`thunderbloom-phantom.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:5f95^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3035::ac43:9182^{🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.95.149^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.145.130^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`lia.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3ab9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lia.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0b9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`lia.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20b9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`lia.ns.cloudflare.com`
		A	108.162.192.185^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lia.ns.cloudflare.com`
		A	172.64.32.185^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
		A	173.245.58.185^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`lia.ns.cloudflare.com`
NS	`terry.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bed^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1ed^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`terry.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21ed^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`terry.ns.cloudflare.com`
		A	108.162.193.237^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
		A	172.64.33.237^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
		A	173.245.59.237^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`terry.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.95.149, 172.67.145.130
		IPv6 hints	2606:4700:3033::6815:5f95, 2606:4700:3035::ac43:9182
SOA	`lia.ns.cloudflare.com`dns@cloudflare.com serial=2409195132

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784209892

⚠️ On DNS blocklist: tif

Same first word

thunderbloom-phantom.com

DNS History

8 records (6 active, 2 former)

●NSlia.ns.cloudflare.com2026-04-17 → 2026-07-16 · 2 obs

● 2026-04-17 22:25:48
● 2026-07-16 14:02:16

●NSterry.ns.cloudflare.com2026-04-17 → 2026-07-16 · 2 obs

● 2026-04-17 22:25:48
● 2026-07-16 14:02:16

●A104.21.95.1492026-04-17 → 2026-07-16 · 2 obs

● 2026-04-17 22:25:48
● 2026-07-16 14:02:16

●A172.67.145.1302026-04-17 → 2026-07-16 · 2 obs

● 2026-04-17 22:25:48
● 2026-07-16 14:02:16

○A2606:4700:3031::ac43:91822026-04-17 → 2026-06-18 · 4 obs

● 2026-04-17 22:25:48
● 2026-06-18 05:01:08
○ 2026-06-28 02:52:48
○ 2026-07-16 14:02:16

●A2606:4700:3033::6815:5f952026-06-28 → 2026-07-16 · 3 obs

○ 2026-06-18 05:01:08
● 2026-06-28 02:52:48
● 2026-07-16 14:02:16

○A2606:4700:3035::6815:5f952026-04-17 → 2026-06-18 · 4 obs

● 2026-04-17 22:25:48
● 2026-06-18 05:01:08
○ 2026-06-28 02:52:48
○ 2026-07-16 14:02:16

●A2606:4700:3035::ac43:91822026-06-28 → 2026-07-16 · 3 obs

○ 2026-06-18 05:01:08
● 2026-06-28 02:52:48
● 2026-07-16 14:02:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, f.gtld-servers.net, c.gtld-servers.net, a.gtld-servers.net...	-
thunderbloom-phantom.com	terry.ns.cloudflare.com, lia.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.237

NS records: terry.ns.cloudflare.com, lia.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for thunderbloom-phantom.com (unsigned zone)

⏱️ Timing

Total: 207ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.145.130, 104.21.95.149`
AAAA	2	`2606:4700:3035::ac43:9182, 2606:4700:3033::6815:5f95`
NS	2	`lia.ns.cloudflare.com, terry.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`lia.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (terry.ns.cloudflare.com, terry.ns.cloudflare.com, terry.ns.cloudflare.com...)

Analysis

IP Addresses

thunderbloom-phantom.com points to the four IP addresses 104.21.95.149, 172.67.145.130, 2606:4700:3033::6815:5f95 and 2606:4700:3035::ac43:9182.

lotus11.in, www.eptk.ee, jizhong.plus plus two other host names have IP numbers in common with thunderbloom-phantom.com.

Name Servers

thunderbloom-phantom.com is delegated to two name servers: lia.ns.cloudflare.com and terry.ns.cloudflare.com.

The name server configuration of thunderbloom-phantom.com is shared with other domains, for instance okodia.fr, ourexpress.sg, aimsis.com and two others.

The name servers of thunderbloom-phantom.com overlap at least partially with those of other domains — among them girlfoliocash.com, colorpicker.dev, sugarharmony.us and two more.

Hosts with 6 IP addresses each:

lia.ns.cloudflare.com resolves to 108.162.192.185, 172.64.32.185, 173.245.58.185 and 3 other IP addresses.

terry.ns.cloudflare.com resolves to 108.162.193.237, 172.64.33.237, 173.245.59.237 and 3 other IP addresses.

thunderbloom-phantom.com - robtex.com