# phantom-us-wallt.framer.media — MALICIOUS

> Phantom-us-wallt.framer.media is a high-risk phishing site flagged for social engineering. Avoid interaction and ensure your security software is updated.

## Summary
PhishDestroy identifies phantom-us-wallt.framer.media as a high-risk generic phishing domain aimed at deceiving users through social engineering tactics. This domain was created recently and posed a significant threat to user safety by attempting to harvest sensitive information under false pretenses.

Technical analysis reveals that phantom-us-wallt.framer.media was registered through a dead domain registrar and appeared on multiple security blocklists. VirusTotal flagged it across several security vendors, and Google Safe Browsing categorizes it explicitly as a social engineering threat, confirming its use in phishing campaigns designed to exploit user trust.

Currently, the domain phantom-us-wallt.framer.media has been taken offline, mitigating immediate risk. Users are advised to remain vigilant, avoid clicking suspicious links, and maintain updated security solutions to protect against similar emerging threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 404)
- Target brand: Phantom
- Page title: Site Not Found | Framer

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: CSC Corporate Domains, Inc.
- Country: US
- IP: 52.223.52.2
- IP Country: US
- IP City: Seattle
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ["ns-97.awsdns-12.com", "ns-1854.awsdns-39.co.uk", "ns-535.awsdns-02.net", "ns-1267.awsdns-30.org"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CRDF", "CyRadar", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "Google Safebrowsing", "Lionic", "Netcraft", "Sophos", "Trustwave", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bbcfe-2150-77a8-88b1-8fbc5480fb94.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2a8ecb5c-dcc1-4203-904b-435d51cdf7d9
- PhishDestroy: https://phishdestroy.io/domain/phantom-us-wallt.framer.media/
- LLM endpoint: https://phishdestroy.io/domain/phantom-us-wallt.framer.media/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/phantom-us-wallt.framer.media/
Last updated: 2026-03-19