`phase2plus.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:4a5d^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::ac43:a803^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.74.93^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.168.3^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`buck.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3b4e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`buck.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c14e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`buck.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:214e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`buck.ns.cloudflare.com`
		A	108.162.193.78^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`buck.ns.cloudflare.com`
		A	172.64.33.78^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`buck.ns.cloudflare.com`
		A	173.245.59.78^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`buck.ns.cloudflare.com`
NS	`summer.ns.cloudflare.com`
		A	2606:4700:50::a29f:2609^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`summer.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c209^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`summer.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:2209^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`summer.ns.cloudflare.com`
		A	108.162.194.9^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`summer.ns.cloudflare.com`
		A	162.159.38.9^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`summer.ns.cloudflare.com`
		A	172.64.34.9^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`summer.ns.cloudflare.com`
MX	`mx.siteprotect.com` ⭐
		A	64.26.60.135^{🇺🇸 AFFINITY64.26.60.0/24 Customers}
			PTR	`mx.siteprotect.com`
TXT	`MS=ms24222626`
TXT	`_sitelock-domain-validation=c2bc62ef96570849`
TXT	`google-site-verification=-9dw81YAxm7AQQKtoigwsyWjPHjkmb7n7SeS_dh_dHk`
TXT	`v=spf1 include:mfg.siteprotect.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.74.93, 172.67.168.3
		IPv6 hints	2606:4700:3033::6815:4a5d, 2606:4700:3033::ac43:a803
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=73, name=cloudflare-ech.com
SOA	`buck.ns.cloudflare.com`dns@cloudflare.com serial=2401870508

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1776979621

WOT: UNKNOWN (61/100)

PTR for

164.45.12.76.in-addr.arpa

Subdomains

mail.phase2plus.com

Same first word

phase2plus.com

DNS History

14 records (7 active, 7 former)

●NSbuck.ns.cloudflare.com2026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

○NSns1.lnhi.net2015-07-24 → 2019-04-15 · 4 obs

● 2015-07-24 08:26:00
● 2019-04-15 07:04:10
○ 2026-02-16 16:09:18
○ 2026-04-23 21:50:32

○NSns2.lnhi.net2015-07-24 → 2019-04-15 · 4 obs

● 2015-07-24 08:26:00
● 2019-04-15 07:04:10
○ 2026-02-16 16:09:18
○ 2026-04-23 21:50:32

○NSns3.lnhi.net2015-07-24 → 2019-04-15 · 4 obs

● 2015-07-24 08:26:00
● 2019-04-15 07:04:10
○ 2026-02-16 16:09:18
○ 2026-04-23 21:50:32

●NSsummer.ns.cloudflare.com2026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

○MXmail59.safesecureweb.com2015-07-24 → 2016-06-23 · 4 obs

● 2015-07-24 08:26:00
● 2016-06-23 07:09:46
○ 2019-04-15 07:04:10
○ 2026-04-23 21:50:32

●MXmx.siteprotect.com2026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

○MXwin-mail15.hostmanagement.net2019-04-15 → 2019-04-15 · 4 obs

○ 2016-06-23 07:09:46
● 2019-04-15 07:04:10
○ 2026-02-16 16:09:18
○ 2026-04-23 21:50:32

●A104.21.74.932026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

●A172.67.168.32026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

●A2606:4700:3033::6815:4a5d2026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

●A2606:4700:3033::ac43:a8032026-02-16 → 2026-04-23 · 3 obs

○ 2019-04-15 07:04:10
● 2026-02-16 16:09:18
● 2026-04-23 21:50:32

○A76.12.146.1412015-11-22 → 2019-04-15 · 5 obs

○ 2015-07-24 08:26:00
● 2015-11-22 17:44:10
● 2019-04-15 07:04:10
○ 2026-02-16 16:09:18
○ 2026-04-23 21:50:32

○A76.12.45.1642015-07-24 → 2015-07-24 · 3 obs

● 2015-07-24 08:26:00
○ 2015-11-22 17:44:10
○ 2026-04-23 21:50:32

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
phase2plus.com	buck.ns.cloudflare.com, summer.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.78

NS records: buck.ns.cloudflare.com, summer.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phase2plus.com (unsigned zone)

⏱️ Timing

Total: 100ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.168.3, 104.21.74.93`
AAAA	2	`2606:4700:3033::ac43:a803, 2606:4700:3033::6815:4a5d`
NS	2	`buck.ns.cloudflare.com, summer.ns.cloudflare.com`
MX	1	`mx.siteprotect.com (pri: 10)`
TXT	4	`MS=ms24222626, _sitelock-domain-validation=c2bc62ef9657...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`buck.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (buck.ns.cloudflare.com, buck.ns.cloudflare.com, buck.ns.cloudflare.com...)

Analysis

Hierarchy

The parent of mail.phase2plus.com is phase2plus.com.

IP Addresses

phase2plus.com resolves to four IP numbers: 2606:4700:3033::6815:4a5d, 2606:4700:3033::ac43:a803, 104.21.74.93 and 172.67.168.3.

Other host names such as store-friendly.com.hk, ltp.recwld.com, hcatwjkchbjpv.website, banacct.com and hq.recwld.com share IPs with phase2plus.com.

Name Servers

phase2plus.com is delegated to two name servers: buck.ns.cloudflare.com and summer.ns.cloudflare.com.

phase2plus.com shares the same name server setup as 1win.by, advancedmaterialsolutions.com, pinup.uz, 1xwin.bet and neos-cloud.net.

phase2plus.com at least partially shares name servers with other domains, for instance servelechsc.co.uk, edtrdai.com, worldmobile.com, b19f1fbbe7cfe80d.com and lotus365.win.

these name servers are often used in conjunction with the name servers eoin.ns.cloudflare.com.

Host names with six IP numbers:

buck.ns.cloudflare.com points to 2606:4700:58::adf5:3b4e, 2803:f800:50::6ca2:c14e, 2a06:98c1:50::ac40:214e, 108.162.193.78, 172.64.33.78 and 173.245.59.78.

summer.ns.cloudflare.com points to 2606:4700:50::a29f:2609, 2803:f800:50::6ca2:c209, 2a06:98c1:50::ac40:2209, 108.162.194.9, 162.159.38.9 and 172.64.34.9.

Mail Servers

phase2plus.com is handled by a single mail server, mx.siteprotect.com.

The mail server setup for phase2plus.com matches that of other domains, for instance operatales.com, towncartransport.com, servicestar-llc.com, elpalacio.us and quickchangeoil.com.

phase2plus.com shares some mail servers with other domains, at least in part, for instance fitceo.com.

mx.siteprotect.com points to a single IP: 64.26.60.135.

phase2plus.com - robtex.com

phase2plus.com

com

PTR for

Subdomains

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

Hierarchy

IP Addresses

Name Servers

Mail Servers

`phase2plus.com`

`com`