# phantom-project.top — MALICIOUS — Crypto Drainer (Solana Drainer)

> Discover why phantom-project.top is flagged as a medium risk crypto drainer. Learn its threats and how to stay protected from this active domain.

## Summary
PhishDestroy classifies phantom-project.top as a medium-risk crypto drainer domain actively targeting users. This domain is associated with illicit crypto wallet draining activities, specifically using the Solana Drainer kit, aiming to compromise Solana blockchain assets.

Supporting the threat assessment, phantom-project.top resolves to IP address 188.114.97.3 and was registered via NameSilo, LLC on March 6, 2026. Despite only 3 out of 95 VirusTotal security vendors flagging it, its recent creation date and connection to a known drainer kit elevate its suspicion. The domain remains active, reinforcing the urgency for caution.

Users and organizations are advised to avoid interaction with phantom-project.top and monitor Solana wallet activity closely. Employing updated endpoint protections, phishing filters, and blockchain transaction monitoring can mitigate risk. PhishDestroy continues to track the domain's status and evolving threat patterns.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: dead (HTTP 0)
- Drainer type: Solana Drainer
- Target brand: Phantom
- Page title: Phantom: The crypto Airdrop for everyone

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: NameSilo, LLC
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: diana.ns.cloudflare.com johnny.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Emsisoft", "G-Data", "Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc29c-bae4-7138-913a-29cd081e7884.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/phantom-project.top
- PhishDestroy: https://phishdestroy.io/domain/phantom-project.top/
- LLM endpoint: https://phishdestroy.io/domain/phantom-project.top/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/phantom-project.top/
Last updated: 2026-03-19