Comment by g-adamante

I tried to look phishtank.com DNS records.

I get the same results using a public resolver and my VPN.

When I try using the ISP directly, I get that:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> SOA +multiline phishtank.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49124 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 2

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;phishtank.com. IN SOA

;; ADDITIONAL SECTION: manual.zone. 86400 IN SOA manual.zone. manual.zone. ( 6325 ; serial 60 ; refresh (1 minute) 60 ; retry (1 minute) 3600000 ; expire (5 weeks 6 days 16 hours) 86400 ; minimum (1 day) )

When I use the VPN, I get that:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> SOA +multiline phishtank.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15895 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;phishtank.com. IN SOA

;; ANSWER SECTION: phishtank.com. 881 IN SOA ns-128.awsdns-16.com. awsdns-hostmaster.amazon.com. ( 1 ; serial 7200 ; refresh (2 hours) 900 ; retry (15 minutes) 1209600 ; expire (2 weeks) 86400 ; minimum (1 day) )

;; AUTHORITY SECTION: phishtank.com. 172781 IN NS ns-1249.awsdns-28.org. phishtank.com. 172781 IN NS ns-128.awsdns-16.com. phishtank.com. 172781 IN NS ns-1994.awsdns-57.co.uk. phishtank.com. 172781 IN NS ns-694.awsdns-22.net.

What is going on with that manual.zone?