I tried to look phishtank.com DNS records.
I get the same results using a public resolver and my VPN.
When I try using the ISP directly, I get that:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> SOA +multiline phishtank.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 2
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;phishtank.com. IN SOA
;; ADDITIONAL SECTION:
manual.zone. 86400 IN SOA manual.zone. manual.zone. (
6325 ; serial
60 ; refresh (1 minute)
60 ; retry (1 minute)
3600000 ; expire (5 weeks 6 days 16 hours)
86400 ; minimum (1 day)
)
When I use the VPN, I get that:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> SOA +multiline phishtank.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15895
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;phishtank.com. IN SOA
;; ANSWER SECTION:
phishtank.com. 881 IN SOA ns-128.awsdns-16.com. awsdns-hostmaster.amazon.com. (
1 ; serial
7200 ; refresh (2 hours)
900 ; retry (15 minutes)
1209600 ; expire (2 weeks)
86400 ; minimum (1 day)
)
;; AUTHORITY SECTION:
phishtank.com. 172781 IN NS ns-1249.awsdns-28.org.
phishtank.com. 172781 IN NS ns-128.awsdns-16.com.
phishtank.com. 172781 IN NS ns-1994.awsdns-57.co.uk.
phishtank.com. 172781 IN NS ns-694.awsdns-22.net.
What is going on with that manual.zone?