# eo-phantomwalat.pages.dev — MALICIOUS — Crypto Drainer (Solana Drainer)

> Discover risks linked to eo-phantomwalat.pages.dev, a suspected Solana crypto drainer domain under active investigation. Stay informed and protected.

## Summary
PhishDestroy identifies eo-phantomwalat.pages.dev as a potentially dangerous site involved in crypto theft, specifically targeting Solana wallets. While no antivirus engines have flagged it yet, its presence on two security blocklists and use of a known drainer kit raise concerns.

This phishing domain mimics legitimate crypto services to trick users into revealing private keys or wallet access. It leverages Cloudflare hosting and resolves to IP 188.114.96.3, making it harder to trace but still suspicious due to its known drainer toolkit.

If you have visited this domain, immediately check your Solana wallet for unauthorized activity and consider moving funds to a new wallet. Avoid entering sensitive information on this site and report any suspicious transactions. Staying vigilant helps prevent crypto losses.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Solana Drainer
- Target brand: Phantom
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-07 19:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: sid.ns.cloudflare.com tiffany.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc989-73df-75e9-a21f-73758ea801cd.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7af967b5-cd00-4f10-950e-c00a8ce35080
- Wayback Machine: https://web.archive.org/web/https://eo-phantomwalat.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/eo-phantomwalat.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eo-phantomwalat.pages.dev/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eo-phantomwalat.pages.dev/
Last updated: 2026-03-19