🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`phantomsecurity.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:b8e1^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:3873^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.56.115^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.184.225^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`boyd.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b4b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`boyd.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c14b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`boyd.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:214b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`boyd.ns.cloudflare.com`
		A	108.162.193.75^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`boyd.ns.cloudflare.com`
		A	172.64.33.75^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`boyd.ns.cloudflare.com`
		A	173.245.59.75^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`boyd.ns.cloudflare.com`
NS	`jean.ns.cloudflare.com`
		A	2606:4700:50::adf5:3a79^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jean.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c079^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`jean.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2079^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`jean.ns.cloudflare.com`
		A	108.162.192.121^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jean.ns.cloudflare.com`
		A	172.64.32.121^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jean.ns.cloudflare.com`
		A	173.245.58.121^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`jean.ns.cloudflare.com`
MX	`phantomsecurity-com.mail.protection.outlook.com` ⭐
		A	2a01:111:f403:c903::3^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-mw2pr02cu00503.inbound.protection.outlook.com`
		A	2a01:111:f403:c936::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-cy4pr03cu00201.inbound.protection.outlook.com`
		A	2a01:111:f403:c946::3^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-ch0pr04cu00603.inbound.protection.outlook.com`
		A	2a01:111:f403:f909::1^{🇺🇸 Microsoft2a01:111:f000::/36}
			PTR	`mail-bn0pr02cu00301.inbound.protection.outlook.com`
		A	52.101.41.54^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-sj2pr05cu00506.inbound.protection.outlook.com`
		A	52.101.60.154^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-bn0pr03cu00302.inbound.protection.outlook.com`
		A	52.101.60.160^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-bn0pr04cu00800.inbound.protection.outlook.com`
		A	52.101.202.153^{🇺🇸 Microsoft52.96.0.0/12 MICROSOFT}
			PTR	`mail-ph0pr02cu00101.inbound.protection.outlook.com`
TXT	`MS=ms18731859`
TXT	`v=spf1 include:spf.protection.outlook.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.56.115, 172.67.184.225
		IPv6 hints	2606:4700:3033::ac43:b8e1, 2606:4700:3034::6815:3873
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=167, name=cloudflare-ech.com
SOA	`boyd.ns.cloudflare.com`dns@cloudflare.com serial=2415639772

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1794329976

Same first word

Similar names

hamptonsecurity.com

thetsuricompany.com

hamptonsecurity.co.uk

Previous names

Next names

DNS History

14 records (7 active, 7 former)

●NSboyd.ns.cloudflare.com2026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

●NSjean.ns.cloudflare.com2026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

○NSns1.power-dns.com2015-06-03 → 2017-06-10 · 8 obs

○ 2008-03-20 03:30:02
● 2015-06-03 02:08:54
○ 2015-10-21 11:54:38
● 2015-12-29 16:42:14
○ 2016-04-02 09:55:18
● 2017-06-10 11:52:24
○ 2026-10-08 14:36:48
○ 2026-11-10 17:15:14

○NSns2.power-dns.com2015-06-03 → 2017-06-10 · 8 obs

○ 2008-03-20 03:30:02
● 2015-06-03 02:08:54
● 2015-10-21 11:54:38
○ 2015-12-29 16:42:14
● 2016-04-02 09:55:18
● 2017-06-10 11:52:24
○ 2026-10-08 14:36:48
○ 2026-11-10 17:15:14

○MXmail.dovemail.com2015-06-03 → 2016-09-24 · 5 obs

○ 2008-03-20 03:30:02
● 2015-06-03 02:08:54
● 2016-09-24 06:42:18
○ 2017-06-10 11:52:24
○ 2026-11-10 17:15:14

○MXmx1.ewebdevelopment.com2017-06-10 → 2017-06-10 · 4 obs

○ 2016-09-24 06:42:18
● 2017-06-10 11:52:24
○ 2026-10-08 14:36:48
○ 2026-11-10 17:15:14

○MXmx2.ewebdevelopment.com2017-06-10 → 2017-06-10 · 4 obs

○ 2016-09-24 06:42:18
● 2017-06-10 11:52:24
○ 2026-10-08 14:36:48
○ 2026-11-10 17:15:14

●MXphantomsecurity-com.mail.protection.outlook.com2026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

●A104.21.56.1152026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

●A172.67.184.2252026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

○A174.36.107.1302015-06-03 → 2017-06-10 · 9 obs

○ 2008-03-20 03:30:02
● 2015-06-03 02:08:54
● 2015-10-21 11:54:38
○ 2015-12-29 16:42:14
○ 2016-04-02 09:55:18
● 2016-09-24 06:42:18
● 2017-06-10 11:52:24
○ 2026-10-08 14:36:48
○ 2026-11-10 17:15:14

○A174.37.172.1622015-06-03 → 2017-06-10 · 7 obs

○ 2008-03-20 03:30:02
● 2015-06-03 02:08:54
● 2016-04-02 09:55:18
○ 2016-09-24 06:42:18
● 2017-06-10 11:52:24
○ 2026-10-08 14:36:48
○ 2026-11-10 17:15:14

●A2606:4700:3033::ac43:b8e12026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

●A2606:4700:3034::6815:38732026-10-08 → 2026-11-10 · 3 obs

○ 2017-06-10 11:52:24
● 2026-10-08 14:36:48
● 2026-11-10 17:15:14

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	h.gtld-servers.net, m.gtld-servers.net, g.gtld-servers.net, k.gtld-servers.net...	-
phantomsecurity.com	jean.ns.cloudflare.com, boyd.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.75

NS records: jean.ns.cloudflare.com, boyd.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

Root DNSKEY fetch failed: Error: connect EADDRNOTAVAIL 198.41.0.4:53 - Local (0.0.0.0:0)

⏱️ Timing

Total: 120ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.184.225, 104.21.56.115`
AAAA	2	`2606:4700:3034::6815:3873, 2606:4700:3033::ac43:b8e1`
NS	2	`boyd.ns.cloudflare.com, jean.ns.cloudflare.com`
MX	1	`phantomsecurity-com.mail.protection.outl`
TXT	2	`MS=ms18731859, v=spf1 include:spf.protection.outlook.co`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`boyd.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (jean.ns.cloudflare.com, jean.ns.cloudflare.com, jean.ns.cloudflare.com...)

Analysis

IP Addresses

phantomsecurity.com points to the four IP addresses 104.21.56.115, 172.67.184.225, 2606:4700:3033::ac43:b8e1 and 2606:4700:3034::6815:3873.

darbho.click, pizzafactoryredcar.co.uk, betmicacasino.bet and two other host names share IP numbers with phantomsecurity.com.

Name Servers

phantomsecurity.com uses two name servers for its delegation: boyd.ns.cloudflare.com and jean.ns.cloudflare.com.

phantomsecurity.com uses the same name servers as several other domains — among them mnpvupu201.workers.dev, luck888.win, illuminati-landing-bjn.pages.dev and two more.

The name servers of phantomsecurity.com overlap at least partially with those of other domains — among them wwe99.pages.dev, termstack.de, ricomijenzjavier-1234.workers.dev and two more.

These name servers commonly appear in combination with the name servers brian.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname boyd.ns.cloudflare.com directs to 108.162.193.75, 172.64.33.75 and 173.245.59.75 along with 3 other IP addresses.

Hostname jean.ns.cloudflare.com directs to 108.162.192.121, 172.64.32.121 and 173.245.58.121 along with 3 other IP addresses.

Mail Servers

Mail for phantomsecurity.com is handled by a single mail server, phantomsecurity-com.mail.protection.outlook.com.

phantomsecurity-com.mail.protection.outlook.com resolves to 8 IP addresses — 52.101.41.54, 52.101.60.154, 52.101.60.160 and 5 others.

phantomsecurity.com - robtex.com