`hmrc-taxreturn.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3036::6815:48fc^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:9c01^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.72.252^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.156.1^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`brett.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b4c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c14c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`brett.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:214c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`brett.ns.cloudflare.com`
		A	108.162.193.76^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
		A	172.64.33.76^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
		A	173.245.59.76^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`brett.ns.cloudflare.com`
NS	`candy.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a4f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c04f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`candy.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:204f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`candy.ns.cloudflare.com`
		A	108.162.192.79^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	172.64.32.79^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
		A	173.245.58.79^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`candy.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.72.252, 172.67.156.1
		IPv6 hints	2606:4700:3036::6815:48fc, 2606:4700:3036::ac43:9c01
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=187, name=cloudflare-ech.com
SOA	`brett.ns.cloudflare.com`dns@cloudflare.com serial=2406706371

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785235092

⚠️ On DNS blocklist: tif

Subdomains

www.hmrc-taxreturn.com

Same first word

hmrc-taxreturn.com

DNS History

8 records (6 active, 2 former)

●NSbrett.ns.cloudflare.com2026-04-11 → 2026-07-28 · 2 obs

● 2026-04-11 03:08:12
● 2026-07-28 10:51:58

●NScandy.ns.cloudflare.com2026-04-11 → 2026-07-28 · 2 obs

● 2026-04-11 03:08:12
● 2026-07-28 10:51:58

●A104.21.72.2522026-04-11 → 2026-07-28 · 2 obs

● 2026-04-11 03:08:12
● 2026-07-28 10:51:58

●A172.67.156.12026-04-11 → 2026-07-28 · 2 obs

● 2026-04-11 03:08:12
● 2026-07-28 10:51:58

○A2606:4700:3033::6815:48fc2026-04-11 → 2026-05-05 · 3 obs

● 2026-04-11 03:08:12
● 2026-05-05 09:39:30
○ 2026-07-28 10:51:58

○A2606:4700:3033::ac43:9c012026-04-11 → 2026-05-05 · 3 obs

● 2026-04-11 03:08:12
● 2026-05-05 09:39:30
○ 2026-07-28 10:51:58

●A2606:4700:3036::6815:48fc2026-07-28 → 2026-07-28 · 2 obs

○ 2026-05-05 09:39:30
● 2026-07-28 10:51:58

●A2606:4700:3036::ac43:9c012026-07-28 → 2026-07-28 · 2 obs

○ 2026-05-05 09:39:30
● 2026-07-28 10:51:58

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	m.gtld-servers.net, f.gtld-servers.net, b.gtld-servers.net, g.gtld-servers.net...	-
hmrc-taxreturn.com	candy.ns.cloudflare.com, brett.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.79

NS records: candy.ns.cloudflare.com, brett.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for hmrc-taxreturn.com (unsigned zone)

⏱️ Timing

Total: 132ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.156.1, 104.21.72.252`
AAAA	2	`2606:4700:3036::6815:48fc, 2606:4700:3036::ac43:9c01`
NS	2	`brett.ns.cloudflare.com, candy.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`brett.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (candy.ns.cloudflare.com, candy.ns.cloudflare.com, candy.ns.cloudflare.com...)

Analysis

Hierarchy

www.hmrc-taxreturn.com is delegated beneath hmrc-taxreturn.com.

IP Addresses

hmrc-taxreturn.com directs to four IP numbers, which are 104.21.72.252, 172.67.156.1, 2606:4700:3036::6815:48fc and 2606:4700:3036::ac43:9c01.

allright.tht.in, cdn.io, 60756.cc plus two other host names have IP numbers in common with hmrc-taxreturn.com.

Name Servers

DNS delegation for hmrc-taxreturn.com points to two name servers: brett.ns.cloudflare.com and candy.ns.cloudflare.com.

The name server configuration of hmrc-taxreturn.com is shared with other domains, for instance cattle-cooling.com, ayoadesanya.com, honeyroots.io and two others.

There is at least partial name server overlap between hmrc-taxreturn.com and other domains — miok.workers.dev, ligadbasia88.pro, montenegro.com and two more among them.

These name servers frequently co-occur with the name servers cortney.ns.cloudflare.com and henry.ns.cloudflare.com.

Hosts with 6 IP addresses each:

brett.ns.cloudflare.com has IP addresses 108.162.193.76, 172.64.33.76 and 173.245.59.76, plus 3 other.

candy.ns.cloudflare.com has IP addresses 108.162.192.79, 172.64.32.79 and 173.245.58.79, plus 3 other.

hmrc-taxreturn.com - robtex.com