win-phantom.com - dns.ninja

`win-phantom.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::ac43:cd45^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::6815:2cf1^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.44.241^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.205.69^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`koa.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cf2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3f2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`koa.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23f2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`koa.ns.cloudflare.com`
		A	108.162.195.242^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
		A	162.159.44.242^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
		A	172.64.35.242^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
NS	`zelda.ns.cloudflare.com`
		A	2606:4700:50::adf5:3af2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0f2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`zelda.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20f2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`zelda.ns.cloudflare.com`
		A	108.162.192.242^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
		A	172.64.32.242^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
		A	173.245.58.242^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.44.241, 172.67.205.69
		IPv6 hints	2606:4700:3031::ac43:cd45, 2606:4700:3032::6815:2cf1
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=221, name=cloudflare-ech.com
SOA	`koa.ns.cloudflare.com`dns@cloudflare.com serial=2410942661

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1786531164

⚠️ On DNS blocklist: tif

Same first word

win-phantom.com

DNS History

8 records (6 active, 2 former)

●NSkoa.ns.cloudflare.com2026-03-27 → 2026-08-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-08-12 11:00:16

●NSzelda.ns.cloudflare.com2026-03-27 → 2026-08-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-08-12 11:00:16

●A104.21.44.2412026-03-27 → 2026-08-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-08-12 11:00:16

●A172.67.205.692026-03-27 → 2026-08-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-08-12 11:00:16

○A2606:4700:3030::6815:2cf12026-03-27 → 2026-05-26 · 3 obs

● 2026-03-27 03:45:06
● 2026-05-26 04:39:48
○ 2026-08-12 11:00:16

●A2606:4700:3031::ac43:cd452026-08-12 → 2026-08-12 · 2 obs

○ 2026-05-26 04:39:48
● 2026-08-12 11:00:16

●A2606:4700:3032::6815:2cf12026-08-12 → 2026-08-12 · 2 obs

○ 2026-05-26 04:39:48
● 2026-08-12 11:00:16

○A2606:4700:3032::ac43:cd452026-03-27 → 2026-05-26 · 3 obs

● 2026-03-27 03:45:06
● 2026-05-26 04:39:48
○ 2026-08-12 11:00:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net...	-
win-phantom.com	zelda.ns.cloudflare.com, koa.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.192.242

NS records: zelda.ns.cloudflare.com, koa.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for win-phantom.com (unsigned zone)

⏱️ Timing

Total: 134ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.205.69, 104.21.44.241`
AAAA	2	`2606:4700:3032::6815:2cf1, 2606:4700:3031::ac43:cd45`
NS	2	`koa.ns.cloudflare.com, zelda.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`koa.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (zelda.ns.cloudflare.com, zelda.ns.cloudflare.com, zelda.ns.cloudflare.com...)

Analysis

IP Addresses

win-phantom.com directs to four IP numbers, which are 104.21.44.241, 172.67.205.69, 2606:4700:3031::ac43:cd45 and 2606:4700:3032::6815:2cf1.

Additional host names — filmpro.720-hd.me, cztongyu.com, hd-onl.720-hd.me and two others — share IP numbers with win-phantom.com.

Name Servers

win-phantom.com is served by two delegated name servers, koa.ns.cloudflare.com and zelda.ns.cloudflare.com.

win-phantom.com shares its name server setup with other domains, including seuwin.com, 9pmbet.cc, abakanfasad.ru and two others.

There is at least partial name server overlap between win-phantom.com and other domains — mess.dk, prologinfp.work, teleasyhopbox.com and two more among them.

These name servers are routinely deployed together with the name servers rose.ns.cloudflare.com.

Host names with 6 IP numbers:

koa.ns.cloudflare.com carries IP addresses 108.162.195.242, 162.159.44.242 and 172.64.35.242, with 3 other addresses beyond those.

zelda.ns.cloudflare.com carries IP addresses 108.162.192.242, 172.64.32.242 and 173.245.58.242, with 3 other addresses beyond those.