phish.gg - robtex.com

phish.gg

DNSSEC⚠️ Not signed
A2606:4700:10::6814:1a91πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:10::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:10::ac42:9e0aπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:10::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.20.26.145Cloudflare104.20.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.66.158.10πŸ‡ΊπŸ‡Έ Cloudflare172.66.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSnora.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3ad5πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnora.ns.cloudflare.com
A2803:f800:50::6ca2:c0d5πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRnora.ns.cloudflare.com
A2a06:98c1:50::ac40:20d5πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRnora.ns.cloudflare.com
A108.162.192.213πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnora.ns.cloudflare.com
A172.64.32.213πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnora.ns.cloudflare.com
A173.245.58.213πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRnora.ns.cloudflare.com
NSterry.ns.cloudflare.com
A2606:4700:58::adf5:3bedπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRterry.ns.cloudflare.com
A2803:f800:50::6ca2:c1edπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRterry.ns.cloudflare.com
A2a06:98c1:50::ac40:21edπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRterry.ns.cloudflare.com
A108.162.193.237πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRterry.ns.cloudflare.com
A172.64.33.237πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRterry.ns.cloudflare.com
A173.245.59.237πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRterry.ns.cloudflare.com
MXmail.phish.gg ⭐
A213.175.196.41πŸ‡¬πŸ‡§ BYTEMARK-AS213.175.196.0/24
PTRmail4.specialservers.com
TXTgoogle-site-verification=RHAULXXMstgGpFLBEPoGHxfNVR4B9SHOQuA_wAsVhQE
HTTPSHTTP/2 βœ“ hints match
IPv4104.20.26.145, 172.66.158.10
IPv62606:4700:10::6814:1a91, 2606:4700:10::ac42:9e0a
SOAnora.ns.cloudflare.comdns@cloudflare.com serial=2399662923

gg

DNSSECπŸ”’ Signed (DS record present)
NSc.ci-servers.org ⭐
NSdns1.nominetdns.uk
NSdns2.nominetdns.uk
NSdns3.nominetdns.uk
NSdns4.nominetdns.uk
NSe.ci-servers.net
TXTGeneration Time: 1774605591
SOAc.ci-servers.orgdnsmaster@channelisles.net serial=2026035936

Same first word

Similar names

DNS History

7 records (7 active, 0 former)

NSnora.ns.cloudflare.comterry.ns.cloudflare.comMXmail.phish.ggA104.20.26.145172.66.158.102606:4700:10::6814:1a912606:4700:10::ac42:9e0a
●NSnora.ns.cloudflare.com2026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48
●NSterry.ns.cloudflare.com2026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48
●MXmail.phish.gg2026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48
●A104.20.26.1452026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48
●A172.66.158.102026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48
●A2606:4700:10::6814:1a912026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48
●A2606:4700:10::ac42:9e0a2026-03-24 β†’ 2026-03-27 Β· 2 obs
● 2026-03-24 02:16:16
● 2026-03-27 10:33:48

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
ggdns4.nominetdns.uk, dns1.nominetdns.uk, c.ci-servers.org, e.ci-servers.net...12 records
phish.ggnora.ns.cloudflare.com, terry.ns.cloudflare.com-

βœ… Authoritative Response

Server:172.64.33.237

NS records: nora.ns.cloudflare.com, terry.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phish.gg (unsigned zone)

⏱️ Timing

Total: 628ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.20.26.145, 172.66.158.10
AAAA22606:4700:10::ac42:9e0a, 2606:4700:10::6814:1a91
NS2nora.ns.cloudflare.com, terry.ns.cloudflare.com
MX1mail.phish.gg (pri: 0)
TXT1google-site-verification=RHAULXXMstgGpFL
HTTPS1{"priority":1,"target":".","alpn":["h2"]
SOA1nora.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (dns4.nominetdns.uk, dns3.nominetdns.uk, dns2.nominetdns.uk...)

Analysis

IP Addresses

phish.gg maps to four IP numbers: 2606:4700:10::6814:1a91, 2606:4700:10::ac42:9e0a, 104.20.26.145 and 172.66.158.10.

Other host names, for example concordtheatricals.co.uk, drop.money, www.concordtheatricals.co.uk and outcome.xyz share IP numbers with phish.gg.

Name Servers

Two name servers nora.ns.cloudflare.com and terry.ns.cloudflare.com handle delegation for phish.gg.

phish.gg uses the same name server setup as other domains, for example zhangshilu.com, orpi.com, lyax.be, forexon.com and kenbonny.net.

phish.gg partially shares name servers with other domains; examples include sman8sukawati.pages.dev, 67gjr.com, impactsf.co.uk, bugcha.in and gadesma.com.

Host names with six IP numbers: nora.ns.cloudflare.com points to: 2606:4700:50::adf5:3ad5, 2803:f800:50::6ca2:c0d5, 2a06:98c1:50::ac40:20d5, 108.162.192.213, 172.64.32.213 and 173.245.58.213; terry.ns.cloudflare.com points to: 2606:4700:58::adf5:3bed, 2803:f800:50::6ca2:c1ed, 2a06:98c1:50::ac40:21ed, 108.162.193.237, 172.64.33.237 and 173.245.59.237.

Mail Servers

phish.gg is handled by a single mail server, mail.phish.gg.

mail.phish.gg points to a single IP: 213.175.196.41.