phantom.com

Observed 2026-07-13T00:42:10.493000515+00:00 (11h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byGoogle Trust Services

Also usesGoogle Search Console

IPv6 · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat phantom.com actually stands on - every host below is a signed observation

phantom.com

A / AAAA

104.18.40.111172.64.147.1452606:4700:4408::ac40:93912a06:98c1:3104::6812:286f

Cloudflareserves the site

sage.ns.cloudflare.comsamara.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

phantom.com

Google Trust Servicesissued its certificate

DNS Records

A 2

104.18.40.111
172.64.147.145

AAAA 2

2606:4700:4408::ac40:9391
2a06:98c1:3104::6812:286f

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 10

TEutz-x9yt0wIa30g2TwPdWbKTBZFt0
google-gws-recovery-domain-verification=55737399
google-site-verification=u531DfFX9kh0p2-HHo99GvkxW9yhDuzsiL887Dv4Rrg
google-site-verification=uv7Ni0FJnJxz-_4rzuLWokXbyFxv9rgzZr2ZgKYPdMs
google-site-verification=xTstv0lMG4Y52CpdRGKW66MiozVZu9Noop399qOhjMo
google-site-verification=yS9d5fbODO5GXfSpdog6QXB37OmhRgL7Wk83rvEjxlM
google-site-verification=zZjb5k7Ka4AcDoS2z4GP-MXgL56QY7yshcf7MRH2qcQ
v=spf1 include:_spf.google.com include:amazonses.com include:sendgrid.net -all
v=DMARC1;p=reject;pct=100;rua=mailto:0d7fd79b732f4bf6a2c634b4ad5cc1e0@dmarc-reports.cloudflare.net, mailto:dmarc@5pu6xbrx.uriports.com;ruf=mailto:dmarc@5pu6xbrx.uriports.com;ri=86400;aspf=r;adkim=r;fo=1
v=BIMI1; l=https://vmc.digicert.com/b20f811a-26bd-4b42-a3dc-c8313d4a8b57.svg; a=https://vmc.digicert.com/b20f811a-26bd-4b42-a3dc-c8313d4a8b57.pem

NS 2

sage.ns.cloudflare.com
samara.ns.cloudflare.com

SOA 1

sage.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common Name	Issuer	Expires
`phantom.com`	C=US, O=Google Trust Services, CN=WE1	Fri, 18 Sep 2026 18:52:34 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for phantom.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/phantom.com">
  <img src="https://domaindrift.io/badge/phantom.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for phantom.com">
</a>

Ed25519 Receipt

Receipt ID: cc4b43f1-e8b9-4303-bf59-4666a471cc80
Output Hash: 35298785ab55496d1645f5b1713f15ca03417f8ee6004e1f62caabf06515cc8e
Signature: ed25519:f3bb0c1b4be151282925558e4787960720a414788c37f0b577fb15a9b81ce95431087b15ee2dabf5717f320c0d1a73ed807ab87b2f0eb606ba8168744a5b970a
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/phantom.com