phantom.express - robtex.com

phantom.express

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:952dπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::6815:3797πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.55.151Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.149.45πŸ‡ΊπŸ‡Έ Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSanastasia.ns.cloudflare.com ⭐
A2606:4700:50::a29f:26e3πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanastasia.ns.cloudflare.com
A2803:f800:50::6ca2:c2e3πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRanastasia.ns.cloudflare.com
A2a06:98c1:50::ac40:22e3πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRanastasia.ns.cloudflare.com
A108.162.194.227πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanastasia.ns.cloudflare.com
A162.159.38.227Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanastasia.ns.cloudflare.com
A172.64.34.227πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRanastasia.ns.cloudflare.com
NSarmando.ns.cloudflare.com
A2606:4700:58::a29f:2ce1πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRarmando.ns.cloudflare.com
A2803:f800:50::6ca2:c3e1πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRarmando.ns.cloudflare.com
A2a06:98c1:50::ac40:23e1πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRarmando.ns.cloudflare.com
A108.162.195.225πŸ‡ΊπŸ‡Έ Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRarmando.ns.cloudflare.com
A162.159.44.225Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRarmando.ns.cloudflare.com
A172.64.35.225πŸ‡ΊπŸ‡Έ Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRarmando.ns.cloudflare.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.55.151, 172.67.149.45
IPv6 hints2606:4700:3030::ac43:952d, 2606:4700:3033::6815:3797
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=115, name=cloudflare-ech.com
SOAanastasia.ns.cloudflare.comdns@cloudflare.com serial=2400340255

express

DNSSECπŸ”’ Signed (DS record present)
NSv0n0.nic.express ⭐
NSv0n1.nic.express
NSv0n2.nic.express
NSv0n3.nic.express
NSv2n0.nic.express
NSv2n1.nic.express
SOAv0n0.nic.expresshostmaster@donuts.email serial=1777015515
⚠️ On DNS blocklist: tif

Same first word

Similar names

DNS History

6 records (6 active, 0 former)

NSanastasia.ns.cloudflare.comarmando.ns.cloudflare.comA104.21.55.151172.67.149.452606:4700:3030::ac43:952d2606:4700:3033::6815:3797
●NSanastasia.ns.cloudflare.com2026-04-21 β†’ 2026-04-24 Β· 2 obs
● 2026-04-21 01:28:46
● 2026-04-24 07:56:14
●NSarmando.ns.cloudflare.com2026-04-21 β†’ 2026-04-24 Β· 2 obs
● 2026-04-21 01:28:46
● 2026-04-24 07:56:14
●A104.21.55.1512026-04-21 β†’ 2026-04-24 Β· 2 obs
● 2026-04-21 01:28:46
● 2026-04-24 07:56:14
●A172.67.149.452026-04-21 β†’ 2026-04-24 Β· 2 obs
● 2026-04-21 01:28:46
● 2026-04-24 07:56:14
●A2606:4700:3030::ac43:952d2026-04-21 β†’ 2026-04-24 Β· 2 obs
● 2026-04-21 01:28:46
● 2026-04-24 07:56:14
●A2606:4700:3033::6815:37972026-04-21 β†’ 2026-04-24 Β· 2 obs
● 2026-04-21 01:28:46
● 2026-04-24 07:56:14

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
expressv0n1.nic.express, v0n3.nic.express, v2n1.nic.express, v0n2.nic.express...12 records
phantom.expressarmando.ns.cloudflare.com, anastasia.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.195.225

NS records: armando.ns.cloudflare.com, anastasia.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for phantom.express (unsigned zone)

⏱️ Timing

Total: 439ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.149.45, 104.21.55.151
AAAA22606:4700:3033::6815:3797, 2606:4700:3030::ac43:952d
NS2anastasia.ns.cloudflare.com, armando.ns.cloudflare.com
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1anastasia.ns.cloudflare.com dns.cloudfla

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n1.nic.express, v0n1.nic.express, v0n3.nic.express...)

Analysis

IP Addresses

phantom.express points to four IP numbers: 2606:4700:3030::ac43:952d, 2606:4700:3033::6815:3797, 104.21.55.151 and 172.67.149.45.

Other host names including heracleswesterlo.be, www.railsfrance.org, electricteapot.info, frenchstreaming.co and xxysj.com share IP numbers with phantom.express.

Name Servers

phantom.express's delegation uses two name servers, anastasia.ns.cloudflare.com and armando.ns.cloudflare.com.

phantom.express shares the same name server setup as other domains, for example hitzsero.su, enkokitchen.ru, kcer.es, amazintop.online and linx.pro.

phantom.express at least partially shares name servers with other domains, including funzpoints-us.com, 1155975.com, strategyzoo.com, shooting.org and chorki365.com.

These name servers are commonly used with ines.ns.cloudflare.com, max.ns.cloudflare.com, harleigh.ns.cloudflare.com, yichun.ns.cloudflare.com, ace.ns.cloudflare.com, sima.ns.cloudflare.com and wesley.ns.cloudflare.com.

Host names with six IP numbers:

anastasia.ns.cloudflare.com points to: 2606:4700:50::a29f:26e3, 2803:f800:50::6ca2:c2e3, 2a06:98c1:50::ac40:22e3, 108.162.194.227, 162.159.38.227 and 172.64.34.227.

armando.ns.cloudflare.com points to: 2606:4700:58::a29f:2ce1, 2803:f800:50::6ca2:c3e1, 2a06:98c1:50::ac40:23e1, 108.162.195.225, 162.159.44.225 and 172.64.35.225.