# phantomix.cc — MALICIOUS — Crypto Drainer (Solana Drainer)

> Phantomix.cc is a high-risk Solana drainer impersonating Phantom Wallet. Resolves to 104.21.55.107. Users should avoid this domain completely to protect crypto.

## Summary
PhishDestroy identifies phantomix.cc as an active crypto drainer site posing as the legitimate Phantom Wallet. This domain specifically targets Solana users with a drainer kit designed to steal cryptocurrency assets from unsuspecting victims.  Phantomix.cc was registered on February 10, 2026 through Global Domain Group LLC and currently resolves to IP address 104.21.55.107. VirusTotal analysis shows this domain has not yet been flagged by any security vendors despite its active threat status. The site utilizes a Google Trust Services SSL certificate to appear legitimate, adding to its deceptive nature.  If you visited phantomix.cc, immediately disconnect from the internet and check your crypto wallets for unauthorized transactions. Run a malware scan on your device using reputable antivirus software. Consider transferring any remaining assets to a secure wallet not connected to websites or apps you don't fully trust. Report any stolen funds to your wallet provider and relevant authorities immediately. Never enter your seed phrase or private keys on any website claiming to be a wallet service.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Solana Drainer)
- Site status: unknown (HTTP ?)
- Drainer type: Solana Drainer
- Target brand: Phantom

## Domain Intelligence
- Registered: 2026-02-10 11:01:40
- Registrar: Global Domain Group LLC
- IP: 104.21.55.107

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b0d010a4-71c7-4d8a-a93a-10ec41830454
- PhishDestroy: https://phishdestroy.io/domain/phantomix.cc/
- LLM endpoint: https://phishdestroy.io/domain/phantomix.cc/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/phantomix.cc/
Last updated: 2026-03-28