# eg-phantom.pages.dev — MALICIOUS — Crypto Drainer (Solana Drainer)

> Check the safety of eg-phantom.pages.dev, a crypto drainer domain now offline. Learn what risks it posed and how to stay protected.

## Summary
PhishDestroy identifies eg-phantom.pages.dev as a low-risk crypto drainer domain targeting Solana wallets. Crypto drainers steal digital assets, posing financial risks to users.

The domain was registered via Cloudflare and resolved to IP 172.66.45.10. It employed a Solana Drainer kit and was flagged by 2 out of 95 security vendors. Currently, it is offline and inactive.

Users should avoid interacting with this domain or similar suspicious links. Keeping wallets secure and using trusted sources can prevent crypto theft. Monitoring domains like this helps maintain digital asset safety.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Solana Drainer
- Target brand: Phantom
- Page title: How to Integrate Phantom Wallet into Your Solana DApp | Solverse.dev – Dev Tools & Insights from the Solana Ecosystem

## Domain Intelligence
- Registered: 2026-03-05 03:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.45.10
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: amy.ns.cloudflare.com giancarlo.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CyRadar", "Fortinet", "Phishing Database", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/KpByVzbr/95d1d46217e6.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/eg-phantom.pages.dev
- Wayback Machine: https://web.archive.org/web/https://eg-phantom.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/eg-phantom.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eg-phantom.pages.dev/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eg-phantom.pages.dev/
Last updated: 2026-03-19