# phantomid.space — MALICIOUS

> Phantomid.space is linked to active phishing attacks. Avoid interaction and block this domain to protect your credentials and data.

## Summary
PhishDestroy identifies phantomid.space as an active phishing domain posing risks to users by attempting to steal sensitive information under the guise of a service titled "Fanton ID." The campaign is categorized as a medium-risk generic phishing threat, designed to deceive users into divulging personal or authentication details.

The domain phantomid.space was registered on February 21, 2026, via Porkbun LLC and currently resolves to the IP address 216.198.79.1. It has been flagged on three separate security blocklists, indicating recognition by multiple threat intelligence sources. While only a fraction of security vendors have detected this domain, its presence across blocklists and suspicious page content suggest a credible threat actor infrastructure leveraging this domain for credential harvesting.

PhishDestroy reports that phantomid.space remains active and recommends immediate blocking and user awareness measures to mitigate risk. Organizations should update email filters and endpoint defenses to detect and prevent interaction with this domain. Users are advised not to enter any information on sites associated with phantomid.space and to report suspicious messages referencing this domain to their security teams.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Target brand: Phantom
- Page title: Fanton ID

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2026-12-19 00:00:00
- Registrar: Porkbun LLC
- Country: Unknown
- IP: 216.198.79.1
- Nameservers: curitiba.ns.porkbun.com fortaleza.ns.porkbun.com maceio.ns.porkbun.com salvador.ns.porkbun.com

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ChainPatrol", "CyRadar", "Forcepoint ThreatSeeker", "SOCRadar", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content
- Meta description: Your crypto wallet is private. Your identity is not. Privacy that starts before the blockchain.

### Page Text
Fanton ID Phantom ID Off-Chain Privacy. On-Chain Freedom. Your crypto wallet is private. Your identity is not. Privacy that starts before the blockchain. Start Using PhantomID Explore Utilities Contract Address (Solana) Loading... Why PhantomID Exists Web3 fixed money privacy. Off-chain privacy is still broken. Your phone number, IP, metadata, browser fingerprint, and device IDs leak more about you than any wallet ever can. That's where attackers track you, profile you, and connect your wallets to your real identity. PhantomID provides the missing shield: We protect the you behind the wallet address. Privacy Utilities Four powerful tools to protect your digital identity PHANTOM Mail Anonymous Email for Crypto-Natives Private, non-linkable email identities designed for traders, builders, and airdrop hunters • Stop handing your real inbox to exchanges, trackers, and ad networks • Ideal for Web2 logins, CEX accounts, airdrops, and sign-ups Use every platform. Never expose your real email. PHANTOM SIM Your Shadow Mobile Identity Instant, unlinkable virtual numbers for DeFi apps, CEX verification, and Web2 accounts. • Spin up disposable or long-lived private SIMs • Cut off spam, phishing, and SIM-swap risks One number for your life. A separate one for your crypto. PHANTOM Tunnel Encrypted Route to the Open Internet Military-grade encrypted routing tailored for crypto activity. • Advanced anti-tracking and anti-fingerprinting • Anonymous access to dApps, platforms, and trading tools Trade, browse, experiment — without leaving a trail. PHANTOM Store Your Personal Encrypted Vault A zero-knowledge vault for the data you can't afford to lose or leak. • End-to-end encrypted storage with no backdoors • Automatic encrypted backups and recovery What goes into SHADOW Store stays with you - permanently. Tokenomics Token Name PHANTOM ID Symbol $PHANTOM Total Supply 1B Contract Address (Solana) Loading... Token Utility Access & Discounts Get discounted access to DEGEN SIM, DEGEN Tunnel, DEGEN Store, and all future PhantomID utilities. Premium Privacy Tier Hold or stake DEGEN to unlock faster routing nodes, additional SIM regions, unlimited vault capacity, and enhanced security features. Governance Vote on new utilities, SIM region expansion, privacy node improvements, and future roadmap changes. Staking Stake DEGEN to earn rewards and help power the privacy network. Ecosystem Utility DEGEN powers our privacy identity systems, provides developer API access, and fuels the enterprise-grade privacy suite. Roadmap Building the future of privacy for Web3 Phase 1 Launch Brand launch & website SHADOW SIM (Beta) SHADOW Tunnel (Beta) SHADOW Store (Alpha) $SHADOW Token deployment Phase 2 Growth Mobile App (iOS + Android) Multi-region SHADOW SIM SHADOW Tunnel Browser Extension Referral & Rewards System Developer API rollout Phase 3 Expansion ShadowID (Anonymous On-Chain Identity) ShadowScan (Phishing & Drainer Detection) ShadowChat (Private Messenger) Encrypted File-Sharing S

### External Links
- https://dapp.phantomid.space
- https://x.com/PhantomIDapp

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c24a8-26cd-77ea-ad5b-028ddd419dcc.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/00d9465e-b410-43f0-a327-483b01ef481c
- PhishDestroy: https://phishdestroy.io/domain/phantomid.space/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/phantomid.space/
Last updated: 2026-03-14