phantomserver.dev - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

phantomserver.dev

DNSSEC⚠️ Not signed
A2606:4700:3032::ac43:cdd1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::6815:4540πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.69.64Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.205.209πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSbenedict.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2ccdπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbenedict.ns.cloudflare.com
A2803:f800:50::6ca2:c3cdπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRbenedict.ns.cloudflare.com
A2a06:98c1:50::ac40:23cdπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRbenedict.ns.cloudflare.com
A108.162.195.205πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbenedict.ns.cloudflare.com
A162.159.44.205Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbenedict.ns.cloudflare.com
A172.64.35.205πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRbenedict.ns.cloudflare.com
NSraquel.ns.cloudflare.com
A2606:4700:50::a29f:26d2πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRraquel.ns.cloudflare.com
A2803:f800:50::6ca2:c2d2πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRraquel.ns.cloudflare.com
A2a06:98c1:50::ac40:22d2πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRraquel.ns.cloudflare.com
A108.162.194.210πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRraquel.ns.cloudflare.com
A162.159.38.210Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRraquel.ns.cloudflare.com
A172.64.34.210πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRraquel.ns.cloudflare.com
TXTv=spf1 -all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.69.64, 172.67.205.209
IPv6 hints2606:4700:3032::ac43:cdd1, 2606:4700:3033::6815:4540
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=48, name=cloudflare-ech.com
SOAbenedict.ns.cloudflare.comdns@cloudflare.com serial=2412166977

dev

DNSSECπŸ”’ Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
πŸ”’ HSTS Preload (+subdomains)

Same first word

Similar names

Previous names

Next names

DNS History

6 records (6 active, 0 former)

NSbenedict.ns.cloudflare.comraquel.ns.cloudflare.comA104.21.69.64172.67.205.2092606:4700:3032::ac43:cdd12606:4700:3033::6815:4540
●NSbenedict.ns.cloudflare.com2026-09-05 β†’ 2026-10-03 Β· 2 obs
● 2026-09-05 18:57:52
● 2026-10-03 20:30:32
●NSraquel.ns.cloudflare.com2026-09-05 β†’ 2026-10-03 Β· 2 obs
● 2026-09-05 18:57:52
● 2026-10-03 20:30:32
●A104.21.69.642026-09-05 β†’ 2026-10-03 Β· 2 obs
● 2026-09-05 18:57:52
● 2026-10-03 20:30:32
●A172.67.205.2092026-09-05 β†’ 2026-10-03 Β· 2 obs
● 2026-09-05 18:57:52
● 2026-10-03 20:30:32
●A2606:4700:3032::ac43:cdd12026-09-05 β†’ 2026-10-03 Β· 2 obs
● 2026-09-05 18:57:52
● 2026-10-03 20:30:32
●A2606:4700:3033::6815:45402026-09-05 β†’ 2026-10-03 Β· 2 obs
● 2026-09-05 18:57:52
● 2026-10-03 20:30:32

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
devns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
phantomserver.devraquel.ns.cloudflare.com, benedict.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.205

NS records: raquel.ns.cloudflare.com, benedict.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phantomserver.dev (unsigned zone)

⏱️ Timing

Total: 981ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.69.64, 172.67.205.209
AAAA22606:4700:3033::6815:4540, 2606:4700:3032::ac43:cdd1
NS2benedict.ns.cloudflare.com, raquel.ns.cloudflare.com
TXT1v=spf1 -all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1benedict.ns.cloudflare.com dns.cloudflar

Analysis

IP Addresses

phantomserver.dev points to the four IP addresses 104.21.69.64, 172.67.205.209, 2606:4700:3032::ac43:cdd1 and 2606:4700:3033::6815:4540.

bunnywork.co.uk, somayman.net, mama.my plus two other host names have IP numbers in common with phantomserver.dev.

Name Servers

phantomserver.dev has two authoritative name servers β€” benedict.ns.cloudflare.com and raquel.ns.cloudflare.com.

The name server configuration of phantomserver.dev is shared with other domains, for instance mgclpf.workers.dev, alertainvest.com.br, x-dragon-arabic.pages.dev and two others.

There is at least partial name server overlap between phantomserver.dev and other domains β€” prompt-ai-work.pages.dev, uab6b3dm5l.workers.dev, stellarionis.com and two more among them.

These name servers are routinely deployed together with the name servers thea.ns.cloudflare.com.

Hosts with 6 IP addresses each:

benedict.ns.cloudflare.com points to 108.162.195.205, 162.159.44.205, 172.64.35.205 and 3 other IP addresses.

raquel.ns.cloudflare.com points to 108.162.194.210, 162.159.38.210, 172.64.34.210 and 3 other IP addresses.