phishfort.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of phishfort.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| static.phishfort.com | 2026-06-06 00:47:39.695 | |
| capi.phishfort.com | 2026-06-01 02:10:56.456 | |
| phishfort.com | 2026-07-25 06:34:36.452 | |
| home.phishfort.com | 2026-06-20 19:01:19.332 | |
| maelstrom.phishfort.com | 2026-07-16 01:18:33.528 | |
| serverless-api-template.phishfort.com | 2026-06-20 04:37:47.147 | |
| telegram.proactor.phishfort.com | 2026-06-23 05:43:59.533 | |
| dev.dashboard.phishfort.com | 2026-06-22 08:31:55.763 | |
| recordedfuture.phishfort.com | 2026-06-21 22:47:14.795 | |
| api-dev.pipeline.phishfort.com | 1970-01-01 00:00:00.000 | |
| dashboard.phishfort.com | 1970-01-01 00:00:00.000 | |
| elastic.elektro.phishfort.com | 1970-01-01 00:00:00.000 | |
| knowledge-base.phishfort.com | 1970-01-01 00:00:00.000 | |
| maelstream.phishfort.com | 1970-01-01 00:00:00.000 | |
| media.phishfort.com | 1970-01-01 00:00:00.000 | |
| n8n-dev.phishfort.com | 2026-07-18 01:30:22.078 | |
| n8n.phishfort.com | 2026-07-28 22:03:56.050 | |
| night-hawk.phishfort.com | 1970-01-01 00:00:00.000 | |
| rds.phishfort.com | 1970-01-01 00:00:00.000 | |
| recordedfuture-beta.phishfort.com | 1970-01-01 00:00:00.000 | |
| serverless.phishfort.com | 1970-01-01 00:00:00.000 | |
| service-layer.staging.phishfort.com | 1970-01-01 00:00:00.000 | |
| slack.phishfort.com | 1970-01-01 00:00:00.000 | |
| terminator.phishfort.com | 1970-01-01 00:00:00.000 | |
| www.phishfort.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | MS=ms88248923 | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | google-site-verification=WhVdEmznyDk8--4zHGjhPH-P_39zsJfA1iICylJ2Yqo | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | google-site-verification=Aj1NwFfXFYXKToIFzfTqeAWfdHC_uqPjqyS79Y8kkVU | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | google-site-verification=t-aked7cXC9ktlYZBAZCYpdRQCT0Zd4um3EiM-TQTNw | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| NS | walt.ns.cloudflare.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| AAAA | 2606:4700:3034::6815:1f1 | 2026-06-23 02:56:27.111 | 2026-06-23 02:56:27.111 |
| TXT | firebase=counter-phishing | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| A | 188.114.96.0 | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | notion-domain-verification=CdS3xIC5sjX6TWnozkAXgoHbEzKSKEsCt8P0grPRgHP | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | proxy-ssl.webflow.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| NS | molly.ns.cloudflare.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| AAAA | 2606:4700:3035::ac43:9899 | 2026-06-23 02:56:27.111 | 2026-06-23 02:56:27.111 |
| MX | 5 alt2.aspmx.l.google.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| MX | 10 alt4.aspmx.l.google.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| MX | 1 aspmx.l.google.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| A | 188.114.97.0 | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| MX | 5 alt1.aspmx.l.google.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| MX | 10 alt3.aspmx.l.google.com | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | facebook-domain-verification=i3zgaanvqly8lwo6038renk06ak4m7 | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | v=spf1 include:_spf.google.com include:_spf.firebasemail.com ~all | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| TXT | MS=2DDAD3005BA971F084772C677839E967D77111EE | 2026-06-23 02:56:27.111 | 2026-07-25 06:34:36.452 |
| AAAA | 2a06:98c1:3120:: | 2026-07-25 06:34:36.452 | 2026-07-25 06:34:36.452 |
| AAAA | 2a06:98c1:3121:: | 2026-07-25 06:34:36.452 | 2026-07-25 06:34:36.452 |