# fakephantom.online — MALICIOUS — Crypto Drainer (Solana Drainer)

> Fakephantom.online is linked to crypto draining. Avoid interacting with it and secure your wallets. Stay vigilant to protect your assets.

## Summary
PhishDestroy identifies fakephantom.online as an active crypto drainer with a low risk level, targeting users' cryptocurrency wallets. 

The domain uses the Solana Drainer kit and was registered via HOSTINGER operations, UAB on September 4, 2025. It resolves to IP 94.131.105.135 and is flagged by one out of ninety-five security vendors on VirusTotal, indicating limited detection but potential threat. 

Users should avoid accessing fakephantom.online and ensure they use secure wallet practices. The domain remains active, and PhishDestroy recommends ongoing vigilance and immediate reporting of suspicious activity.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 0)
- Drainer type: Solana Drainer
- Target brand: Phantom
- Page title: Вхід - Phantom Wallet

## Domain Intelligence
- Registered: 2026-03-09 01:07:01
- Registrar: HOSTINGER operations, UAB
- Country: LT
- IP: 94.131.105.135
- IP Country: NL
- IP City: Meppel
- IP Org: AS209847 WorkTitans B.V.
- Nameservers: ["ns2.the.hosting", "ns1.the.hosting"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccffa-caf8-760d-955c-a06eab85a5ff.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/05755f89-6448-41bd-a6de-aa14da54eb4f
- Wayback Machine: https://web.archive.org/web/https://fakephantom.online
- PhishDestroy: https://phishdestroy.io/domain/fakephantom.online/
- LLM endpoint: https://phishdestroy.io/domain/fakephantom.online/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fakephantom.online/
Last updated: 2026-03-19