CF1760543008189-tsm20251015074336

NSLIST.NET - phishing.domains

Search for IP or hostnames:

phishing.domains checked at 2025-10-15T15:43:28.179Z 106ms 53/53/53 100% R:12

phishing.domains

NSdns1.registrar-servers.com
A2610:a1:1024::200 🇺🇸 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
A156.154.132.200🇺🇸 Neustar
PTRdns1.namecheaphosting.com
PTRdns1.registrar-servers.com
NSdns2.registrar-servers.com
A2610:a1:1025::200 🇺🇸 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
A156.154.133.200🇺🇸 Neustar
PTRdns2.namecheaphosting.com
PTRdns2.registrar-servers.com
MXmail.phishing.domains

domains

NSv0n0.nic.domains
NSv0n1.nic.domains
NSv0n2.nic.domains
NSv0n3.nic.domains
NSv2n0.nic.domains
NSv2n1.nic.domains

Starts with same word

Starts similarily

AI analysis

Two name servers dns1.registrar-servers.com and dns2.registrar-servers.com are delegated to phishing.domains.

phishing.domains uses the same name server configuration as other domains, such as gciinc.org, ibbi.net, antiquecarpenters.com, mytrustedexpert.com and vulpix.net.

phishing.domains at least partially shares name servers with other domains, including mobenow.com, sustaiart.com and tiyendepadmozi.com.

These name servers are commonly used alongside dns3.registrar-servers.com, dns4.registrar-servers.com and dns5.registrar-servers.com.

Host names with two IPs:

dns1.registrar-servers.com points to 2610:a1:1024::200 and 156.154.132.200.

dns2.registrar-servers.com points to 2610:a1:1025::200 and 156.154.133.200.

phishing.domains is handled by a single mail server, mail.phishing.domains.

Perform reverse DNS lookup as well as normal forward DNS. Check Autonomous System Numbers (ASNs) and BGP connections between Internet Service Providers.
dbq

ysmtNkT CF johedugfp 2025-10-15