phantom.express - robtex.com
phantom.express
| DNSSEC | ⚠️ Not signed | ||||||
| A | 2606:4700:3030::6815:3797🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 2606:4700:3033::ac43:952d🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 104.21.55.151Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 172.67.149.45🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| NS | anastasia.ns.cloudflare.com ⭐ | ||||||
| A | 2606:4700:50::a29f:26e3🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | anastasia.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c2e3🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | anastasia.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:22e3🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | anastasia.ns.cloudflare.com | ||||||
| A | 108.162.194.227🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | anastasia.ns.cloudflare.com | ||||||
| A | 162.159.38.227Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | anastasia.ns.cloudflare.com | ||||||
| A | 172.64.34.227🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | anastasia.ns.cloudflare.com | ||||||
| NS | armando.ns.cloudflare.com | ||||||
| A | 2606:4700:58::a29f:2ce1🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | armando.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c3e1🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | armando.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:23e1🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | armando.ns.cloudflare.com | ||||||
| A | 108.162.195.225🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | armando.ns.cloudflare.com | ||||||
| A | 162.159.44.225Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | armando.ns.cloudflare.com | ||||||
| A | 172.64.35.225🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | armando.ns.cloudflare.com | ||||||
| HTTPS | HTTP/3, HTTP/2 ✓ hints match | ||||||
| IPv4 hints | 104.21.55.151, 172.67.149.45 | ||||||
| IPv6 hints | 2606:4700:3030::6815:3797, 2606:4700:3033::ac43:952d | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=85, name=cloudflare-ech.com | ||||||
| SOA | anastasia.ns.cloudflare.comdns@cloudflare.com serial=2411253169 | ||||||
express
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.express ⭐ | ||||||
| NS | v0n1.nic.express | ||||||
| NS | v0n2.nic.express | ||||||
| NS | v0n3.nic.express | ||||||
| NS | v2n0.nic.express | ||||||
| NS | v2n1.nic.express | ||||||
| SOA | v0n0.nic.expresshostmaster@donuts.email serial=1786198619 | ||||||
Same first word
Similar names
DNS History
8 records (6 active, 2 former)
●NSanastasia.ns.cloudflare.com2026-04-21 → 2026-08-08 · 2 obs
● 2026-08-08 14:25:48
●NSarmando.ns.cloudflare.com2026-04-21 → 2026-08-08 · 2 obs
● 2026-08-08 14:25:48
●A104.21.55.1512026-04-21 → 2026-08-08 · 2 obs
● 2026-08-08 14:25:48
●A172.67.149.452026-04-21 → 2026-08-08 · 2 obs
● 2026-08-08 14:25:48
●A2606:4700:3030::6815:37972026-06-27 → 2026-08-08 · 3 obs
● 2026-06-27 16:27:00
● 2026-08-08 14:25:48
○A2606:4700:3030::ac43:952d2026-04-21 → 2026-06-10 · 4 obs
● 2026-06-10 19:31:18
○ 2026-06-27 16:27:00
○ 2026-08-08 14:25:48
○A2606:4700:3033::6815:37972026-04-21 → 2026-06-10 · 4 obs
● 2026-06-10 19:31:18
○ 2026-06-27 16:27:00
○ 2026-08-08 14:25:48
●A2606:4700:3033::ac43:952d2026-06-27 → 2026-08-08 · 3 obs
● 2026-06-27 16:27:00
● 2026-08-08 14:25:48
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| express | v0n0.nic.express, v0n1.nic.express, v0n2.nic.express, v0n3.nic.express... | 12 records |
| phantom.express | anastasia.ns.cloudflare.com, armando.ns.cloudflare.com | - |
✅ Authoritative Response
Server:162.159.38.227
NS records: anastasia.ns.cloudflare.com, armando.ns.cloudflare.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for phantom.express (unsigned zone)
⏱️ Timing
Total: 429ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 104.21.55.151, 172.67.149.45 |
| AAAA | 2 | 2606:4700:3030::6815:3797, 2606:4700:3033::ac43:952d |
| NS | 2 | anastasia.ns.cloudflare.com, armando.ns.cloudflare.com |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | anastasia.ns.cloudflare.com dns.cloudfla |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v0n0.nic.express, v0n0.nic.express, v0n1.nic.express...)
Analysis
IP Addresses
phantom.express directs to four IP numbers, which are 104.21.55.151, 172.67.149.45, 2606:4700:3030::6815:3797 and 2606:4700:3033::ac43:952d.
Additional host names — heracleswesterlo.be, www.railsfrance.org, shop.fastfan.in and two others — share IP numbers with phantom.express.
Name Servers
DNS delegation for phantom.express points to two name servers: anastasia.ns.cloudflare.com and armando.ns.cloudflare.com.
phantom.express shares its name server setup with other domains, including hitzsero.su, enkokitchen.ru, kcer.es and two others.
There is at least partial name server overlap between phantom.express and other domains — funzpoints-us.com, strategyzoo.com, shooting.org and two more among them.
These name servers are frequently paired with the name servers sima.ns.cloudflare.com, ace.ns.cloudflare.com, max.ns.cloudflare.com and two others.
Host names with 6 IP numbers:
anastasia.ns.cloudflare.com has IP addresses 108.162.194.227, 162.159.38.227 and 172.64.34.227, plus 3 other.
armando.ns.cloudflare.com has IP addresses 108.162.195.225, 162.159.44.225 and 172.64.35.225, plus 3 other.