`phantomcyber.com`

DNSSEC	⚠️ Not signed
A	204.107.141.148^{🇺🇸 SPLUNK204.107.141.0/24 Splunk-West-2}
NS	`ns1.markmonitor.com` ⭐ ⚠️ Not in parent delegation
		A	2620:10a:80a8::1^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.1^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ha1.markmonitor.zone` ⚠️ Not in zone NS records
		A	2001:67c:1bc::5^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast}
			PTR	`ha1.markmonitor.zone`
		A	192.174.68.5^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net}
			PTR	`ha1.markmonitor.zone`
NS	`ha2.markmonitor.zone` ⚠️ Not in zone NS records
		A	2620:10a:80eb::6b^{🇨🇦 CIRA-22620:10a:80eb::/48 D-Zone Anycast Cloud 1}
			PTR	`ha2.markmonitor.zone`
		A	162.219.54.170^{🇨🇦 CIRA-2162.219.54.0/24 D-Zone Anycast Cloud1}
			PTR	`ha2.markmonitor.zone`
NS	`ha3.markmonitor.zone` ⚠️ Not in zone NS records
		A	2001:67c:10b8::5^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ha3.markmonitor.zone`
		A	176.97.158.5^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ha3.markmonitor.zone`
NS	`ha4.markmonitor.zone` ⚠️ Not in zone NS records
		A	2620:10a:80ec::6b^{🇨🇦 CIRA-32620:10a:80ec::/48 D-Zone IPv6 Anycast Cloud 2}
			PTR	`ha4.markmonitor.zone`
		A	162.219.55.170^{🇨🇦 CIRA-3162.219.55.0/24 D-Zone Anycast Cloud 2}
			PTR	`ha4.markmonitor.zone`
NS	`ns2.markmonitor.com` ⚠️ Not in parent delegation
		A	2001:67c:10b8::1^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns2.markmonitor.com`
		A	176.97.158.1^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns2.markmonitor.com`
NS	`ns3.markmonitor.com` ⚠️ Not in parent delegation
		A	2620:10a:80a9::1^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.1^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns4.markmonitor.com` ⚠️ Not in parent delegation
		A	2001:67c:1bc::1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD2001:67c:1bc::/48 IPCom-NET Anycast}
			PTR	`ns1.markmonitor.com`
		A	192.174.68.1^{🇦🇹 RCODEZERO-ANYCAST-SEC1-TLD192.174.68.0/24 NICat-anycast-net}
			PTR	`ns1.markmonitor.com`
NS	`ns5.markmonitor.com` ⚠️ Not in parent delegation
		A	2620:10a:80a8::2^{🇨🇦 CIRA-22620:10a:80a8::/48 markmonitor v6 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.160.2^{🇨🇦 CIRA-2149.112.160.0/24 markmonitor v4 cloud1 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
NS	`ns6.markmonitor.com` ⚠️ Not in parent delegation
		A	2001:67c:10b8::3^{🇨🇭 RCODEZERO-ANYCAST-SEC22001:67c:10b8::/48 IPCOM-anycast-net}
			PTR	`ns6.markmonitor.com`
		A	176.97.158.3^{🇦🇹 RCODEZERO-ANYCAST-SEC2176.97.158.0/24 NICat-anycast-net}
			PTR	`ns6.markmonitor.com`
NS	`ns7.markmonitor.com` ⚠️ Not in parent delegation
		A	2620:10a:80a9::2^{🇨🇦 CIRA-32620:10a:80a9::/48 markmonitor v6 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
		A	149.112.161.2^{🇨🇦 CIRA-3149.112.161.0/24 markmonitor v4 cloud2 979 Bank Street, Suite 400 Ottawa ON K1S 5K5 Canada}
TXT	`v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all`
SOA	`ns1.markmonitor.com`hostmaster@markmonitor.com 2025-10-23 #1

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775061062

Same first word

phantomcyber.us

phantomcyber.org

phantomcyber.com

phantomcyber.net

DNS History

21 records (12 active, 9 former)

●NSha1.markmonitor.zone2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSha2.markmonitor.zone2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSha3.markmonitor.zone2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSha4.markmonitor.zone2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSns1.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSns2.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSns3.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSns4.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSns5.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

●NSns6.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

○NSns67.domaincontrol.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

○NSns68.domaincontrol.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

●NSns7.markmonitor.com2026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

○MXalt1.aspmx.l.google.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

○MXalt2.aspmx.l.google.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

○MXaspmx.l.google.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

○MXaspmx2.googlemail.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

○MXaspmx3.googlemail.com2015-05-25 → 2017-04-01 · 4 obs

● 2015-05-25 16:41:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

●A204.107.141.1482026-03-31 → 2026-04-01 · 3 obs

○ 2017-04-01 06:50:22
● 2026-03-31 13:57:12
● 2026-04-01 16:31:32

○A52.91.186.1982015-12-19 → 2017-04-01 · 5 obs

○ 2015-10-17 12:28:42
● 2015-12-19 04:50:10
● 2017-04-01 06:50:22
○ 2026-03-31 13:57:12
○ 2026-04-01 16:31:32

○A54.165.15.2052015-05-25 → 2015-10-17 · 4 obs

● 2015-05-25 16:41:10
● 2015-10-17 12:28:42
○ 2015-12-19 04:50:10
○ 2026-04-01 16:31:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
phantomcyber.com	ha4.markmonitor.zone, ha2.markmonitor.zone, ha1.markmonitor.zone, ha3.markmonitor.zone	-

✅ Authoritative Response

Server:162.219.54.170

NS records: ha4.markmonitor.zone, ha2.markmonitor.zone, ha1.markmonitor.zone, ha3.markmonitor.zone

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phantomcyber.com (unsigned zone)

⏱️ Timing

Total: 1892ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`204.107.141.148`
NS	7	`ns3.markmonitor.com, ns4.markmonitor.com...`
TXT	1	`v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}.`
SOA	1	`ns1.markmonitor.com hostmaster.markmonit`

Analysis

IP Addresses

phantomcyber.com resolves to one IP number: 204.107.141.148.

other host names including splunkcloud.at, splunkmobile.sg, splunk.co.il, splunkcloud.com.cn and splunkcloud.co.in share IP numbers with phantomcyber.com.

Name Servers

phantomcyber.com delegates to eleven name servers: ns1.markmonitor.com, ns2.markmonitor.com, ns3.markmonitor.com, ns4.markmonitor.com, ns5.markmonitor.com, ns6.markmonitor.com, ns7.markmonitor.com, ha1.markmonitor.zone, ha2.markmonitor.zone, ha3.markmonitor.zone and ha4.markmonitor.zone.

phantomcyber.com at least partially shares name servers with other domains, for instance carfaxluxembourg.net, repairadvantagecarfax.org, alexatvspeaker.com, waterpiks.fr and picmonkey.co.

Names with two IP numbers:

ns1.markmonitor.com points to 2620:10a:80a8::1 and 149.112.160.1; ns2.markmonitor.com points to 2001:67c:10b8::1 and 176.97.158.1; ns3.markmonitor.com points to 2620:10a:80a9::1 and 149.112.161.1; ns4.markmonitor.com points to 2001:67c:1bc::1 and 192.174.68.1; ns5.markmonitor.com points to 2620:10a:80a8::2 and 149.112.160.2; ns6.markmonitor.com points to 2001:67c:10b8::3 and 176.97.158.3; ns7.markmonitor.com points to 2620:10a:80a9::2 and 149.112.161.2; ha1.markmonitor.zone points to 2001:67c:1bc::5 and 192.174.68.5; ha2.markmonitor.zone points to 2620:10a:80eb::6b and 162.219.54.170; ha3.markmonitor.zone points to 2001:67c:10b8::5 and 176.97.158.5; ha4.markmonitor.zone points to 2620:10a:80ec::6b and 162.219.55.170.

Pattern: for each x, two IPs are x+3 and x+6.

phantomcyber.com - robtex.com