phantom.dev
Monitoring only
registrar-servers.com
DNS, hosting, email and name analysis are live. Registration data, the home-page probe, the archive lookup and the other-TLD check are being fetched in the background; this page refreshes itself in a few seconds.
Registration
Fetching the registry record…
DNS
| Type | Value |
|---|---|
| NS | sage.ns.cloudflare.com · samara.ns.cloudflare.com |
| MX | 10 eforward1.registrar-servers.com |
| MX | 10 eforward2.registrar-servers.com |
| MX | 10 eforward3.registrar-servers.com |
| MX | 15 eforward4.registrar-servers.com |
| MX | 20 eforward5.registrar-servers.com |
| TXT | google-site-verification=IQjD6Q_P1uso6_6h5vVIRcuQ2_mH7QxQ2hdqkOOxcQ8 |
| TXT | v=spf1 include:spf.efwd.registrar-servers.com ~all |
| SOA | sage.ns.cloudflare.com dns.cloudflare.com serial 2417796129 |
Certificates
- First certificate seen
- 2026-10-13 20:37 UTC since dot.bi started watching
- Last certificate seen
- 2026-10-18 08:04 UTC
- Certificates observed
- 65
- Issuers
- Google Trust Services
Hosting
No address record, so there is nothing to locate.
Web
Probing the home page…
Monitoring only DMARC is set to p=none: spoofed mail is reported but still delivered.
- Provider
- registrar-servers.com
- SPF
- present all: softfail
- DMARC
- p=none reports on
- DKIM
- not found common selectors only
Age
- First capture
- looking up…
- Years archived
- —
- Registry created
- —
- In dot.bi since
- 2026-10-13 · Certificate Transparency
Name analysis
Same name, other TLDs
Checking the same name on other TLDs…
History observed by dot.bi
A record changed: 104.26.8.124, 104.26.9.124, 172.67.72.42 → —
First observed by dot.bi · source: ct