api.phantom.app - dns.ninja

api.phantom.app

DNSSEC⚠️ Not signed
A2606:4700:4407::6812:23e3πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:4407::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2a06:98c1:310d::ac40:981dπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:310d::/48 βœ“ In HTTPS hints
A104.18.35.227Cloudflare104.18.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.64.152.29πŸ‡ΊπŸ‡Έ Cloudflare172.64.152.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.18.35.227, 172.64.152.29
IPv6 hints2606:4700:4407::6812:23e3, 2a06:98c1:310d::ac40:981d

phantom.app

DNSSECπŸ”’ Signed (DS record present)
A2606:4700:4407::6812:23e3πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:4407::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2a06:98c1:310d::ac40:981dπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:310d::/48 βœ“ In HTTPS hints
A104.18.35.227Cloudflare104.18.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.64.152.29πŸ‡ΊπŸ‡Έ Cloudflare172.64.152.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NSsage.ns.cloudflare.com ⭐
NSsamara.ns.cloudflare.com
MXaspmx.l.google.com ⭐
MXalt1.aspmx.l.google.com(5)
MXalt2.aspmx.l.google.com(5)
MXalt3.aspmx.l.google.com(10)
MXalt4.aspmx.l.google.com(10)
TXTapple-domain-verification=fsZXsHObevqaek15
TXTcursor-domain-verification-yrtmvh=Fv0etKbfLpPoht9ZCy669RNxN
TXTgoogle-site-verification=0mqizIv-j8tyrba_iHHJucesza-AxhxiouSQyFG0i6Y
TXTgoogle-site-verification=Ncj-IeYtq2371rUbCbpmkdKpqWMKRaljzxatfzZwuNE
TXTgoogle-site-verification=PyLlQzieOKeFlmcjG6GvhSBrHT4Qtx_aVTtPEyKEDm4
TXTgoogle-site-verification=s4juOG1C4VKdyvDEyH2WQOFtRrl_KVafb-S0iwyAC90
TXTlinear-domain-verification=sssprmhgzzkd
TXTnYBKf48QyY_YaIsU3mv_RWCuyJRUu-M
TXTnotion-domain-verification=gXdAYrP0Whh1S0sdXuYNQTbcGo4AfHU86aYQKaPtcSG
TXTonetrust-domain-verification=ab9c826fce39406f851e99d09e253e71
TXTopenai-domain-verification=dv-mdSDEMlekixFi3BB6sY81aJ3
TXTpostman-domain-verification=ec180d8c02ffea930a3b4e1fa4cce3e884a3440706931d485...
TXTrippling-domain-verification=53c441db797037a5
TXTslack-domain-verification=D4d7c7v5DoVXkglKWn7mA1tJ9V7h7K3dFt27Wj5Y
TXTstripe-verification=5ED703D7DE740691F6930EA3A46B8BCDBFAA271F77BE05106F8E7D95C...
TXTv=spf1 include:_spf.google.com include:amazonses.com include:sendgrid.net ~all
TXTwiz-domain-verification=a5fbd6cddeecd66786cec7b9bea776dd31d233902a4368b7567c7...
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.18.35.227, 172.64.152.29
IPv6 hints2606:4700:4407::6812:23e3, 2a06:98c1:310d::ac40:981d
SOAsage.ns.cloudflare.comdns@cloudflare.com serial=2409197635
rank #40553 globally
rank #41 in the tld
πŸ“ˆ Tranco rank: #2,713

Phantom Wallet

Phantom is a popular self-custodial cryptocurrency wallet marketed as "The crypto app for everyone." With over 15 million users, it provides a comprehensive Web3 experience across multiple blockchain networks including Solana, Ethereum, Bitcoin, Base, and Sui.

Key Features

  • Multi-chain wallet - Manage tokens and NFTs across multiple blockchains
  • Token swapping - Built-in exchange with competitive fees
  • NFT management - Pin, hide, burn, or list NFTs
  • Staking - Earn rewards on supported assets
  • Perpetual futures - Trading with up to 40x leverage
  • Phantom Cash - Debit card for crypto-to-fiat spending
  • Scam detection - Flags malicious transactions automatically
  • Hardware wallet support - Ledger integration for enhanced security

Available as browser extensions (Chrome, Firefox, Brave, Edge) and mobile apps (iOS, Android).

Technical Infrastructure

ServiceProvider
HostingCloudflare (104.18.35.227, 172.64.152.29)
Nameserverssage.ns.cloudflare.com, samara.ns.cloudflare.com
EmailGoogle Workspace (aspmx.l.google.com)
SecurityDNSSEC signed, HSTS Preload, HTTP/3 enabled

The domain redirects to phantom.com (301) and ranks #2,566 on Tranco globally. TXT records show integrations with Apple, Google, Notion, OpenAI, Slack, and Stripe services.

Same first word

Similar names

DNS History

6 records (4 active, 2 former)

A104.18.35.227172.64.152.292606:4700:4407::6812:23e32a06:98c1:310d::ac40:981d2606:4700:4409::ac40:981d2606:4700:440d::6812:23e3
●A104.18.35.2272026-02-15 β†’ 2026-07-11 Β· 2 obs
● 2026-02-15 22:10:12
● 2026-07-11 04:16:34
●A172.64.152.292026-02-15 β†’ 2026-07-11 Β· 2 obs
● 2026-02-15 22:10:12
● 2026-07-11 04:16:34
●A2606:4700:4407::6812:23e32026-07-10 β†’ 2026-07-11 Β· 3 obs
β—‹ 2026-06-16 16:46:56
● 2026-07-10 12:41:16
● 2026-07-11 04:16:34
β—‹A2606:4700:4409::ac40:981d2026-02-15 β†’ 2026-06-16 Β· 4 obs
● 2026-02-15 22:10:12
● 2026-06-16 16:46:56
β—‹ 2026-07-10 12:41:16
β—‹ 2026-07-11 04:16:34
β—‹A2606:4700:440d::6812:23e32026-02-15 β†’ 2026-06-16 Β· 4 obs
● 2026-02-15 22:10:12
● 2026-06-16 16:46:56
β—‹ 2026-07-10 12:41:16
β—‹ 2026-07-11 04:16:34
●A2a06:98c1:310d::ac40:981d2026-07-10 β†’ 2026-07-11 Β· 3 obs
β—‹ 2026-06-16 16:46:56
● 2026-07-10 12:41:16
● 2026-07-11 04:16:34

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
appns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com...10 records
phantom.appsamara.ns.cloudflare.com, sage.ns.cloudflare.com-

βœ… Authoritative Response

Server:162.159.44.236

NS records: samara.ns.cloudflare.com, sage.ns.cloudflare.com

πŸ”’ DNSSEC Status

πŸ” Secure (DNSSEC validated)

Chain of trust verified from root to domain

⏱️ Timing

Total: 467ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.64.152.29, 104.18.35.227
AAAA22606:4700:4407::6812:23e3, 2a06:98c1:310d::ac40:981d
HTTPS1{"priority":1,"target":".","alpn":["h3",

πŸ“Œ Glue Records Collected

Total: 10

Out-of-bailiwick: 10 (ns-tld1.charlestonroadregistry.com, ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com...)

Analysis

IP Addresses

api.phantom.app points to the four IP addresses 104.18.35.227, 172.64.152.29, 2606:4700:4407::6812:23e3 and 2a06:98c1:310d::ac40:981d.

Two other host names, along with optimizely.flowcode.com, link.educationdive.com and www.ayuntamientoelvalle.gob.do, also share IP numbers with api.phantom.app.