CF1760669290550-tsm20251016114356

WWW.RTSAK.COM - phishing.domains

Search for IP or hostnames:

phishing.domains checked at 2025-10-17T02:48:10.537Z 609ms 53/53/53 100% R:10

phishing.domains

NSdns1.registrar-servers.com
A2610:a1:1024::200 🇺🇸 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
A156.154.132.200🇺🇸 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
NSdns2.registrar-servers.com
A2610:a1:1025::200 🇺🇸 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
A156.154.133.200🇺🇸 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
MXmail.phishing.domains

domains

NSv0n0.nic.domains
NSv0n1.nic.domains
NSv0n2.nic.domains
NSv0n3.nic.domains
NSv2n0.nic.domains
NSv2n1.nic.domains

Starts with same word

Starts similarily

AI analysis

phishing.domains's delegation uses two name servers, dns1.registrar-servers.com and dns2.registrar-servers.com.

phishing.domains shares the same name server setup as other domains, for example gciinc.org, ibbi.net, antiquecarpenters.com, mytrustedexpert.com and vulpix.net.

phishing.domains at least partially shares name servers with other domains, for example mobenow.com, sustaiart.com and tiyendepadmozi.com.

these name servers are commonly used together with dns3.registrar-servers.com, dns4.registrar-servers.com and dns5.registrar-servers.com.

Host names with two IPs:

dns1.registrar-servers.com points to: 2610:a1:1024::200 and 156.154.132.200

dns2.registrar-servers.com points to: 2610:a1:1025::200 and 156.154.133.200

phishing.domains is handled by a single mail server, mail.phishing.domains.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

rjhpORp CF johedugfp 2025-10-17