phantomrecovery.com - robtex.com

phantomrecovery.com

DNSSEC⚠️ Not signed
A2606:4700:3037::6815:1994🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::ac43:8652🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.25.148Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.134.82🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSpete.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b88🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpete.ns.cloudflare.com
A2803:f800:50::6ca2:c188🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRpete.ns.cloudflare.com
A2a06:98c1:50::ac40:2188🇺🇸 Cloudflare2a06:98c1:50::/45
PTRpete.ns.cloudflare.com
A108.162.193.136🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpete.ns.cloudflare.com
A172.64.33.136🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpete.ns.cloudflare.com
A173.245.59.136🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRpete.ns.cloudflare.com
NSvera.ns.cloudflare.com
A2606:4700:50::adf5:3a93🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvera.ns.cloudflare.com
A2803:f800:50::6ca2:c093🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRvera.ns.cloudflare.com
A2a06:98c1:50::ac40:2093🇺🇸 Cloudflare2a06:98c1:50::/45
PTRvera.ns.cloudflare.com
A108.162.192.147🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvera.ns.cloudflare.com
A172.64.32.147🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvera.ns.cloudflare.com
A173.245.58.147🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRvera.ns.cloudflare.com
MX_dc-mx.45417a4aa2c6.phantomrecovery.com ⭐
A199.195.252.170🇺🇸 FRANTECH199.195.248.0/21 Frantech Solutions
PTRmta0.eiocsa.net
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.25.148, 172.67.134.82
IPv6 hints2606:4700:3037::6815:1994, 2606:4700:3037::ac43:8652
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=53, name=cloudflare-ech.com
SOApete.ns.cloudflare.comdns@cloudflare.com serial=2400664671

com

DNSSEC🔒 Signed (DS record present)
NSa.gtld-servers.net ⭐
NSb.gtld-servers.net
NSc.gtld-servers.net
NSd.gtld-servers.net
NSe.gtld-servers.net
NSf.gtld-servers.net
NSg.gtld-servers.net
NSh.gtld-servers.net
NSi.gtld-servers.net
NSj.gtld-servers.net
NSk.gtld-servers.net
NSl.gtld-servers.net
NSm.gtld-servers.net
SOAa.gtld-servers.netnstld@verisign-grs.com serial=1775999647

Same first word

phantomrecovery.com

DNS History

22 records (7 active, 15 former)

200920112013201520172019202120232025NSpete.ns.cloudflare.comvera.ns.cloudflare.comns37.domaincontrol.comns38.domaincontrol.comMX_dc-mx.45417a4aa2c6.phantomrecovery.comdc-4177c12d.phantomrecovery.comdc-f7c2932a6655.phantomrecovery.commailstore1.secureserver.netsmtp.secureserver.netA104.21.25.148172.67.134.822606:4700:3037::6815:19942606:4700:3037::ac43:8652104.28.10.101104.28.11.101104.31.152.64104.31.153.642400:cb00:2048:1::681f:98402400:cb00:2048:1::681f:99402606:4700:30::681c:a652606:4700:30::681c:b6568.178.254.22
○NSns37.domaincontrol.com2008-03-11 → 2008-03-11 · 3 obs
● 2008-03-11 04:30:36
○ 2015-05-26 06:27:24
○ 2026-04-12 13:32:16
○NSns38.domaincontrol.com2008-03-11 → 2008-03-11 · 3 obs
● 2008-03-11 04:30:36
○ 2015-05-26 06:27:24
○ 2026-04-12 13:32:16
●NSpete.ns.cloudflare.com2015-05-26 → 2026-04-12 · 3 obs
○ 2008-03-11 04:30:36
● 2015-05-26 06:27:24
● 2026-04-12 13:32:16
●NSvera.ns.cloudflare.com2015-05-26 → 2026-04-12 · 3 obs
○ 2008-03-11 04:30:36
● 2015-05-26 06:27:24
● 2026-04-12 13:32:16
●MX_dc-mx.45417a4aa2c6.phantomrecovery.com2026-02-22 → 2026-04-12 · 3 obs
○ 2019-12-23 18:46:56
● 2026-02-22 11:16:48
● 2026-04-12 13:32:16
○MXdc-4177c12d.phantomrecovery.com2015-05-26 → 2017-02-10 · 5 obs
○ 2008-03-11 04:30:36
● 2015-05-26 06:27:24
● 2017-02-10 21:36:24
○ 2019-12-23 18:46:56
○ 2026-04-12 13:32:16
○MXdc-f7c2932a6655.phantomrecovery.com2019-12-23 → 2019-12-23 · 4 obs
○ 2017-02-10 21:36:24
● 2019-12-23 18:46:56
○ 2026-02-22 11:16:48
○ 2026-04-12 13:32:16
○MXmailstore1.secureserver.net2008-03-11 → 2008-03-11 · 3 obs
● 2008-03-11 04:30:36
○ 2015-05-26 06:27:24
○ 2026-04-12 13:32:16
○MXsmtp.secureserver.net2008-03-11 → 2008-03-11 · 3 obs
● 2008-03-11 04:30:36
○ 2015-05-26 06:27:24
○ 2026-04-12 13:32:16
●A104.21.25.1482026-02-22 → 2026-04-12 · 3 obs
○ 2019-12-23 18:46:56
● 2026-02-22 11:16:48
● 2026-04-12 13:32:16
○A104.28.10.1012015-05-26 → 2019-12-23 · 7 obs
○ 2008-03-11 04:30:36
● 2015-05-26 06:27:24
● 2016-02-08 21:50:14
○ 2017-02-10 21:36:24
● 2019-12-23 18:46:56
○ 2026-02-22 11:16:48
○ 2026-04-12 13:32:16
○A104.28.11.1012015-05-26 → 2019-12-23 · 7 obs
○ 2008-03-11 04:30:36
● 2015-05-26 06:27:24
● 2016-02-08 21:50:14
○ 2017-02-10 21:36:24
● 2019-12-23 18:46:56
○ 2026-02-22 11:16:48
○ 2026-04-12 13:32:16
○A104.31.152.642017-02-10 → 2017-02-10 · 4 obs
○ 2016-02-08 21:50:14
● 2017-02-10 21:36:24
○ 2019-12-23 18:46:56
○ 2026-04-12 13:32:16
○A104.31.153.642017-02-10 → 2017-02-10 · 4 obs
○ 2016-02-08 21:50:14
● 2017-02-10 21:36:24
○ 2019-12-23 18:46:56
○ 2026-04-12 13:32:16
●A172.67.134.822026-02-22 → 2026-04-12 · 3 obs
○ 2019-12-23 18:46:56
● 2026-02-22 11:16:48
● 2026-04-12 13:32:16
○A2400:cb00:2048:1::681f:98402017-02-10 → 2017-02-10 · 4 obs
○ 2016-02-08 21:50:14
● 2017-02-10 21:36:24
○ 2019-12-23 18:46:56
○ 2026-04-12 13:32:16
○A2400:cb00:2048:1::681f:99402017-02-10 → 2017-02-10 · 4 obs
○ 2016-02-08 21:50:14
● 2017-02-10 21:36:24
○ 2019-12-23 18:46:56
○ 2026-04-12 13:32:16
○A2606:4700:30::681c:a652019-12-23 → 2019-12-23 · 4 obs
○ 2017-02-10 21:36:24
● 2019-12-23 18:46:56
○ 2026-02-22 11:16:48
○ 2026-04-12 13:32:16
○A2606:4700:30::681c:b652019-12-23 → 2019-12-23 · 4 obs
○ 2017-02-10 21:36:24
● 2019-12-23 18:46:56
○ 2026-02-22 11:16:48
○ 2026-04-12 13:32:16
●A2606:4700:3037::6815:19942026-02-22 → 2026-04-12 · 3 obs
○ 2019-12-23 18:46:56
● 2026-02-22 11:16:48
● 2026-04-12 13:32:16
●A2606:4700:3037::ac43:86522026-02-22 → 2026-04-12 · 3 obs
○ 2019-12-23 18:46:56
● 2026-02-22 11:16:48
● 2026-04-12 13:32:16
○A68.178.254.222008-03-11 → 2008-03-11 · 3 obs
● 2008-03-11 04:30:36
○ 2015-05-26 06:27:24
○ 2026-04-12 13:32:16

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
coml.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...-
phantomrecovery.compete.ns.cloudflare.com, vera.ns.cloudflare.com12 records

✅ Authoritative Response

Server:108.162.193.136

NS records: pete.ns.cloudflare.com, vera.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phantomrecovery.com (unsigned zone)

⏱️ Timing

Total: 128ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.25.148, 172.67.134.82
AAAA22606:4700:3037::ac43:8652, 2606:4700:3037::6815:1994
NS2pete.ns.cloudflare.com, vera.ns.cloudflare.com
MX1_dc-mx.45417a4aa2c6.phantomrecovery.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1pete.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (pete.ns.cloudflare.com, pete.ns.cloudflare.com, pete.ns.cloudflare.com...)

Analysis

IP Addresses

phantomrecovery.com refers to four IP numbers: 2606:4700:3037::6815:1994, 2606:4700:3037::ac43:8652, 104.21.25.148 and 172.67.134.82.

Other host names, for instance wlwmanifest.xml.wp-includes.cms.1580.iview.hk, crystalbettingdaily.com, ac8703.iview.hk, xml.wp-includes.website.1580.iview.hk and mail.hotelfauchere.com share IP numbers with phantomrecovery.com.

Name Servers

phantomrecovery.com's delegation uses two name servers: pete.ns.cloudflare.com and vera.ns.cloudflare.com.

phantomrecovery.com uses the same name server setup as other domains, such as stocksolo.com, perfectdate.nl, myanmartvchannel.com, getvecta.com and davmar.org.

phantomrecovery.com at least partially shares name servers with other domains, including knifestock.es, db-sylt-shuttle.de, inmcntnt.com, autoinvest.cz and xonqyq.study.

These name servers are often used with josh.ns.cloudflare.com and nick.ns.cloudflare.com.

Host names with six IP numbers:

pete.ns.cloudflare.com points to 2606:4700:58::adf5:3b88, 2803:f800:50::6ca2:c188, 2a06:98c1:50::ac40:2188, 108.162.193.136, 172.64.33.136 and 173.245.59.136.

vera.ns.cloudflare.com points to 2606:4700:50::adf5:3a93, 2803:f800:50::6ca2:c093, 2a06:98c1:50::ac40:2093, 108.162.192.147, 172.64.32.147 and 173.245.58.147.

Mail Servers

A single mail server handles phantomrecovery.com, _dc-mx.45417a4aa2c6.phantomrecovery.com.

Host name _dc-mx.45417a4aa2c6.phantomrecovery.com resolves to a single IP: 199.195.252.170.