Email infrastructure of phantom.direct
According to Live Direct Marketing's daily DNS scan (September 7, 2026), phantom.direct (Tranco rank #26,241) authorizes Namecheap Forwarding in SPF. Its observed DMARC policy is p=none (monitoring). Policy alone does not establish inbox or spam placement.
Last updated: .
| Mailbox provider (MX) | no MX / not classified |
|---|---|
| ESPs in SPF | Namecheap Forwarding |
| SaaS senders in SPF | none detected |
| DMARC policy | p=none |
| DMARC record | v=DMARC1; p=none; rua=mailto:dmarc@reporting.unisender.com |
| Tranco rank | #26,241 |
| Snapshot | 2026-09-07 (updated daily) |
Keep an eye on phantom.direct
Get a first health report, then meaningful changes to SPF, DMARC, MX, sampled MX PTR and blocklists. See your domain history and run a real inbox placement test from your private watchlist.
Manage existing subscriptions →How phantom.direct compares
Same daily dataset, three views: how its mailbox provider is trending, how strict DMARC is at its position in the list, and where its own policy sits among all DMARC publishers in the dataset.
DMARC enforced by list position
Policy maturity of all DMARC publishers
From observation to a useful check
- What was observed
- The DNS records and classifications in this snapshot.
- What it means
- MX describes inbound mail; SPF authorizes senders.
- What is unknown
- The actual sending IP, nested SPF dependencies, inbox placement and commercial relationships. MTA-STS, TLS-RPT and BIMI adoption are not measured.
- Next check
- Verify current DNS and test a real message: run an inbox placement test.
DNS records
Source: OpenINTEL / Tranco. Capture: 2026-09-07. These are answers from the measurement vantage point, not a live DNS check. TTL is the observed cache lifetime in seconds.
phantom.direct · A — Answer records observed
IPv4 addresses for this name. They do not identify the mail server or prove a hosting migration.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
- phantom.direct · A · TTL 300 s · 2026-09-07T01:47:19Z · AD=0
193.42.11.240
phantom.direct · AAAA — Unknown: no conclusive answer in this capture
IPv6 addresses for this name. An address record does not test service availability.
phantom.direct · NS — Answer records observed
Name servers listed for the DNS zone.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
- phantom.direct · NS · TTL 86400 s · 2026-09-07T01:47:19Z · AD=0
reese.ns.cloudflare.com. - phantom.direct · NS · TTL 86400 s · 2026-09-07T01:47:19Z · AD=0
rita.ns.cloudflare.com.
phantom.direct · MX — Unknown: no conclusive answer in this capture
Servers named to receive mail. Lower preference numbers are tried first.
phantom.direct · SOA — Answer records observed
Zone administration data. The serial is a version number, not a creation date or clock.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
- phantom.direct · SOA · TTL 1800 s · 2026-09-07T01:47:19Z · AD=0
expire=604800; minimum=1800; mname=reese.ns.cloudflare.com.; refresh=10000; retry=2400; rname=dns.cloudflare.com.; serial=2414105060
phantom.direct · CAA — Unknown: no conclusive answer in this capture
Rules for certificate issuance. These do not show whether an existing certificate is valid.
phantom.direct · TXT — Answer records observed
Text records can publish mail policies, domain-control challenges or other data.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
Domain-control verification for Google; not proof of active SaaS or mail use.
Raw TXT value
phantom.direct · TXT · TTL 300 s · 2026-09-07T01:47:19Z · AD=0"google-site-verification=FJqlz-G9lVTxhXqgRK2ZilJDJ_zvReJE2GokWhP70yw"Other TXT data; its purpose is not established by this measurement.
Raw TXT value
phantom.direct · TXT · TTL 300 s · 2026-09-07T01:47:19Z · AD=0"postal-verification oCkFLoU9GCKKrPLqAYVxXBfVXNESUY4W"SPF: authorized mail senders; not proof that mail was sent.
Raw TXT value
phantom.direct · TXT · TTL 300 s · 2026-09-07T01:47:19Z · AD=0"v=spf1 include:spf.efwd.registrar-servers.com ~all"SPF: authorized mail senders; not proof that mail was sent.
Raw TXT value
phantom.direct · TXT · TTL 300 s · 2026-09-07T01:47:19Z · AD=0"v=spf1 include:spf.unisender.ru ~all"
phantom.direct · DNSKEY — Unknown: no conclusive answer in this capture
DNSSEC key, signature or denial-of-existence data observed in this response.
phantom.direct · DS — Unknown: no conclusive answer in this capture
DNSSEC key, signature or denial-of-existence data observed in this response.
phantom.direct · CDS — Unknown: no conclusive answer in this capture
DNSSEC key, signature or denial-of-existence data observed in this response.
phantom.direct · CDNSKEY — Unknown: no conclusive answer in this capture
DNSSEC key, signature or denial-of-existence data observed in this response.
www.phantom.direct · A — Answer records observed
IPv4 addresses for this name. They do not identify the mail server or prove a hosting migration.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
- phantom.direct · A · TTL 300 s · 2026-09-07T01:47:19Z · AD=0
193.42.11.240 - www.phantom.direct · CNAME · TTL 300 s · 2026-09-07T01:47:19Z · AD=0
phantom.direct.
www.phantom.direct · AAAA — Answer records observed
IPv6 addresses for this name. An address record does not test service availability.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
- www.phantom.direct · CNAME · TTL 300 s · 2026-09-07T01:47:19Z · AD=0
phantom.direct.
_dmarc.phantom.direct · TXT — Answer records observed
Text records can publish mail policies, domain-control challenges or other data.
Query observed at: 2026-09-07T01:47:19Z.
Response code: 0.
- _dmarc.phantom.direct · CNAME · TTL 300 s · 2026-09-07T01:47:19Z · AD=0
phantom.direct.dmarc.unisender.ru. DMARC: published handling and reporting policy for authentication failures.
Raw TXT value
phantom.direct.dmarc.unisender.ru · TXT · TTL 3600 s · 2026-09-07T01:47:19Z · AD=0"v=DMARC1; p=none; rua=mailto:dmarc@reporting.unisender.com"
DNSSEC records are shown only when returned. An unset AD flag is not proof that a zone is unsigned. MTA-STS, TLS-RPT, BIMI and arbitrary DKIM selectors are not measured here; their absence cannot be inferred.
Recorded DNS history
Registry presence: first seen 2026-04-28; last seen 2026-09-07. These are appearances in our domain registry, not domain registration dates or earlier DNS values.
This history starts with saved RR captures. Provider market-share charts are aggregate context, not this domain’s DNS history. Dates identify observations; no continuous validity between them is implied. Equivalent RR states are combined, ignoring response TTL and capture-time changes. Up to 30 distinct RR states and 60 dated captures are retained within a per-domain byte limit.
Recent observed differences
2026-09-05 → 2026-09-07
phantom.direct · SOA
Before: 2026-09-05 — Answer records observed
- phantom.direct · SOA
expire=604800; minimum=1800; mname=reese.ns.cloudflare.com; refresh=10000; retry=2400; rname=dns.cloudflare.com; serial=2414021808
After: 2026-09-07 — Answer records observed
- phantom.direct · SOA
expire=604800; minimum=1800; mname=reese.ns.cloudflare.com; refresh=10000; retry=2400; rname=dns.cloudflare.com; serial=2414105060
Available saved snapshots
2026-09-07
Each query below keeps its own observation date; unknown checks may retain older values.
_dmarc.phantom.direct · TXT
2026-09-07 — Answer records observed
- _dmarc.phantom.direct · CNAME
phantom.direct.dmarc.unisender.ru DMARC: published handling and reporting policy for authentication failures.
Raw TXT value
phantom.direct.dmarc.unisender.ru · TXT"v=DMARC1; p=none; rua=mailto:dmarc@reporting.unisender.com"
phantom.direct · A
2026-09-07 — Answer records observed
- phantom.direct · A
193.42.11.240
phantom.direct · NS
2026-09-07 — Answer records observed
- phantom.direct · NS
reese.ns.cloudflare.com - phantom.direct · NS
rita.ns.cloudflare.com
phantom.direct · SOA
2026-09-07 — Answer records observed
- phantom.direct · SOA
expire=604800; minimum=1800; mname=reese.ns.cloudflare.com; refresh=10000; retry=2400; rname=dns.cloudflare.com; serial=2414105060
phantom.direct · TXT
2026-09-07 — Answer records observed
Domain-control verification for Google; not proof of active SaaS or mail use.
Raw TXT value
phantom.direct · TXT"google-site-verification=FJqlz-G9lVTxhXqgRK2ZilJDJ_zvReJE2GokWhP70yw"Other TXT data; its purpose is not established by this measurement.
Raw TXT value
phantom.direct · TXT"postal-verification oCkFLoU9GCKKrPLqAYVxXBfVXNESUY4W"SPF: authorized mail senders; not proof that mail was sent.
Raw TXT value
phantom.direct · TXT"v=spf1 include:spf.efwd.registrar-servers.com ~all"SPF: authorized mail senders; not proof that mail was sent.
Raw TXT value
phantom.direct · TXT"v=spf1 include:spf.unisender.ru ~all"
www.phantom.direct · A
2026-09-07 — Answer records observed
- phantom.direct · A
193.42.11.240 - www.phantom.direct · CNAME
phantom.direct
www.phantom.direct · AAAA
2026-09-07 — Answer records observed
- www.phantom.direct · CNAME
phantom.direct
2026-09-05
Each query below keeps its own observation date; unknown checks may retain older values.
_dmarc.phantom.direct · TXT
2026-09-05 — Answer records observed
- _dmarc.phantom.direct · CNAME
phantom.direct.dmarc.unisender.ru DMARC: published handling and reporting policy for authentication failures.
Raw TXT value
phantom.direct.dmarc.unisender.ru · TXT"v=DMARC1; p=none; rua=mailto:dmarc@reporting.unisender.com"
phantom.direct · A
2026-09-05 — Answer records observed
- phantom.direct · A
193.42.11.240
phantom.direct · NS
2026-09-05 — Answer records observed
- phantom.direct · NS
reese.ns.cloudflare.com - phantom.direct · NS
rita.ns.cloudflare.com
phantom.direct · SOA
2026-09-05 — Answer records observed
- phantom.direct · SOA
expire=604800; minimum=1800; mname=reese.ns.cloudflare.com; refresh=10000; retry=2400; rname=dns.cloudflare.com; serial=2414021808
phantom.direct · TXT
2026-09-05 — Answer records observed
Domain-control verification for Google; not proof of active SaaS or mail use.
Raw TXT value
phantom.direct · TXT"google-site-verification=FJqlz-G9lVTxhXqgRK2ZilJDJ_zvReJE2GokWhP70yw"Other TXT data; its purpose is not established by this measurement.
Raw TXT value
phantom.direct · TXT"postal-verification oCkFLoU9GCKKrPLqAYVxXBfVXNESUY4W"SPF: authorized mail senders; not proof that mail was sent.
Raw TXT value
phantom.direct · TXT"v=spf1 include:spf.efwd.registrar-servers.com ~all"SPF: authorized mail senders; not proof that mail was sent.
Raw TXT value
phantom.direct · TXT"v=spf1 include:spf.unisender.ru ~all"
www.phantom.direct · A
2026-09-05 — Answer records observed
- phantom.direct · A
193.42.11.240 - www.phantom.direct · CNAME
phantom.direct
www.phantom.direct · AAAA
2026-09-05 — Answer records observed
- www.phantom.direct · CNAME
phantom.direct
Changes to phantom.direct
No entry for this domain appears in the current public change feed. The feed is a selected sample, so this does not establish that its DNS stayed unchanged.
Start monitoring to build a history from your first check, or explore observed changes across the dataset.
SPF diagnostics
Static observations from the published SPF record. No nested include or redirect dependencies were evaluated. The actual sending IP and evaluation path are needed to assess the RFC 7208 limit of 10 DNS-dependent terms.
Modern mail security across the dataset
The required DNS labels are not queried. Adoption is unknown for this domain and for the population. Apex TXT anomalies are listed separately in the security posture report.
Where phantom.direct stands
The same snapshot cut by zone, by list position and by how alive the published policies are.
- At this list position the top three mailbox providers hold 60.1% of domains (Google Workspace, Microsoft 365, Unknown / Other).
- Across the dataset 25.1% of DMARC records are inert — policy does nothing and no reports are collected.
How to interpret these observations
MX identifies the observed inbound mailbox or gateway. SPF includes identify services authorised to send for the domain. DMARC shows the published authentication policy. The dataset currently contains 2 populated signal groups for this page.
Observed deliverability context: based on the available observations, this page describes DNS configuration only. It does not represent a complete audit of phantom.direct and does not prove that a particular message reaches the inbox or spam folder.
Frequently asked questions
What email provider does phantom.direct use?
phantom.direct has no classifiable MX record as of September 7, 2026, per Live Direct Marketing's daily Tranco top-1M scan.
What ESP does phantom.direct use?
phantom.direct authorises Namecheap Forwarding in its SPF record as of September 7, 2026.
Does phantom.direct enforce DMARC?
No — phantom.direct publishes p=none, which only monitors and does not block spoofing (as of September 7, 2026).
Related domain statistics
Nearby domains in the Tranco ranking: yourdomainprovider.net · goodfirms.co · jobs2careers.com · knmi.nl
Browse provider data · Compare historical periods · Run an inbox placement test
Data: Email infrastructure of the Tranco top-1M, daily snapshot 2026-09-07, derived from OpenINTEL forward-DNS measurements. Cite with the date — records change daily.