phantom.app

Observed 2026-07-15T08:26:32.451Z (6h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Registered withNamecheap Inc.

Also usesSlackLinearNotionGoogle Search ConsoleStripe

IPv6 · 11 subdomains · crypto

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat phantom.app actually stands on - every host below is a signed observation

phantom.app

A / AAAA

104.18.35.227172.64.152.292606:4700:4407::6812:23e32a06:98c1:310d::ac40:981d

Cloudflareserves the site

samara.ns.cloudflare.comsage.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.com+1 more

Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://phantom.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time65 ms

DNS resolutionNOERROR

Redirect chain

https://phantom.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.18.35.227
172.64.152.29

AAAA 2

2606:4700:4407::6812:23e3
2a06:98c1:310d::ac40:981d

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com
10alt4.aspmx.l.google.com

TXT 20

slack-domain-verification=D4d7c7v5DoVXkglKWn7mA1tJ9V7h7K3dFt27Wj5Y
onetrust-domain-verification=ab9c826fce39406f851e99d09e253e71
apple-domain-verification=fsZXsHObevqaek15
rippling-domain-verification=53c441db797037a5
linear-domain-verification=sssprmhgzzkd
openai-domain-verification=dv-mdSDEMlekixFi3BB6sY81aJ3
notion-domain-verification=gXdAYrP0Whh1S0sdXuYNQTbcGo4AfHU86aYQKaPtcSG
postman-domain-verification=ec180d8c02ffea930a3b4e1fa4cce3e884a3440706931d48599bc02091ec2100fadbb8eb8296c226805158e817873f49b56b00d057932179c88af668122a33a5
google-site-verification=0mqizIv-j8tyrba_iHHJucesza-AxhxiouSQyFG0i6Y
nYBKf48QyY_YaIsU3mv_RWCuyJRUu-M

NS 2

samara.ns.cloudflare.com
sage.ns.cloudflare.com

SOA 1

sage.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for phantom.app. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/phantom.app">
  <img src="https://domaindrift.io/badge/phantom.app.svg"
       width="300" height="64" alt="DomainDrift signed observations for phantom.app">
</a>

Ed25519 Receipt

Receipt ID: a361ff21-7c7a-4497-9217-7997e8574c0e
Output Hash: 8dc36a571672897ae53eab4ab1127be99e90e3bef743e0e7609d0c8b85d8e3ba
Signature: ed25519:3506b4840dfd31b294d72ccf4923f4f92b3da5f0b336363cd75fdc9a17aa2ea6d3a9790af686d456a49f158dc6eb6c21d8f1740673789b5522d5e540cac3740f
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/phantom.app