phantomwork.dev - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status→

phantomwork.dev

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:b403🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3037::6815:1fdb🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.31.219Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.180.3🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NScartman.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2cdb🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcartman.ns.cloudflare.com
A2803:f800:50::6ca2:c3db🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcartman.ns.cloudflare.com
A2a06:98c1:50::ac40:23db🇺🇸 Cloudflare2a06:98c1:50::/45
PTRcartman.ns.cloudflare.com
A108.162.195.219🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcartman.ns.cloudflare.com
A162.159.44.219Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcartman.ns.cloudflare.com
A172.64.35.219🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcartman.ns.cloudflare.com
NSprincess.ns.cloudflare.com
A2606:4700:50::a29f:2611🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
A2803:f800:50::6ca2:c211🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRprincess.ns.cloudflare.com
A2a06:98c1:50::ac40:2211🇺🇸 Cloudflare2a06:98c1:50::/45
PTRprincess.ns.cloudflare.com
A108.162.194.17🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
A162.159.38.17Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
A172.64.34.17🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRprincess.ns.cloudflare.com
MXmx1.forwardemail.net ⭐
A2604:a880:2:d0::306:1🇺🇸 DIGITALOCEAN2604:a880:2::/48 DigitalOcean
PTRmx1.forwardemail.net
A2a02:6ea0:d71e::2🇺🇸 CDN772a02:6ea0:d700::/40 Denver IPv6
PTRmx1.forwardemail.net
A121.127.44.56🇺🇸 CDN77121.127.44.0/24 Denver
PTRmx1.forwardemail.net
A138.197.213.185🇺🇸 DIGITALOCEAN138.197.208.0/20 DigitalOcean
PTRmx1.forwardemail.net
TXTforward-email=help:studiosphantomwork@gmail.com,admin:studiosphantomwork@gmai...
TXTgoogle-site-verification=ZUYyMKKE0zv7Jl_f9YXLl5_dc-wle6tZpNe-aNeBXX8
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.31.219, 172.67.180.3
IPv6 hints2606:4700:3033::ac43:b403, 2606:4700:3037::6815:1fdb
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=103, name=cloudflare-ech.com
SOAcartman.ns.cloudflare.comdns@cloudflare.com serial=2415449962

dev

DNSSEC🔒 Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=1
🔒 HSTS Preload (+subdomains)

Same first word

phantomwork.xyz
phantomwork.ai
phantomwork.co
phantomwork.dev
phantomwork.workers.dev
phantomwork.group

Similar names

workphantom.xyz
workphantom.com

Previous names

phantomlab.dev
phantomlabs.dev
phantomline.dev
phantomlord.dev
phantomoji.dev
phantompane.dev
phantompresence.dev
phantompress.dev
phantomproc.dev
phantomproperties.dev
phantomserver.dev
phantomsfury.dev
phantomsignal.dev
phantomsoftware.dev
phantomstack.dev
phantomsys.dev
phantomtools.dev
phantomui.dev
phantomvector.dev
phantomwaves.dev

Next names

phantomworks.dev
phantomx.dev
phantomzero.dev
phantsec.dev
phanvanthong.dev
phao.dev
phaopong.dev
pharaday.dev
pharaion.dev
pharao.dev
pharaoh.dev
pharaon.dev
pharaonic.dev
pharbison.dev
pharci.dev
phare.dev
pharel.dev
phareon.dev
pharlux.dev
pharm-eval.dev

DNS History

7 records (7 active, 0 former)

NScartman.ns.cloudflare.comprincess.ns.cloudflare.comMXmx1.forwardemail.netA104.21.31.219172.67.180.32606:4700:3033::ac43:b4032606:4700:3037::6815:1fdb
●NScartman.ns.cloudflare.com2026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04
●NSprincess.ns.cloudflare.com2026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04
●MXmx1.forwardemail.net2026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04
●A104.21.31.2192026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04
●A172.67.180.32026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04
●A2606:4700:3033::ac43:b4032026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04
●A2606:4700:3037::6815:1fdb2026-08-22 → 2026-09-29 · 2 obs
● 2026-08-22 08:06:46
● 2026-09-29 01:12:04

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
devns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
phantomwork.devcartman.ns.cloudflare.com, princess.ns.cloudflare.com-

✅ Authoritative Response

Server:108.162.195.219

NS records: cartman.ns.cloudflare.com, princess.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phantomwork.dev (unsigned zone)

⏱️ Timing

Total: 1009ms | Queries: -

📄 Records

TypeCountSample Data
A2172.67.180.3, 104.21.31.219
AAAA22606:4700:3033::ac43:b403, 2606:4700:3037::6815:1fdb
NS2cartman.ns.cloudflare.com, princess.ns.cloudflare.com
MX1mx1.forwardemail.net (pri: 10)
TXT2forward-email=help:studiosphantomwork@gm, google-site-verification=ZUYyMKKE0zv7Jl_
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1cartman.ns.cloudflare.com dns.cloudflare

Analysis

IP Addresses

phantomwork.dev directs to four IP numbers, which are 104.21.31.219, 172.67.180.3, 2606:4700:3033::ac43:b403 and 2606:4700:3037::6815:1fdb.

ultra.horse, zimubaba.xyz, revgenrock.com plus two other host names have IP numbers in common with phantomwork.dev.

Name Servers

phantomwork.dev is served by two delegated name servers, cartman.ns.cloudflare.com and princess.ns.cloudflare.com.

The name server configuration of phantomwork.dev is shared with other domains, for instance puritea.co.uk, chartly.top, teacher-web-5tc.pages.dev and two others.

The name servers of phantomwork.dev overlap at least partially with those of other domains — among them beyondlegacysoftware.com, showman.eu.org, steadymedspharmacy.shop and two more.

These name servers commonly appear alongside the name servers nikon.ns.cloudflare.com and malavika.ns.cloudflare.com.

Hosts with 6 IP addresses each:

cartman.ns.cloudflare.com carries IP addresses 108.162.195.219, 162.159.44.219 and 172.64.35.219, with 3 other addresses beyond those.

princess.ns.cloudflare.com carries IP addresses 108.162.194.17, 162.159.38.17 and 172.64.34.17, with 3 other addresses beyond those.

Mail Servers

phantomwork.dev uses one mail server — mx1.forwardemail.net.

The mail server setup of phantomwork.dev matches that of other domains such as bodymindmore.com, sschoenwiese.de, moonface.digital and two others.

At least some of the mail servers used by phantomwork.dev are shared with other domains: hoodsmart.org, jdh.co.in, grandrapidscrochetgroup.com and two others among them.

These mail servers tend to be used in conjunction with the mail servers mx2.forwardemail.net.

mx1.forwardemail.net points to four IP addresses: 121.127.44.56, 138.197.213.185, 2604:a880:2:d0::306:1 and 2a02:6ea0:d71e::2.