# phantomcard.digital — MALICIOUS — Crypto Drainer (Solana Drainer)

> Check if phantomcard.digital is a Solana Drainer scam. VT score 0/95, registered March 24, 2026. Check the full report.

## Summary
PhishDestroy identifies the domain phantomcard.digital as an active crypto drainer phishing campaign leveraging a Solana Drainer kit. The threat actor impersonates a legitimate financial service ('phantomcard') to deceive victims into connecting cryptocurrency wallets and authorizing unauthorized transfers. This domain is part of a broader trend where attackers clone legitimate web3 brands to exploit user trust and drain digital assets. The drainer kit is specifically designed to target Solana-based wallets, enabling rapid theft of tokens and NFTs once wallet permissions are granted. 


Technical indicators confirm the domain's malicious intent. VirusTotal currently shows 0 detections out of 95 engines, indicating undetected threat activity. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP 104.21.44.49. Registered on March 24, 2026, it has already been flagged by Google Safe Browsing (GSB) and appears on 2 security blocklists. The use of a Let’s Encrypt SSL certificate adds a veneer of legitimacy, while the Solana Drainer kit demonstrates a sophisticated attack methodology. 


The campaign remains active despite initial countermeasures. The domain is currently blocked by SEAL and MetaMask, limiting immediate exposure for some users. However, the lack of detection on VirusTotal and recent registration date suggest this threat is still emerging and may evade automated defenses. The risk level is classified as high due to the active drainer kit, evasion of detection, and targeting of high-value cryptocurrency assets. Users are advised to avoid interacting with phantomcard.digital, verify domain authenticity via official channels, and report suspicious activity to security teams. Remaining risk includes potential expansion of the campaign to additional domains or persistence through DNS changes.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: unknown (HTTP ?)
- Drainer type: Solana Drainer

## Domain Intelligence
- Registered: 2026-03-24 20:21:59
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.44.49

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8b4a86f4-6b53-4a20-bd10-8ace3ad792fe
- PhishDestroy: https://phishdestroy.io/domain/phantomcard.digital/
- LLM endpoint: https://phishdestroy.io/domain/phantomcard.digital/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/phantomcard.digital/
Last updated: 2026-03-29