phantom.app - dns.ninja

phantom.app

DNSSEC🔒 Signed (DS record present)
A2606:4700:4407::6812:23e3🇺🇸 Cloudflare2606:4700:4407::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2a06:98c1:310d::ac40:981d🇺🇸 Cloudflare2a06:98c1:310d::/48 ✓ In HTTPS hints
A104.18.35.227Cloudflare104.18.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.64.152.29🇺🇸 Cloudflare172.64.152.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NSsage.ns.cloudflare.com ⭐
A2606:4700:58::a29f:2cec🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsage.ns.cloudflare.com
A2803:f800:50::6ca2:c3ec🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsage.ns.cloudflare.com
A2a06:98c1:50::ac40:23ec🇺🇸 Cloudflare2a06:98c1:50::/45
PTRsage.ns.cloudflare.com
A108.162.195.236🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsage.ns.cloudflare.com
A162.159.44.236Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsage.ns.cloudflare.com
A172.64.35.236🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsage.ns.cloudflare.com
NSsamara.ns.cloudflare.com
A2606:4700:50::a29f:26a0🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsamara.ns.cloudflare.com
A2803:f800:50::6ca2:c2a0🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRsamara.ns.cloudflare.com
A2a06:98c1:50::ac40:22a0🇺🇸 Cloudflare2a06:98c1:50::/45
PTRsamara.ns.cloudflare.com
A108.162.194.160🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsamara.ns.cloudflare.com
A162.159.38.160Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsamara.ns.cloudflare.com
A172.64.34.160🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRsamara.ns.cloudflare.com
MXaspmx.l.google.com ⭐
A2607:f8b0:4004:c23::1b🇺🇸 Google2607:f8b0:4004::/48
PTRyuiadrs-in-f27.1e100.net
A192.178.155.27🇺🇸 Google192.178.155.0/24
PTRyuiadrs-in-f27.1e100.net
MXalt1.aspmx.l.google.com(5)
A2800:3f0:4003:c0f::1b🇨🇱 Google2800:3f0:4003::/48
A108.177.123.26🇺🇸 Google108.177.123.0/24
PTRlcscld-in-f26.1e100.net
MXalt2.aspmx.l.google.com(5)
A2a00:1450:400b:c02::1a🇮🇪 Google2a00:1450:400b::/48
PTRdj-in-f26.1e100.net
A172.253.116.27🇺🇸 Google172.253.116.0/24
PTRdj-in-f27.1e100.net
MXalt3.aspmx.l.google.com(10)
A2a00:1450:4009:c0f::1a🇬🇧 Google2a00:1450:4009::/48
PTRyulhrs-in-f26.1e100.net
A192.178.223.27🇺🇸 Google192.178.223.0/24
PTRyulhrs-in-f27.1e100.net
MXalt4.aspmx.l.google.com(10)
A2a00:1450:400c:c23::1b🇧🇪 Google2a00:1450:400c::/48
PTRyubrupd-in-f27.1e100.net
A172.253.157.26🇺🇸 Google172.253.0.0/16
PTRyubrupd-in-f26.1e100.net
TXTapple-domain-verification=fsZXsHObevqaek15
TXTcursor-domain-verification-yrtmvh=Fv0etKbfLpPoht9ZCy669RNxN
TXTgoogle-site-verification=0mqizIv-j8tyrba_iHHJucesza-AxhxiouSQyFG0i6Y
TXTgoogle-site-verification=Ncj-IeYtq2371rUbCbpmkdKpqWMKRaljzxatfzZwuNE
TXTgoogle-site-verification=PyLlQzieOKeFlmcjG6GvhSBrHT4Qtx_aVTtPEyKEDm4
TXTgoogle-site-verification=s4juOG1C4VKdyvDEyH2WQOFtRrl_KVafb-S0iwyAC90
TXTlinear-domain-verification=sssprmhgzzkd
TXTnYBKf48QyY_YaIsU3mv_RWCuyJRUu-M
TXTnotion-domain-verification=gXdAYrP0Whh1S0sdXuYNQTbcGo4AfHU86aYQKaPtcSG
TXTonetrust-domain-verification=ab9c826fce39406f851e99d09e253e71
TXTopenai-domain-verification=dv-mdSDEMlekixFi3BB6sY81aJ3
TXTpostman-domain-verification=ec180d8c02ffea930a3b4e1fa4cce3e884a3440706931d485...
TXTrippling-domain-verification=53c441db797037a5
TXTslack-domain-verification=D4d7c7v5DoVXkglKWn7mA1tJ9V7h7K3dFt27Wj5Y
TXTstripe-verification=5ED703D7DE740691F6930EA3A46B8BCDBFAA271F77BE05106F8E7D95C...
TXTv=spf1 include:_spf.google.com include:amazonses.com include:sendgrid.net ~all
TXTwiz-domain-verification=a5fbd6cddeecd66786cec7b9bea776dd31d233902a4368b7567c7...
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.18.35.227, 172.64.152.29
IPv6 hints2606:4700:4407::6812:23e3, 2a06:98c1:310d::ac40:981d
SOAsage.ns.cloudflare.comdns@cloudflare.com serial=2410197702

app

DNSSEC🔒 Signed (DS record present)
NSns-tld1.charlestonroadregistry.com ⭐
NSns-tld2.charlestonroadregistry.com
NSns-tld3.charlestonroadregistry.com
NSns-tld4.charlestonroadregistry.com
NSns-tld5.charlestonroadregistry.com
SOAns-tld1.charlestonroadregistry.comcloud-dns-hostmaster@google.com serial=101427
rank #40042 globally
rank #40 in the tld
📈 Tranco rank: #2,720

Phantom Wallet

Phantom is a popular self-custodial cryptocurrency wallet marketed as "The crypto app for everyone." With over 15 million users, it provides a comprehensive Web3 experience across multiple blockchain networks including Solana, Ethereum, Bitcoin, Base, and Sui.

Key Features

  • Multi-chain wallet - Manage tokens and NFTs across multiple blockchains
  • Token swapping - Built-in exchange with competitive fees
  • NFT management - Pin, hide, burn, or list NFTs
  • Staking - Earn rewards on supported assets
  • Perpetual futures - Trading with up to 40x leverage
  • Phantom Cash - Debit card for crypto-to-fiat spending
  • Scam detection - Flags malicious transactions automatically
  • Hardware wallet support - Ledger integration for enhanced security

Available as browser extensions (Chrome, Firefox, Brave, Edge) and mobile apps (iOS, Android).

Technical Infrastructure

ServiceProvider
HostingCloudflare (104.18.35.227, 172.64.152.29)
Nameserverssage.ns.cloudflare.com, samara.ns.cloudflare.com
EmailGoogle Workspace (aspmx.l.google.com)
SecurityDNSSEC signed, HSTS Preload, HTTP/3 enabled

The domain redirects to phantom.com (301) and ranks #2,566 on Tranco globally. TXT records show integrations with Apple, Google, Notion, OpenAI, Slack, and Stripe services.

🔒 HSTS Preload (+subdomains)

Subdomains

blowfish-blocklist-proxy.phantom.app
time.phantom.app
blocklist.phantom.app
api.phantom.app
braze-proxy.phantom.app
figma-icons.phantom.app
sanity-proxy-v2.phantom.app
auth.phantom.app
gas-price-oracle.phantom.app
assets.phantom.app
connect.phantom.app
data.phantom.app
eppo-proxy.phantom.app
solana-mainnet.phantom.app

Same first word

phantom.glass
phantom.download
phantom.express
phantom.com.de
phantom.com
phantom.com.au
phantom.org.in
phantom.com.pe
phantom.re
phantom.com.ar
phantom.army
phantom.sh
phantom.beer
phantom.builders
phantom.pizza
phantom.net
phantom.cz
phantom.ca
phantom.lt
phantom.com.pl
phantom.systems
phantom.fm
phantom.gallery
phantom.at
phantom.pl
phantom.awsapps.com
phantom.international
phantom.cloud
phantom.co.za
phantom.com.sg
phantom.cn
phantom.ventures
phantom.baby
phantom.software
phantom.cards
phantom.run
phantom.app
phantom.in
phantom.si
phantom.cc
phantom.land
phantom.co.nz
phantom.blue
phantom.house
phantom.pub
phantom.foundation
phantom.agency
phantom.business
phantom.us
phantom.com.tw
phantom.org
phantom.pe
phantom.world
phantom.ai
phantom.zone
phantom.dev
phantom.direct
phantom.name
phantom.com.tr
phantom.eu
phantom.me
phantom.lu
phantom.link
phantom.ru
phantom.cl
phantom.uk.net
phantom.com.ua
phantom.life
phantom.capital
phantom.co.uk
phantom.coupons
phantom.biz
phantom.bot
phantom.limited
phantom.hu
phantom.expert

Similar names

hampton.k12.va.us
hampton.bike
hampton.info
hampton.nh.us
hampton.associates
hampton.rentals
hampton.ch
hampton.nyc
hampton.gov
hampton.org.uk
hampton.sg
hampton.eu
hampton.engineering
hampont.com
hampton.nu
hampton.ru
tophman.com
hampton.co.in
panthom.com
motnahp.com
hampton.com
hampton.at
phatmon.com
hampton.dk
hampton.gr
hampton.se
hampton.com.au
hampton.lu
hampton.net.au
hampton.cn
hampton.hu
hampton.care
hampton.k12.ar.us
hamtpon.com
hampton.school
hampton.org
hampton.financial
hampton.it
hampton.ie
hampton.co
hampton.tv
topmahn.de
hampton.city
hampton.lt
hampton.com.cn
hampton.farm
hampton.lv
hampton.io
hampton.es
hampton.nl
hampton.photos
hampton.pro
phontam.com

DNS History

13 records (11 active, 2 former)

NSsage.ns.cloudflare.comsamara.ns.cloudflare.comMXalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comaspmx.l.google.comA104.18.35.227172.64.152.292606:4700:4407::6812:23e32a06:98c1:310d::ac40:981d2606:4700:4409::ac40:981d2606:4700:440d::6812:23e3
●NSsage.ns.cloudflare.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●NSsamara.ns.cloudflare.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●MXalt1.aspmx.l.google.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●MXalt2.aspmx.l.google.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●MXalt3.aspmx.l.google.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●MXalt4.aspmx.l.google.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●MXaspmx.l.google.com2026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●A104.18.35.2272026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●A172.64.152.292026-02-15 → 2026-07-23 · 2 obs
● 2026-02-15 17:46:38
● 2026-07-23 16:04:16
●A2606:4700:4407::6812:23e32026-07-03 → 2026-07-23 · 3 obs
○ 2026-02-15 17:46:38
● 2026-07-03 17:53:52
● 2026-07-23 16:04:16
○A2606:4700:4409::ac40:981d2026-02-15 → 2026-02-15 · 3 obs
● 2026-02-15 17:46:38
○ 2026-07-03 17:53:52
○ 2026-07-23 16:04:16
○A2606:4700:440d::6812:23e32026-02-15 → 2026-02-15 · 3 obs
● 2026-02-15 17:46:38
○ 2026-07-03 17:53:52
○ 2026-07-23 16:04:16
●A2a06:98c1:310d::ac40:981d2026-07-03 → 2026-07-23 · 3 obs
○ 2026-02-15 17:46:38
● 2026-07-03 17:53:52
● 2026-07-23 16:04:16

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
appns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...-
phantom.appsamara.ns.cloudflare.com, sage.ns.cloudflare.com-

✅ Authoritative Response

Server:172.64.35.236

NS records: samara.ns.cloudflare.com, sage.ns.cloudflare.com

🔒 DNSSEC Status

🔐 Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 769ms | Queries: -

📄 Records

TypeCountSample Data
A2104.18.35.227, 172.64.152.29
AAAA22a06:98c1:310d::ac40:981d, 2606:4700:4407::6812:23e3
NS2sage.ns.cloudflare.com, samara.ns.cloudflare.com
MX5aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...
TXT17apple-domain-verification=fsZXsHObevqaek, cursor-domain-verification-yrtmvh=Fv0etK...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1sage.ns.cloudflare.com dns.cloudflare.co

Analysis

Hierarchy

phantom.app is the parent domain of blowfish-blocklist-proxy.phantom.app, time.phantom.app, blocklist.phantom.app, api.phantom.app, braze-proxy.phantom.app and a few other host names.

IP Addresses

phantom.app resolves to four IP addresses: 104.18.35.227, 172.64.152.29, 2606:4700:4407::6812:23e3 and 2a06:98c1:310d::ac40:981d.

scan.custom.flowcode.com, liligo.com, educationdive.com plus two other host names have IP numbers in common with phantom.app.

Name Servers

Two name servers handle the delegation for phantom.app: sage.ns.cloudflare.com and samara.ns.cloudflare.com.

The name server configuration of phantom.app is shared with other domains, for instance cosmolabs.org, uni.edu.py, cosmolearning.com and two others.

phantom.app shares at least some of its name servers with other domains, including zumggess.com, yazhougaoqingyingyuan.com.cn, aamh.cn and two others.

These name servers are frequently paired with the name servers tony.ns.cloudflare.com, macy.ns.cloudflare.com and norah.ns.cloudflare.com.

Hosts with 6 IP addresses each:

sage.ns.cloudflare.com resolves to 108.162.195.236, 162.159.44.236 and 172.64.35.236 among others, with 3 other IP addresses in total.

samara.ns.cloudflare.com resolves to 108.162.194.160, 162.159.38.160 and 172.64.34.160 among others, with 3 other IP addresses in total.

Mail Servers

phantom.app is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com and two others.

At least some of the mail servers used by phantom.app are shared with other domains: ns500759.ns500698.ns500759.ns500758.ns500758.ns500735.ns500736.ns500735.ns500708.ns500708.ns500576.ns500619.ns500619.trackreceptor.com, ns500758.ns500698.ns500759.ns500698.ns500758.ns500736.ns500735.ns500698.ns500576.ns500698.ns500698.ns500576.ns500619.ns500652.ns500576.trackreceptor.com, ns500742.ns500731.ns500754.ns500742.ns500742.ns500742.ns500704.ns500731.ns500291.ns500688.ns500671.ns500688.ns500291.ns500153.tenderladiesbz.com and two others among them.

These mail servers are often deployed together with alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, aspmx2.googlemail.com and 3 other mail servers.

Host names pointing to two IP addresses:

aspmx.l.google.com resolves to two addresses: 192.178.155.27 and 2607:f8b0:4004:c23::1b.

alt1.aspmx.l.google.com resolves to two addresses: 108.177.123.26 and 2800:3f0:4003:c0f::1b.

alt2.aspmx.l.google.com resolves to two addresses: 172.253.116.27 and 2a00:1450:400b:c02::1a.

alt3.aspmx.l.google.com resolves to two addresses: 192.178.223.27 and 2a00:1450:4009:c0f::1a.

alt4.aspmx.l.google.com resolves to two addresses: 172.253.157.26 and 2a00:1450:400c:c23::1b.