70, name=cloudflare-ech.com
SOA	`michael.ns.cloudflare.com`dns@cloudflare.com serial=2409695956

`work`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.nic.work` ⭐
	NS	`b.nic.work`
	NS	`c.nic.work`
	NS	`x.nic.work`
	NS	`y.nic.work`
	NS	`z.nic.work`
	SOA	`a.nic.work`admin@tldns.godaddy serial=1784463402

Same first word

phishop.net

phishop.world

phishop.com

phishop.work

Similar names

hipshop.ro

hpishop.de

hiphops.lv

hipshop.ru

hipshop.eu

hopship.com

hipposh.com

shophip.com

hiphops.com.mx

hpishop.sk

hiphops.org

hiphops.co.uk

shopihp.com

hipshop.fr

shopphi.com

hiphops.net

hipshop.jp

hipshop.de

hiphops.com

hipshop.com

hipshop.nl

shiphop.com

hiphops.de

DNS History

14 records (11 active, 3 former)

●NSmichael.ns.cloudflare.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●NSrafe.ns.cloudflare.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●MXeforward1.registrar-servers.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●MXeforward2.registrar-servers.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●MXeforward3.registrar-servers.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●MXeforward4.registrar-servers.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●MXeforward5.registrar-servers.com2026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●A104.21.41.262026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

●A172.67.159.182026-03-02 → 2026-07-19 · 2 obs

● 2026-03-02 11:42:20
● 2026-07-19 12:25:56

○A2606:4700:130:436c:6f75:6466:6c61:72652026-05-22 → 2026-05-22 · 4 obs

○ 2026-04-29 18:23:22
● 2026-05-22 05:31:46
○ 2026-05-22 14:07:00
○ 2026-07-19 12:25:56

○A2606:4700:3032::ac43:9f122026-03-02 → 2026-06-09 · 7 obs

● 2026-03-02 11:42:20
● 2026-04-29 18:23:22
○ 2026-05-22 05:31:46
● 2026-05-22 14:07:00
● 2026-06-09 13:17:16
○ 2026-07-05 10:28:38
○ 2026-07-19 12:25:56

●A2606:4700:3034::6815:291a2026-07-05 → 2026-07-19 · 3 obs

○ 2026-06-09 13:17:16
● 2026-07-05 10:28:38
● 2026-07-19 12:25:56

○A2606:4700:3035::6815:291a2026-03-02 → 2026-06-09 · 7 obs

● 2026-03-02 11:42:20
● 2026-04-29 18:23:22
○ 2026-05-22 05:31:46
● 2026-05-22 14:07:00
● 2026-06-09 13:17:16
○ 2026-07-05 10:28:38
○ 2026-07-19 12:25:56

●A2606:4700:3035::ac43:9f122026-07-05 → 2026-07-19 · 3 obs

○ 2026-06-09 13:17:16
● 2026-07-05 10:28:38
● 2026-07-19 12:25:56

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
work	a.nic.work, b.nic.work, c.nic.work, x.nic.work...	-
phishop.work	rafe.ns.cloudflare.com, michael.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.195.12

NS records: rafe.ns.cloudflare.com, michael.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phishop.work (unsigned zone)

⏱️ Timing

Total: 441ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.41.26, 172.67.159.18`
AAAA	2	`2606:4700:3035::ac43:9f12, 2606:4700:3034::6815:291a`
NS	2	`michael.ns.cloudflare.com, rafe.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`michael.ns.cloudflare.com dns.cloudflare`

Analysis

IP Addresses

phishop.work resolves to four IP addresses: 104.21.41.26, 172.67.159.18, 2606:4700:3034::6815:291a and 2606:4700:3035::ac43:9f12.

Two other host names, along with lampsontheweb.com, yokoliexindustries16.click and wattan.tv, also share IP numbers with phishop.work.

Name Servers

phishop.work is served by two delegated name servers, michael.ns.cloudflare.com and rafe.ns.cloudflare.com.

phishop.work shares its NS records with other domains, for example tdametals.top, gstransformers.com, gstr.com and two others.

phishop.work has at least partial name server overlap with other domains, such as 33hhh.net, ingenio.com, nissinshowa.com and two others.

The name servers summer.ns.cloudflare.com, meiling.ns.cloudflare.com, leonidas.ns.cloudflare.com and two others are commonly seen in use alongside these name servers.

DNS names with 6 IP addresses:

michael.ns.cloudflare.com carries IP addresses 108.162.195.12, 162.159.44.12 and 172.64.35.12, with 3 other addresses beyond those.

rafe.ns.cloudflare.com carries IP addresses 108.162.192.216, 172.64.32.216 and 173.245.58.216, with 3 other addresses beyond those.

Mail Servers

phishop.work is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between phishop.work and other domains, including authenticvoiceover.com, abnormallydefinitechicken.shop, ceira.co.uk and two others.

eforward5.registrar-servers.com, eforward4.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com are mail servers that frequently appear together with these mail servers.

Host names that point to one IP address:

eforward1.registrar-servers.com points to the IP address 162.255.118.51.

eforward2.registrar-servers.com points to the IP address 162.255.118.52.

eforward3.registrar-servers.com points to the IP address 162.255.118.51.

eforward4.registrar-servers.com points to the IP address 162.255.118.52.

eforward5.registrar-servers.com points to the IP address 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

These two host names — eforward2.registrar-servers.com and eforward4.registrar-servers.com — each point to 162.255.118.52 IP addresses.