`win-phantom.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:2cf1^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3032::ac43:cd45^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.44.241^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.205.69^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`koa.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2cf2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c3f2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`koa.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:23f2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`koa.ns.cloudflare.com`
		A	108.162.195.242^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
		A	162.159.44.242^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
		A	172.64.35.242^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`koa.ns.cloudflare.com`
NS	`zelda.ns.cloudflare.com`
		A	2606:4700:50::adf5:3af2^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0f2^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`zelda.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20f2^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`zelda.ns.cloudflare.com`
		A	108.162.192.242^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
		A	172.64.32.242^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
		A	173.245.58.242^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zelda.ns.cloudflare.com`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.44.241, 172.67.205.69
		IPv6 hints	2606:4700:3030::6815:2cf1, 2606:4700:3032::ac43:cd45
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=73, name=cloudflare-ech.com
SOA	`koa.ns.cloudflare.com`dns@cloudflare.com serial=2399152871

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1775984962

⚠️ On DNS blocklist: tif

Same first word

win-phantom.com

DNS History

6 records (6 active, 0 former)

●NSkoa.ns.cloudflare.com2026-03-27 → 2026-04-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-04-12 09:18:44

●NSzelda.ns.cloudflare.com2026-03-27 → 2026-04-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-04-12 09:18:44

●A104.21.44.2412026-03-27 → 2026-04-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-04-12 09:18:44

●A172.67.205.692026-03-27 → 2026-04-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-04-12 09:18:44

●A2606:4700:3030::6815:2cf12026-03-27 → 2026-04-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-04-12 09:18:44

●A2606:4700:3032::ac43:cd452026-03-27 → 2026-04-12 · 2 obs

● 2026-03-27 03:45:06
● 2026-04-12 09:18:44

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	m.gtld-servers.net, d.gtld-servers.net, a.gtld-servers.net, f.gtld-servers.net...	-
win-phantom.com	zelda.ns.cloudflare.com, koa.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.195.242

NS records: zelda.ns.cloudflare.com, koa.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for win-phantom.com (unsigned zone)

⏱️ Timing

Total: 149ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.205.69, 104.21.44.241`
AAAA	2	`2606:4700:3030::6815:2cf1, 2606:4700:3032::ac43:cd45`
NS	2	`koa.ns.cloudflare.com, zelda.ns.cloudflare.com`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`koa.ns.cloudflare.com dns.cloudflare.com`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (zelda.ns.cloudflare.com, zelda.ns.cloudflare.com, zelda.ns.cloudflare.com...)

Analysis

IP Addresses

win-phantom.com refers to four IP numbers: 2606:4700:3030::6815:2cf1, 2606:4700:3032::ac43:cd45, 104.21.44.241 and 172.67.205.69.

Other host names, for instance cztongyu.com, time4popcorn.eu, hd-onl.720-hd.me, yummyanime.720-hd.me and ronktd.720-hd.me share IP numbers with win-phantom.com.

Name Servers

win-phantom.com's delegation uses two name servers: koa.ns.cloudflare.com and zelda.ns.cloudflare.com.

win-phantom.com uses the same name server setup as other domains, such as seuwin.com, abakanfasad.ru, betlua.net, font(0x616e616c)eisureparks.com and pkmnbindr.com.

win-phantom.com at least partially shares name servers with other domains, including mess.dk, teleasyhopbox.com, volmanhk.com, openhub.tv and cartoonhr.com.

These name servers are often used with rose.ns.cloudflare.com and fred.ns.cloudflare.com.

Host names with six IP numbers:

koa.ns.cloudflare.com points to 2606:4700:58::a29f:2cf2, 2803:f800:50::6ca2:c3f2, 2a06:98c1:50::ac40:23f2, 108.162.195.242, 162.159.44.242 and 172.64.35.242.

zelda.ns.cloudflare.com points to 2606:4700:50::adf5:3af2, 2803:f800:50::6ca2:c0f2, 2a06:98c1:50::ac40:20f2, 108.162.192.242, 172.64.32.242 and 173.245.58.242.

win-phantom.com - robtex.com

win-phantom.com

com

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

`win-phantom.com`

`com`