CONTINUOUS INTERNET TELEMETRY24H DRIFT8,157 material changesacross 7,843 domainsDNS DRIFT583 domains changed DNS providertop destination parity.domainsEMAIL DRIFT110 domains switched email providertop destination google.comCERT DRIFT183 domains switched issuing CA24hNOW1,628 curated domains not reachable-1,082 vs yesterdaySITE ERRORS20,603 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED93,386 throttled or blocked our scanner429 rate-limit / 403 bot-block

phantom.direct

Observed Jul 22, 2026, 01:24 UTC (15h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Secured byLet's Encrypt
Registered withNameCheap, Inc.
Also usesGoogle Search Console
tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat phantom.direct actually stands on - every host below is a signed observation
phantom.direct
A / AAAA
193.42.11.240
unattributedserves the site
NS
reese.ns.cloudflare.comrita.ns.cloudflare.com
cloudflare.comanswers its DNS
TLS
phantom.direct
Let's Encryptissued its certificate

DNS Records

A 1

  • 193.42.11.240

TXT 5

  • google-site-verification=FJqlz-G9lVTxhXqgRK2ZilJDJ_zvReJE2GokWhP70yw
  • postal-verification oCkFLoU9GCKKrPLqAYVxXBfVXNESUY4W
  • v=spf1 include:spf.efwd.registrar-servers.com ~all
  • v=spf1 include:spf.unisender.ru ~all
  • v=DMARC1; p=none; rua=mailto:dmarc@reporting.unisender.com

NS 2

  • reese.ns.cloudflare.com
  • rita.ns.cloudflare.com

SOA 1

  • reese.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (4)

Common NameIssuerExpires
phantom.direct C=US, O=Let's Encrypt, CN=YE1 Thu, 01 Oct 2026 01:59:56 +0000
YE1 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for phantom.direct. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for phantom.direct <a href="https://domaindrift.io/t/phantom.direct"> <img src="https://domaindrift.io/badge/phantom.direct.svg" width="300" height="64" alt="DomainDrift signed observations for phantom.direct"> </a>

Ed25519 Receipt

Receipt ID
rcpt_166dba9badb1683a
Output Hash
572bf2a0b79e13afd94b50d73b06c002b7bf8876a4d867c9443112ce4910ba5c
Signature
ed25519:9196af021460bdfd784a3e482cb031f8675164d8f68a69fd2f1b39f2489ebbec77ce5fb34adbef09200b3739ef5b668404629e81f499b7649688a85bd67dae0b
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser