🛡️Domain Reputation CheckBlocklist, phishing & malware status→

`phantomtools.dev`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:393e^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:bd5d^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.57.62^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.189.93^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`fiona.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3a9d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fiona.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c09d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`fiona.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:209d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`fiona.ns.cloudflare.com`
		A	108.162.192.157^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fiona.ns.cloudflare.com`
		A	172.64.32.157^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fiona.ns.cloudflare.com`
		A	173.245.58.157^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`fiona.ns.cloudflare.com`
NS	`michael.ns.cloudflare.com`
		A	2606:4700:58::a29f:2c0c^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c30c^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`michael.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:230c^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`michael.ns.cloudflare.com`
		A	108.162.195.12^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
		A	162.159.44.12^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
		A	172.64.35.12^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`michael.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`google-site-verification=ZyytYG__w45aUmtGNAETdseEZCijM6EuNOcL0JH1Gt4`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.57.62, 172.67.189.93
		IPv6 hints	2606:4700:3034::6815:393e, 2606:4700:3037::ac43:bd5d
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=180, name=cloudflare-ech.com
SOA	`fiona.ns.cloudflare.com`dns@cloudflare.com serial=2415557501

`dev`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns-tld1.charlestonroadregistry.com` ⭐
	NS	`ns-tld2.charlestonroadregistry.com`
	NS	`ns-tld3.charlestonroadregistry.com`
	NS	`ns-tld4.charlestonroadregistry.com`
	NS	`ns-tld5.charlestonroadregistry.com`
	SOA	`ns-tld1.charlestonroadregistry.com`cloud-dns-hostmaster@google.com serial=1

🔒 HSTS Preload (+subdomains)

Same first word

phantomtools.dev

phantomtools.cc

phantomtools.online

phantomtools.xyz

phantomtools.cfd

phantomtools.de

Similar names

lamontphotos.com

thomasploton.fr

Previous names

Next names

DNS History

15 records (11 active, 4 former)

●NSfiona.ns.cloudflare.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●NSmichael.ns.cloudflare.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●MXeforward1.registrar-servers.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●MXeforward2.registrar-servers.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●MXeforward3.registrar-servers.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●MXeforward4.registrar-servers.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●MXeforward5.registrar-servers.com2026-09-18 → 2026-09-24 · 2 obs

● 2026-09-18 17:16:26
● 2026-09-24 13:04:38

●A104.21.57.622026-09-23 → 2026-09-24 · 3 obs

○ 2026-09-18 17:16:26
● 2026-09-23 03:00:46
● 2026-09-24 13:04:38

●A172.67.189.932026-09-23 → 2026-09-24 · 3 obs

○ 2026-09-18 17:16:26
● 2026-09-23 03:00:46
● 2026-09-24 13:04:38

○A188.114.96.02026-09-18 → 2026-09-18 · 3 obs

● 2026-09-18 17:16:26
○ 2026-09-23 03:00:46
○ 2026-09-24 13:04:38

○A188.114.97.02026-09-18 → 2026-09-18 · 3 obs

● 2026-09-18 17:16:26
○ 2026-09-23 03:00:46
○ 2026-09-24 13:04:38

●A2606:4700:3034::6815:393e2026-09-23 → 2026-09-24 · 3 obs

○ 2026-09-18 17:16:26
● 2026-09-23 03:00:46
● 2026-09-24 13:04:38

●A2606:4700:3037::ac43:bd5d2026-09-23 → 2026-09-24 · 3 obs

○ 2026-09-18 17:16:26
● 2026-09-23 03:00:46
● 2026-09-24 13:04:38

○A2a06:98c1:3120::2026-09-18 → 2026-09-18 · 3 obs

● 2026-09-18 17:16:26
○ 2026-09-23 03:00:46
○ 2026-09-24 13:04:38

○A2a06:98c1:3121::2026-09-18 → 2026-09-18 · 3 obs

● 2026-09-18 17:16:26
○ 2026-09-23 03:00:46
○ 2026-09-24 13:04:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
dev	ns-tld1.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...	-
phantomtools.dev	michael.ns.cloudflare.com, fiona.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.192.157

NS records: michael.ns.cloudflare.com, fiona.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phantomtools.dev (unsigned zone)

⏱️ Timing

Total: 814ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.189.93, 104.21.57.62`
AAAA	2	`2606:4700:3034::6815:393e, 2606:4700:3037::ac43:bd5d`
NS	2	`fiona.ns.cloudflare.com, michael.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	2	`google-site-verification=ZyytYG__w45aUmt, v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`fiona.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

phantomtools.dev points to the four IP addresses 104.21.57.62, 172.67.189.93, 2606:4700:3034::6815:393e and 2606:4700:3037::ac43:bd5d.

soujpa.in, thing.shop, wordpresshost.com and two other host names share IP numbers with phantomtools.dev.

Name Servers

phantomtools.dev uses two name servers for its delegation: fiona.ns.cloudflare.com and michael.ns.cloudflare.com.

phantomtools.dev uses the same name servers as several other domains — among them listurbo.com, serralafayette.com, fvz0195i89.workers.dev and two more.

The name servers of phantomtools.dev overlap at least partially with those of other domains — among them mplevrs.de, arash1995.workers.dev, lakeridgewealthgroup.com and two more.

Hostnames that resolve to 6 IP addresses:

Hostname fiona.ns.cloudflare.com directs to 108.162.192.157, 172.64.32.157 and 173.245.58.157 along with 3 other IP addresses.

Hostname michael.ns.cloudflare.com directs to 108.162.195.12, 162.159.44.12 and 172.64.35.12 along with 3 other IP addresses.

Mail Servers

phantomtools.dev has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

phantomtools.dev has at least partial mail server overlap with other domains such as lexfiscalconsulting.com, sablesend.io, lanagan.info and two more.

The mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com are commonly paired with these mail servers.

Hosts with just one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.