phantoms.group - robtex.com
phantoms.group
| DNSSEC | ⚠️ Not signed | ||||||
| A | 2606:4700:3032::ac43:8ffa🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 2606:4700:3035::6815:4753🇺🇸 Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 104.21.71.83Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| A | 172.67.143.250🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints | ||||||
| NS | johnathan.ns.cloudflare.com ⭐ | ||||||
| A | 2606:4700:58::a29f:2c2c🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnathan.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c32c🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | johnathan.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:232c🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | johnathan.ns.cloudflare.com | ||||||
| A | 108.162.195.44🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnathan.ns.cloudflare.com | ||||||
| A | 162.159.44.44Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnathan.ns.cloudflare.com | ||||||
| A | 172.64.35.44🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | johnathan.ns.cloudflare.com | ||||||
| NS | lily.ns.cloudflare.com | ||||||
| A | 2606:4700:50::adf5:3a82🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | lily.ns.cloudflare.com | ||||||
| A | 2803:f800:50::6ca2:c082🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L | ||||||
| PTR | lily.ns.cloudflare.com | ||||||
| A | 2a06:98c1:50::ac40:2082🇺🇸 Cloudflare2a06:98c1:50::/45 | ||||||
| PTR | lily.ns.cloudflare.com | ||||||
| A | 108.162.192.130🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | lily.ns.cloudflare.com | ||||||
| A | 172.64.32.130🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | lily.ns.cloudflare.com | ||||||
| A | 173.245.58.130🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US | ||||||
| PTR | lily.ns.cloudflare.com | ||||||
| HTTPS | HTTP/3, HTTP/2 ✓ hints match | ||||||
| IPv4 hints | 104.21.71.83, 172.67.143.250 | ||||||
| IPv6 hints | 2606:4700:3032::ac43:8ffa, 2606:4700:3035::6815:4753 | ||||||
| ECH | X25519, HKDF-SHA256 + AES-128-GCM draft, id=48, name=cloudflare-ech.com | ||||||
| SOA | johnathan.ns.cloudflare.comdns@cloudflare.com serial=2401844340 | ||||||
group
| DNSSEC | 🔒 Signed (DS record present) | ||||||
| NS | v0n0.nic.group ⭐ | ||||||
| NS | v0n1.nic.group | ||||||
| NS | v0n2.nic.group | ||||||
| NS | v0n3.nic.group | ||||||
| NS | v2n0.nic.group | ||||||
| NS | v2n1.nic.group | ||||||
| SOA | v0n0.nic.grouphostmaster@donuts.email serial=1778757441 | ||||||
Same first word
Similar names
DNS History
6 records (6 active, 0 former)
●NSjohnathan.ns.cloudflare.com2026-04-14 → 2026-05-14 · 2 obs
● 2026-05-14 11:57:38
●NSlily.ns.cloudflare.com2026-04-14 → 2026-05-14 · 2 obs
● 2026-05-14 11:57:38
●A104.21.71.832026-04-14 → 2026-05-14 · 2 obs
● 2026-05-14 11:57:38
●A172.67.143.2502026-04-14 → 2026-05-14 · 2 obs
● 2026-05-14 11:57:38
●A2606:4700:3032::ac43:8ffa2026-04-14 → 2026-05-14 · 2 obs
● 2026-05-14 11:57:38
●A2606:4700:3035::6815:47532026-04-14 → 2026-05-14 · 2 obs
● 2026-05-14 11:57:38
🔍 DNS Trace
📋 Delegation Chain
| Zone | Nameservers | Glue |
|---|---|---|
| group | v2n0.nic.group, v0n1.nic.group, v0n2.nic.group, v0n0.nic.group... | 12 records |
| phantoms.group | lily.ns.cloudflare.com, johnathan.ns.cloudflare.com | - |
✅ Authoritative Response
Server:172.64.32.130
NS records: lily.ns.cloudflare.com, johnathan.ns.cloudflare.com
🔒 DNSSEC Status
⚠️ Insecure (no DNSSEC)
No DS record for phantoms.group (unsigned zone)
⏱️ Timing
Total: 314ms | Queries: -
📄 Records
| Type | Count | Sample Data |
|---|---|---|
| A | 2 | 172.67.143.250, 104.21.71.83 |
| AAAA | 2 | 2606:4700:3035::6815:4753, 2606:4700:3032::ac43:8ffa |
| NS | 2 | johnathan.ns.cloudflare.com, lily.ns.cloudflare.com |
| HTTPS | 1 | {"priority":1,"target":".","alpn":["h3", |
| SOA | 1 | johnathan.ns.cloudflare.com dns.cloudfla |
📌 Glue Records Collected
Total: 12
In-bailiwick: 12 (v2n1.nic.group, v2n0.nic.group, v0n3.nic.group...)
Analysis
IP Addresses
phantoms.group maps to four IP numbers: 2606:4700:3032::ac43:8ffa, 2606:4700:3035::6815:4753, 104.21.71.83 and 172.67.143.250.
Other host names, for instance ogufihe.top, kasbinoo.com, deyaloqirusanalytics.sbs, www.zyfefiy.com and magecards.co.uk share IP numbers with phantoms.group.
Name Servers
Two name servers johnathan.ns.cloudflare.com and lily.ns.cloudflare.com are delegated to phantoms.group.
phantoms.group uses the same name server configuration as other domains such as dimsushi.com.ua, zoom-invite.com and alibabaacademy.com.
phantoms.group at least partially shares name servers with other domains such as aumeritvetch.com, mumblio.com, atlantacosmeticurology.com, plumerre.com and tribal.poker.
These name servers are commonly used alongside ian.ns.cloudflare.com, emely.ns.cloudflare.com and mina.ns.cloudflare.com.
Host names with six IP numbers: Host name johnathan.ns.cloudflare.com points to 2606:4700:58::a29f:2c2c, 2803:f800:50::6ca2:c32c, 2a06:98c1:50::ac40:232c, 108.162.195.44, 162.159.44.44 and 172.64.35.44; host name lily.ns.cloudflare.com points to 2606:4700:50::adf5:3a82, 2803:f800:50::6ca2:c082, 2a06:98c1:50::ac40:2082, 108.162.192.130, 172.64.32.130 and 173.245.58.130.