whichphish.com - robtex.com

whichphish.com

DNSSEC⚠️ Not signed
A2606:4700:3108::ac42:28ab🇺🇸 Cloudflare2606:4700:3108::/48 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3108::ac42:2b55🇺🇸 Cloudflare2606:4700:3108::/48 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.66.40.171🇺🇸 Cloudflare172.66.40.0/21 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.66.43.85🇺🇸 Cloudflare172.66.40.0/21 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSali.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a3b🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRali.ns.cloudflare.com
A2803:f800:50::6ca2:c03b🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRali.ns.cloudflare.com
A2a06:98c1:50::ac40:203b🇺🇸 Cloudflare2a06:98c1:50::/45
PTRali.ns.cloudflare.com
A108.162.192.59🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRali.ns.cloudflare.com
A172.64.32.59🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRali.ns.cloudflare.com
A173.245.58.59🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRali.ns.cloudflare.com
NSclark.ns.cloudflare.com
A2606:4700:58::adf5:3b57🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRclark.ns.cloudflare.com
A2803:f800:50::6ca2:c157🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRclark.ns.cloudflare.com
A2a06:98c1:50::ac40:2157🇺🇸 Cloudflare2a06:98c1:50::/45
PTRclark.ns.cloudflare.com
A108.162.193.87🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRclark.ns.cloudflare.com
A172.64.33.87🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRclark.ns.cloudflare.com
A173.245.59.87🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRclark.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints172.66.40.171, 172.66.43.85
IPv6 hints2606:4700:3108::ac42:28ab, 2606:4700:3108::ac42:2b55
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=184, name=cloudflare-ech.com
SOAali.ns.cloudflare.comdns@cloudflare.com serial=2400874653

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1776078862
🔒 HSTS Preload (+subdomains)

Same first word

whichphish.com

DNS History

10 records (6 active, 4 former)

NSali.ns.cloudflare.comclark.ns.cloudflare.comA172.66.40.171172.66.43.852606:4700:3108::ac42:28ab2606:4700:3108::ac42:2b55188.114.96.0188.114.97.02a06:98c1:3120::2a06:98c1:3121::
●NSali.ns.cloudflare.com2026-03-09 → 2026-04-13 · 2 obs
● 2026-03-09 19:22:32
● 2026-04-13 11:37:04
●NSclark.ns.cloudflare.com2026-03-09 → 2026-04-13 · 2 obs
● 2026-03-09 19:22:32
● 2026-04-13 11:37:04
●A172.66.40.1712026-03-28 → 2026-04-13 · 3 obs
○ 2026-03-09 19:22:32
● 2026-03-28 07:31:00
● 2026-04-13 11:37:04
●A172.66.43.852026-03-28 → 2026-04-13 · 3 obs
○ 2026-03-09 19:22:32
● 2026-03-28 07:31:00
● 2026-04-13 11:37:04
○A188.114.96.02026-03-09 → 2026-03-09 · 3 obs
● 2026-03-09 19:22:32
○ 2026-03-28 07:31:00
○ 2026-04-13 11:37:04
○A188.114.97.02026-03-09 → 2026-03-09 · 3 obs
● 2026-03-09 19:22:32
○ 2026-03-28 07:31:00
○ 2026-04-13 11:37:04
●A2606:4700:3108::ac42:28ab2026-03-28 → 2026-04-13 · 3 obs
○ 2026-03-09 19:22:32
● 2026-03-28 07:31:00
● 2026-04-13 11:37:04
●A2606:4700:3108::ac42:2b552026-03-28 → 2026-04-13 · 3 obs
○ 2026-03-09 19:22:32
● 2026-03-28 07:31:00
● 2026-04-13 11:37:04
○A2a06:98c1:3120::2026-03-09 → 2026-03-09 · 3 obs
● 2026-03-09 19:22:32
○ 2026-03-28 07:31:00
○ 2026-04-13 11:37:04
○A2a06:98c1:3121::2026-03-09 → 2026-03-09 · 3 obs
● 2026-03-09 19:22:32
○ 2026-03-28 07:31:00
○ 2026-04-13 11:37:04

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
comd.gtld-servers.net, f.gtld-servers.net, b.gtld-servers.net, j.gtld-servers.net...-
whichphish.comali.ns.cloudflare.com, clark.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.193.87

NS records: ali.ns.cloudflare.com, clark.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for whichphish.com (unsigned zone)

⏱️ Timing

Total: 113ms | Queries: -

📄 Records

TypeCountSample Data
A2172.66.43.85, 172.66.40.171
AAAA22606:4700:3108::ac42:28ab, 2606:4700:3108::ac42:2b55
NS2ali.ns.cloudflare.com, clark.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1ali.ns.cloudflare.com dns.cloudflare.com

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (ali.ns.cloudflare.com, ali.ns.cloudflare.com, ali.ns.cloudflare.com...)

Analysis

IP Addresses

whichphish.com maps to four IP numbers: 2606:4700:3108::ac42:28ab, 2606:4700:3108::ac42:2b55, 172.66.40.171 and 172.66.43.85.

Other host names such as mattrunks.com, japaneseknifecompany.com, www.warehouserentinfo.hu, hr365.us and cdn.resulticks.com share IPs with whichphish.com.

Name Servers

Two name servers ali.ns.cloudflare.com and clark.ns.cloudflare.com handle the delegation for whichphish.com.

whichphish.com shares the same name server setup as other domains, for example myhnb.org, myhnb.net, 401jk-sol.com, lunarexivo.sbs and cheap-batteries.com.

whichphish.com at least partially shares name servers with other domains, for example tap41657aq.cc, modernpokerpoint.com, ieehidalgo.org.mx, relicmach.com and ameya.net.in.

These name servers are commonly used with keyla.ns.cloudflare.com and earl.ns.cloudflare.com and piers.ns.cloudflare.com.

Host names with six IP numbers:

ali.ns.cloudflare.com points to 2606:4700:50::adf5:3a3b, 2803:f800:50::6ca2:c03b, 2a06:98c1:50::ac40:203b, 108.162.192.59, 172.64.32.59 and 173.245.58.59.

clark.ns.cloudflare.com points to 2606:4700:58::adf5:3b57, 2803:f800:50::6ca2:c157, 2a06:98c1:50::ac40:2157, 108.162.193.87, 172.64.33.87 and 173.245.59.87.