scalar-storm-neon[.]vercel[.]app

This domain, scalar-storm-neon.vercel.app, is actively engaged in brand impersonation, specifically targeting the Phantom cryptocurrency wallet. The domain poses a high risk of credential theft and potential financial loss for users who mistakenly believe they are interacting with the legitimate Phantom service.

Analysis indicates that the domain is flagged by 1 out of 95 security vendors on VirusTotal, suggesting a low but significant level of suspicion. The domain is registered through Vercel Inc. and was created on February 26, 2026. It appears on 3 security blocklists, including PhishDestroy and SEAL. The SSL certificate is issued by Google Trust Services / WR1, which may lend a false sense of security to unsuspecting users. The domain resolves to the IP address 216.198.79.3, located in the United States and associated with AS16509 Amazon.com, Inc.

If users have visited this domain, they should immediately check their Phantom wallet for any unauthorized transactions or changes. It is recommended to change their wallet passwords and enable two-factor authentication if not already in place. Users should also monitor their financial accounts for any unusual activity and report any suspicious incidents to their wallet provider or financial institution. Additionally, users should avoid clicking on links or entering credentials on any unfamiliar or unverified websites.