Skip to content

Hostname

phi.sh

Last fetched

phi.sh resolves to 2 IPv4 addresses operated by CLOUDFLARENET - Cloudflare, Inc. in CA. WHOIS lists iana:1861 as the registrar.

Nutrition Label

WHISPER CANON · phi.shRouting diversity—Peering density—MOAS conflict—Threat-feed listings—WHOIS transparency—Resolver footprint—canon.whisper.security/host/phi.sh

Resolution chain

phi.sh resolves to 2 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
104.21.57.8104.21.48.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA
172.67.157.126172.67.144.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA

WHOIS identity

Registrar
iana:1861
Organization
private by design,
Contact emails
—

Subdomains

2 observed subdomains of phi.sh.

Subdomain
six.phi.sh
www.phi.sh

Web-graph footprint

Distinct hostnames that link to or from phi.sh in the public web crawl.

Sample inbound links

Sample outbound links

Threat posture

History

Mail and authentication

SPF policy

1 SPF mechanism authorising senders for phi.sh.

MechanismTarget
SPF_REDIRECTphish.net

Related pages

Pivot deeper into the graph from phi.sh.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "phi.sh"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.