`phishtrain.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:b302^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:43af^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.67.175^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.179.2^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`lara.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a80^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c080^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lara.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2080^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lara.ns.cloudflare.com`
		A	108.162.192.128^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
		A	172.64.32.128^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
		A	173.245.58.128^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lara.ns.cloudflare.com`
NS	`rodney.ns.cloudflare.com`
		A	2606:4700:58::adf5:3be4^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rodney.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1e4^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rodney.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21e4^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rodney.ns.cloudflare.com`
		A	108.162.193.228^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rodney.ns.cloudflare.com`
		A	172.64.33.228^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rodney.ns.cloudflare.com`
		A	173.245.59.228^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rodney.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c08::1a^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`bi-in-f26.1e100.net`
		A	172.253.115.27^{🇺🇸 Google172.253.115.0/24}
			PTR	`bg-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2800:3f0:4003:c0f::1b^{🇨🇱 Google2800:3f0:4003::/48}
		A	108.177.123.27^{🇺🇸 Google108.177.123.0/24}
			PTR	`lcscld-in-f27.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2a00:1450:400b:c02::1a^{🇮🇪 Google2a00:1450:400b::/48}
			PTR	`dj-in-f26.1e100.net`
		A	172.253.116.26^{🇺🇸 Google172.253.116.0/24}
			PTR	`dj-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:4009:c0f::1b^{🇬🇧 Google2a00:1450:4009::/48}
			PTR	`yulhrs-in-f27.1e100.net`
		A	192.178.223.26^{🇺🇸 Google192.178.223.0/24}
			PTR	`yulhrs-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2a00:1450:400c:c23::1a^{🇧🇪 Google2a00:1450:400c::/48}
			PTR	`yubrupd-in-f26.1e100.net`
		A	172.253.157.26^{🇺🇸 Google172.253.0.0/16}
			PTR	`yubrupd-in-f26.1e100.net`
TXT	`google-site-verification=g2SAmWNavQxQNtKcNSX1fQV_mTibIDkmnYJlB9hfQMw`
TXT	`google-site-verification=m0hSAMN2demgAHalM0viu-0OZKfzEBqNZjm3XwHfTUI`
TXT	`tinfoil-site-verification: f20af355607a073f2a2240e0c77742a8dc7b109c=85b1df21d...`
TXT	`v=spf1 include:aspmx.pardot.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.67.175, 172.67.179.2
		IPv6 hints	2606:4700:3033::ac43:b302, 2606:4700:3037::6815:43af
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=212, name=cloudflare-ech.com
SOA	`lara.ns.cloudflare.com`dns@cloudflare.com serial=2405905092

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784994927

Same first word

phishtrain.org

phishtrain.com

DNS History

21 records (11 active, 10 former)

●NSlara.ns.cloudflare.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●NSrodney.ns.cloudflare.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●MXalt1.aspmx.l.google.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●MXalt2.aspmx.l.google.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●MXalt3.aspmx.l.google.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●MXalt4.aspmx.l.google.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●MXaspmx.l.google.com2016-12-17 → 2026-07-25 · 2 obs

● 2016-12-17 16:55:48
● 2026-07-25 15:56:22

●A104.21.67.1752026-04-25 → 2026-07-25 · 8 obs

○ 2017-07-09 18:02:06
● 2026-04-25 10:26:18
● 2026-05-03 13:16:20
○ 2026-05-06 18:16:00
● 2026-05-12 14:28:02
○ 2026-07-08 22:52:26
● 2026-07-25 15:56:20
● 2026-07-25 15:56:22

○A104.24.116.1782016-12-17 → 2017-07-09 · 4 obs

● 2016-12-17 16:55:48
● 2017-07-09 18:02:06
○ 2026-04-25 10:26:18
○ 2026-07-25 15:56:22

○A104.24.117.1782016-12-17 → 2017-07-09 · 4 obs

● 2016-12-17 16:55:48
● 2017-07-09 18:02:06
○ 2026-04-25 10:26:18
○ 2026-07-25 15:56:22

●A172.67.179.22026-04-25 → 2026-07-25 · 8 obs

○ 2017-07-09 18:02:06
● 2026-04-25 10:26:18
● 2026-05-03 13:16:20
○ 2026-05-06 18:16:00
● 2026-05-12 14:28:02
○ 2026-07-08 22:52:26
● 2026-07-25 15:56:20
● 2026-07-25 15:56:22

○A188.114.96.02026-05-06 → 2026-07-08 · 6 obs

○ 2026-05-03 13:16:20
● 2026-05-06 18:16:00
○ 2026-05-12 14:28:02
● 2026-07-08 22:52:26
○ 2026-07-25 15:56:20
○ 2026-07-25 15:56:22

○A188.114.97.02026-05-06 → 2026-07-08 · 6 obs

○ 2026-05-03 13:16:20
● 2026-05-06 18:16:00
○ 2026-05-12 14:28:02
● 2026-07-08 22:52:26
○ 2026-07-25 15:56:20
○ 2026-07-25 15:56:22

○A2400:cb00:2048:1::6818:74b22016-12-17 → 2017-07-09 · 4 obs

● 2016-12-17 16:55:48
● 2017-07-09 18:02:06
○ 2026-04-25 10:26:18
○ 2026-07-25 15:56:22

○A2400:cb00:2048:1::6818:75b22016-12-17 → 2017-07-09 · 4 obs

● 2016-12-17 16:55:48
● 2017-07-09 18:02:06
○ 2026-04-25 10:26:18
○ 2026-07-25 15:56:22

●A2606:4700:3033::ac43:b3022026-07-25 → 2026-07-25 · 3 obs

○ 2026-07-08 22:52:26
● 2026-07-25 15:56:20
● 2026-07-25 15:56:22

○A2606:4700:3035::6815:43af2026-04-25 → 2026-05-12 · 7 obs

○ 2017-07-09 18:02:06
● 2026-04-25 10:26:18
● 2026-05-03 13:16:20
○ 2026-05-06 18:16:00
● 2026-05-12 14:28:02
○ 2026-07-08 22:52:26
○ 2026-07-25 15:56:22

●A2606:4700:3037::6815:43af2026-07-25 → 2026-07-25 · 3 obs

○ 2026-07-08 22:52:26
● 2026-07-25 15:56:20
● 2026-07-25 15:56:22

○A2606:4700:3037::ac43:b3022026-04-25 → 2026-05-12 · 7 obs

○ 2017-07-09 18:02:06
● 2026-04-25 10:26:18
● 2026-05-03 13:16:20
○ 2026-05-06 18:16:00
● 2026-05-12 14:28:02
○ 2026-07-08 22:52:26
○ 2026-07-25 15:56:22

○A2a06:98c1:3120::2026-05-06 → 2026-07-08 · 6 obs

○ 2026-05-03 13:16:20
● 2026-05-06 18:16:00
○ 2026-05-12 14:28:02
● 2026-07-08 22:52:26
○ 2026-07-25 15:56:20
○ 2026-07-25 15:56:22

○A2a06:98c1:3121::2026-05-06 → 2026-07-08 · 6 obs

○ 2026-05-03 13:16:20
● 2026-05-06 18:16:00
○ 2026-05-12 14:28:02
● 2026-07-08 22:52:26
○ 2026-07-25 15:56:20
○ 2026-07-25 15:56:22

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
phishtrain.com	lara.ns.cloudflare.com, rodney.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.228

NS records: lara.ns.cloudflare.com, rodney.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phishtrain.com (unsigned zone)

⏱️ Timing

Total: 225ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.67.175, 172.67.179.2`
AAAA	2	`2606:4700:3037::6815:43af, 2606:4700:3033::ac43:b302`
NS	2	`lara.ns.cloudflare.com, rodney.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	4	`google-site-verification=g2SAmWNavQxQNtK, google-site-verification=m0hSAMN2demgAHa...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`lara.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (lara.ns.cloudflare.com, lara.ns.cloudflare.com, lara.ns.cloudflare.com...)

Analysis

IP Addresses

phishtrain.com resolves to four IP addresses: 104.21.67.175, 172.67.179.2, 2606:4700:3033::ac43:b302 and 2606:4700:3037::6815:43af.

zhqczl.cn, officeofficecom.com, www.helendoron.it plus two other host names have IP numbers in common with phishtrain.com.

Name Servers

phishtrain.com is served by two delegated name servers, lara.ns.cloudflare.com and rodney.ns.cloudflare.com.

The name server configuration of phishtrain.com is shared with other domains, for instance 4netonline.com, five2inc.com, stefanaurori.com and two others.

phishtrain.com has at least partial name server overlap with other domains, such as centremnm.com, (0x6e68656e746169).now, symext.com.au and two others.

These name servers tend to appear together with the name servers barbara.ns.cloudflare.com, kinsley.ns.cloudflare.com and alex.ns.cloudflare.com.

Hosts with 6 IP addresses each:

lara.ns.cloudflare.com carries IP addresses 108.162.192.128, 172.64.32.128 and 173.245.58.128, with 3 other addresses beyond those.

rodney.ns.cloudflare.com carries IP addresses 108.162.193.228, 172.64.33.228 and 173.245.59.228, with 3 other addresses beyond those.

Mail Servers

phishtrain.com is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

At least some of the mail servers used by phishtrain.com are shared with other domains: ns500765.ns500699.ns500765.ns500734.ns500693.ns500693.ns500699.ns500734.ns500588.ns500693.ns500683.ns500110.dtrkdll.com, southernalbertasummergames.ca, jacobscakes.com and two others among them.

These mail servers are often deployed together with alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 other mail servers.

Host names pointing to two IP addresses:

aspmx.l.google.com maps to two IP addresses — 172.253.115.27 and 2607:f8b0:4004:c08::1a.

alt1.aspmx.l.google.com maps to two IP addresses — 108.177.123.27 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com maps to two IP addresses — 172.253.116.26 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com maps to two IP addresses — 192.178.223.26 and 2a00:1450:4009:c0f::1b.

alt4.aspmx.l.google.com maps to two IP addresses — 172.253.157.26 and 2a00:1450:400c:c23::1a.

phishtrain.com - robtex.com

phishtrain.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`phishtrain.com`

`com`