phaetus.com - dns.ninja

`phaetus.com`

DNSSEC	⚠️ Not signed
A	23.227.38.65^{🇨🇦 Cloudflare23.227.38.0/23 Shopify 151 O'Connor Street, Ground floor Ottawa ON K2P 2L8 Canada}
		PTR	`myshopify.com`
NS	`dakota.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c4f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c34f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`dakota.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:234f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`dakota.ns.cloudflare.com`
		A	108.162.195.79^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
		A	162.159.44.79^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
		A	172.64.35.79^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`dakota.ns.cloudflare.com`
NS	`wally.ns.cloudflare.com`
		A	2606:4700:50::adf5:3aef^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0ef^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`wally.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20ef^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`wally.ns.cloudflare.com`
		A	108.162.192.239^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
		A	172.64.32.239^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
		A	173.245.58.239^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`wally.ns.cloudflare.com`
MX	`mx1.qiye.aliyun.com` ⭐
		A	47.246.137.47^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
MX	`mx2.qiye.aliyun.com`⁽¹⁰⁾
		A	47.246.136.231^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
			PTR	`cz-clare.com`
			PTR	`reachsmartdwell.com`
			PTR	`wevolt.tech`
MX	`mx3.qiye.aliyun.com`⁽¹⁵⁾
		A	47.246.136.231^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
			PTR	`cz-clare.com`
			PTR	`reachsmartdwell.com`
			PTR	`wevolt.tech`
		A	47.246.137.47^{🇺🇸 Alibaba-Cloud47.246.136.0/22 Alibaba CLoud}
TXT	`bc67849116da0003d7215424ddd5710e79f3d0b47f2c9f0d086bbdf24bc5465a`
TXT	`google-site-verification=XFRctuIApZHhTAz43tGbCqISj60fG-6qwmooVT-oUTU`
TXT	`klaviyo-site-verification=Xnpud8`
TXT	`v=spf1 include:spf.qiye.aliyun.com -all`
SOA	`dakota.ns.cloudflare.com`dns@cloudflare.com serial=2409084791

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1784819292

🦠 Blackbook: Known malware/C&C domain

Same first word

phaetus.com

Similar names

pheatus.be

sepahtu.com

hueapts.com

pheatus.com

pethaus.com.br

hepatus.com

hepatus.eu

pethaus.de

heuptas.nl

heatsup.com

pethaus.com.au

pethaus.co.nz

pseutah.com

hepatus.lt

hupsate.com

pashute.com

pethaus.com

pushtea.com

theupsa.com

pethaus.co

upheast.com

eupaths.com

pauthes.com

hepusta.com

theapus.com

pethaus.net

usepath.it

hetapus.com

pethaus.myshopify.com

DNS History

8 records (6 active, 2 former)

●NSdakota.ns.cloudflare.com2026-03-29 → 2026-07-23 · 2 obs

● 2026-03-29 09:08:30
● 2026-07-23 15:35:30

○NSdns25.hichina.com2026-03-29 → 2026-07-23 · 2 obs

○ 2026-03-29 09:08:30
○ 2026-07-23 15:35:30

○NSdns26.hichina.com2026-03-29 → 2026-07-23 · 2 obs

○ 2026-03-29 09:08:30
○ 2026-07-23 15:35:30

●NSwally.ns.cloudflare.com2026-03-29 → 2026-07-23 · 2 obs

● 2026-03-29 09:08:30
● 2026-07-23 15:35:30

●MXmx1.qiye.aliyun.com2026-03-29 → 2026-07-23 · 2 obs

● 2026-03-29 09:08:30
● 2026-07-23 15:35:30

●MXmx2.qiye.aliyun.com2026-03-29 → 2026-07-23 · 2 obs

● 2026-03-29 09:08:30
● 2026-07-23 15:35:30

●MXmx3.qiye.aliyun.com2026-03-29 → 2026-07-23 · 2 obs

● 2026-03-29 09:08:30
● 2026-07-23 15:35:30

●A23.227.38.652026-03-29 → 2026-07-23 · 2 obs

● 2026-03-29 09:08:30
● 2026-07-23 15:35:30

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net...	-
phaetus.com	wally.ns.cloudflare.com, dakota.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.239

NS records: wally.ns.cloudflare.com, dakota.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phaetus.com (unsigned zone)

⏱️ Timing

Total: 302ms | Queries: -

📄 Records

Type	Count	Sample Data
A	1	`23.227.38.65`
NS	2	`dakota.ns.cloudflare.com, wally.ns.cloudflare.com`
MX	3	`mx2.qiye.aliyun.com (pri: 10), mx3.qiye.aliyun.com (pri: 15)...`
TXT	4	`bc67849116da0003d7215424ddd5710e79f3d0b4, google-site-verification=XFRctuIApZHhTAz...`
SOA	1	`dakota.ns.cloudflare.com dns.cloudflare.`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (wally.ns.cloudflare.com, wally.ns.cloudflare.com, wally.ns.cloudflare.com...)

Analysis

IP Addresses

phaetus.com directs to one IP number, which is 23.227.38.65.

Among the host names that share IP numbers with phaetus.com are soieva.com, jeffreygreen.ca, de-base.com and two others.

Name Servers

DNS delegation for phaetus.com points to two name servers: dakota.ns.cloudflare.com and wally.ns.cloudflare.com.

phaetus.com has the same name server delegation as a number of other domains, such as lumberkingflooring.co.uk, newretrogames.ru, gametheory.online and two more.

phaetus.com has at least partial name server overlap with other domains, such as sunpanelsstore.com, weaha.org, commaltd.com and two others.

It is common to find these name servers paired with the name servers thomas.ns.cloudflare.com, nadia.ns.cloudflare.com, clint.ns.cloudflare.com and bristol.ns.cloudflare.com.

Host names resolving to 6 IP numbers:

dakota.ns.cloudflare.com has IP addresses 108.162.195.79, 162.159.44.79 and 172.64.35.79, plus 3 other.

wally.ns.cloudflare.com has IP addresses 108.162.192.239, 172.64.32.239 and 173.245.58.239, plus 3 other.

Mail Servers

phaetus.com has three mail servers: mx1.qiye.aliyun.com, mx2.qiye.aliyun.com and mx3.qiye.aliyun.com.

phaetus.com shares at least some of its mail servers with other domains — for example 90x.cn, lixinart.com, agc-cert.com and two more.

These mail servers tend to be used in combination with the mail servers mxn.mxhichina.com and mxw.mxhichina.com.

Hosts with two IP numbers each:

mx3.qiye.aliyun.com has two IP addresses: 47.246.136.231 and 47.246.137.47.

Hosts that resolve to one IP address:

mx1.qiye.aliyun.com directs to 47.246.137.47.

mx2.qiye.aliyun.com directs to 47.246.136.231.

Host names pointing to 47.246.136.231 IP addresses: mx3.qiye.aliyun.com and mx2.qiye.aliyun.com.

Host names pointing to 47.246.137.47 IP addresses: mx3.qiye.aliyun.com and mx1.qiye.aliyun.com.