phantom.app

Observed 2026-07-17T19:33:04.139Z (42m ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Registered withNamecheap Inc.

Also usesLinearGoogle Search ConsoleSlackStripeNotion

IPv6 · 11 subdomains · crypto

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat phantom.app actually stands on - every host below is a signed observation

phantom.app

A / AAAA

104.18.35.227172.64.152.292a06:98c1:310d::ac40:981d2606:4700:4407::6812:23e3

Cloudflareserves the site

samara.ns.cloudflare.comsage.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt2.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://phantom.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time1433 ms

DNS resolutionNOERROR

Redirect chain

https://phantom.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

104.18.35.227
172.64.152.29

AAAA 2

2a06:98c1:310d::ac40:981d
2606:4700:4407::6812:23e3

MX 5

1aspmx.l.google.com
5alt2.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
10alt3.aspmx.l.google.com

TXT 20

openai-domain-verification=dv-mdSDEMlekixFi3BB6sY81aJ3
linear-domain-verification=sssprmhgzzkd
rippling-domain-verification=53c441db797037a5
onetrust-domain-verification=ab9c826fce39406f851e99d09e253e71
google-site-verification=Ncj-IeYtq2371rUbCbpmkdKpqWMKRaljzxatfzZwuNE
v=spf1 include:_spf.google.com include:amazonses.com include:sendgrid.net ~all
google-site-verification=PyLlQzieOKeFlmcjG6GvhSBrHT4Qtx_aVTtPEyKEDm4
slack-domain-verification=D4d7c7v5DoVXkglKWn7mA1tJ9V7h7K3dFt27Wj5Y
google-site-verification=0mqizIv-j8tyrba_iHHJucesza-AxhxiouSQyFG0i6Y
stripe-verification=5ED703D7DE740691F6930EA3A46B8BCDBFAA271F77BE05106F8E7D95C4B6F60C

NS 2

samara.ns.cloudflare.com
sage.ns.cloudflare.com

SOA 1

sage.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for phantom.app. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/phantom.app">
  <img src="https://domaindrift.io/badge/phantom.app.svg"
       width="300" height="64" alt="DomainDrift signed observations for phantom.app">
</a>

Ed25519 Receipt

Receipt ID: 767c5fe6-659b-4d79-8e1b-70855f3f2103
Output Hash: a2a0f610426d985a599eadf561dafe215df9aef705bf546a1ed872af1aa54352
Signature: ed25519:2f3b24de8e4e77df4c257c693e66c720e61e2c254313b54a3dea851fabf7eb2c6455dce60c4b0c9c348761e7d712f096b7b256812a437f00aa55ae0a0667b001
Public Key: ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/phantom.app