phishtotal.com - robtex.com

phishtotal.com

DNSSEC⚠️ Not signed
A13.248.169.48🇺🇸 Amazon13.248.160.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
A76.223.54.146🇺🇸 Amazon76.223.48.0/20
NSns1.afternic.com ⭐
A2603:5:2126::45🇺🇸 GODADDY-DNS2603:5:2120::/44
PTRns1.afternic.com
A97.74.98.69🇺🇸 GODADDY-DNS97.74.98.0/23
PTRns1.afternic.com
NSns2.afternic.com
A2603:5:2226::45🇺🇸 GODADDY-DNS2603:5:2220::/44
PTRns2.afternic.com
A173.201.66.69🇺🇸 GODADDY-DNS173.201.66.0/23
PTRns2.afternic.com
NSverification-d3jclucsp89ganyqbydeny.ns101.verify.hn ⚠️ Not in zone NS records
A13.248.169.48🇺🇸 Amazon13.248.160.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
A76.223.54.146🇺🇸 Amazon76.223.48.0/20
PTRa904c694c05102f30.awsglobalaccelerator.com
TXTv=spf1 -all
SOAns1.afternic.comdns@jomax.net serial=1

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1774411172

Same first word

phishtotal.com

DNS History

16 records (5 active, 11 former)

2017201820192020202120222023202420252026NSns1.afternic.comns2.afternic.comverification-d3jclucsp89ganyqbydeny.ns101.verify.hndns1.registrar-servers.comdns2.registrar-servers.comdns3.registrar-servers.comdns4.registrar-servers.comdns5.registrar-servers.comMXeforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.comA13.248.169.4876.223.54.146162.255.119.250
○NSdns1.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○NSdns2.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○NSdns3.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○NSdns4.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○NSdns5.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
●NSns1.afternic.com2026-03-02 → 2026-03-25 · 3 obs
○ 2017-04-08 16:38:06
● 2026-03-02 03:19:58
● 2026-03-25 04:07:56
●NSns2.afternic.com2026-03-02 → 2026-03-25 · 3 obs
○ 2017-04-08 16:38:06
● 2026-03-02 03:19:58
● 2026-03-25 04:07:56
●NSverification-d3jclucsp89ganyqbydeny.ns101.verify.hn2026-03-02 → 2026-03-25 · 3 obs
○ 2017-04-08 16:38:06
● 2026-03-02 03:19:58
● 2026-03-25 04:07:56
○MXeforward1.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○MXeforward2.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○MXeforward3.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○MXeforward4.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
○MXeforward5.registrar-servers.com2016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
●A13.248.169.482026-03-02 → 2026-03-25 · 3 obs
○ 2017-04-08 16:38:06
● 2026-03-02 03:19:58
● 2026-03-25 04:07:56
○A162.255.119.2502016-09-12 → 2017-04-08 · 4 obs
● 2016-09-12 09:56:22
● 2017-04-08 16:38:06
○ 2026-03-02 03:19:58
○ 2026-03-25 04:07:56
●A76.223.54.1462026-03-02 → 2026-03-25 · 3 obs
○ 2017-04-08 16:38:06
● 2026-03-02 03:19:58
● 2026-03-25 04:07:56

🔍 DNS Trace

Analysis

IP Addresses

phishtotal.com resolves to two IP numbers: 13.248.169.48 and 76.223.54.146.

other host names including drumhut.com, host-203-133-113-171.ip.kbtelecom.net, nrcd.com, infodrop.com and mail.massivemail.com share IP numbers with phishtotal.com.

Name Servers

phishtotal.com is delegated to three name servers ns1.afternic.com, ns2.afternic.com and verification-d3jclucsp89ganyqbydeny.ns101.verify.hn.

phishtotal.com at least partially shares name servers with other domains, for instance iii.iiii.info, www.336.me, happyblock.com, www.friendsforever.com and beate.org.

these name servers are commonly used alongside verification-ag3xtxqjhqhiyarqdrht2l.ns101.verify.hn.

Host names with two IP numbers:

ns1.afternic.com points to: 2603:5:2126::45 and 97.74.98.69.

ns2.afternic.com points to: 2603:5:2226::45 and 173.201.66.69.

verification-d3jclucsp89ganyqbydeny.ns101.verify.hn points to: 13.248.169.48 and 76.223.54.146.