phishpost.com - robtex.com

phishpost.com

DNSSEC⚠️ Not signed
A104.21.91.15Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.207.156πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSheidi.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26ecπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRheidi.ns.cloudflare.com
A2803:f800:50::6ca2:c2ecπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRheidi.ns.cloudflare.com
A2a06:98c1:50::ac40:22ecπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRheidi.ns.cloudflare.com
A108.162.194.236πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRheidi.ns.cloudflare.com
A162.159.38.236Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRheidi.ns.cloudflare.com
A172.64.34.236πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRheidi.ns.cloudflare.com
NSivan.ns.cloudflare.com
A2606:4700:58::adf5:3b78πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRivan.ns.cloudflare.com
A2803:f800:50::6ca2:c178πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRivan.ns.cloudflare.com
A2a06:98c1:50::ac40:2178πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRivan.ns.cloudflare.com
A108.162.193.120πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRivan.ns.cloudflare.com
A172.64.33.120πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRivan.ns.cloudflare.com
A173.245.59.120πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRivan.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.91.15, 172.67.207.156
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=217, name=cloudflare-ech.com
SOAheidi.ns.cloudflare.comdns@cloudflare.com serial=2410061696

com

Same first word

Similar names

DNS History

8 records (4 active, 4 former)

202120222023202420252026NSheidi.ns.cloudflare.comivan.ns.cloudflare.comns55.domaincontrol.comns56.domaincontrol.comMXmail.phishpost.comA104.21.91.15172.67.207.156184.168.221.49
●NSheidi.ns.cloudflare.com2026-07-13 β†’ 2026-07-26 Β· 3 obs
β—‹ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-26 22:55:08
●NSivan.ns.cloudflare.com2026-07-13 β†’ 2026-07-26 Β· 3 obs
β—‹ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-26 22:55:08
β—‹NSns55.domaincontrol.com2020-01-08 β†’ 2020-01-08 Β· 3 obs
● 2020-01-08 02:16:46
β—‹ 2026-07-13 02:37:48
β—‹ 2026-07-26 22:55:08
β—‹NSns56.domaincontrol.com2020-01-08 β†’ 2020-01-08 Β· 3 obs
● 2020-01-08 02:16:46
β—‹ 2026-07-13 02:37:48
β—‹ 2026-07-26 22:55:08
β—‹MXmail.phishpost.com2020-01-08 β†’ 2020-01-08 Β· 3 obs
● 2020-01-08 02:16:46
β—‹ 2026-07-13 02:37:48
β—‹ 2026-07-26 22:55:08
●A104.21.91.152026-07-13 β†’ 2026-07-26 Β· 3 obs
β—‹ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-26 22:55:08
●A172.67.207.1562026-07-13 β†’ 2026-07-26 Β· 3 obs
β—‹ 2020-01-08 02:16:46
● 2026-07-13 02:37:48
● 2026-07-26 22:55:08
β—‹A184.168.221.492020-01-08 β†’ 2020-01-08 Β· 3 obs
● 2020-01-08 02:16:46
β—‹ 2026-07-13 02:37:48
β—‹ 2026-07-26 22:55:08

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
coma.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...-
phishpost.comivan.ns.cloudflare.com, heidi.ns.cloudflare.com12 records

βœ… Authoritative Response

Server:108.162.193.120

NS records: ivan.ns.cloudflare.com, heidi.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phishpost.com (unsigned zone)

⏱️ Timing

Total: 598ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.91.15, 172.67.207.156
NS2heidi.ns.cloudflare.com, ivan.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1heidi.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ivan.ns.cloudflare.com, ivan.ns.cloudflare.com, ivan.ns.cloudflare.com...)

Analysis

IP Addresses

phishpost.com resolves to the IP addresses 104.21.91.15 and 172.67.207.156

paula.app, fiverr.secure-customers.com, saylor-give.cc plus two other host names have IP numbers in common with phishpost.com.

Name Servers

The NS records for phishpost.com delegate to heidi.ns.cloudflare.com and ivan.ns.cloudflare.com.

phishpost.com has name servers in common with other domains; immediatescript-9app.com is one such domain.

phishpost.com shares at least some of its name servers with other domains, including itsmedan.net, tamborinemountain.net, aljeelgulf.com and two others.

These name servers are frequently paired with the name servers erin.ns.cloudflare.com and jaziel.ns.cloudflare.com.

Hosts with 6 IP addresses each:

heidi.ns.cloudflare.com maps to 108.162.194.236, 162.159.38.236, 172.64.34.236 and 3 additional IP addresses.

ivan.ns.cloudflare.com maps to 108.162.193.120, 172.64.33.120, 173.245.59.120 and 3 additional IP addresses.