# start-io-phantomwallet.pages.dev — MALICIOUS

> Warning: start-io-phantomwallet.pages.dev is a high-risk crypto drainer flagged for phishing. Avoid interacting with this malicious domain.

## Summary
PhishDestroy identifies start-io-phantomwallet.pages.dev as a dangerous crypto drainer targeting users' digital wallets. This site attempts to steal cryptocurrency by tricking users into revealing private keys or login credentials.

The phishing attack works by mimicking a legitimate wallet interface to lure victims into entering sensitive information. Once submitted, attackers gain direct access to the victims' crypto assets.

If you visited this site, immediately disconnect your wallet and change all associated passwords. Monitor your accounts for unauthorized activity and report the incident to your wallet provider.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Phantom
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.165
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["hank.ns.cloudflare.com", "serena.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 16 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Emsisoft", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Netcraft", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a8414-3b19-7189-bdf0-246f98d6b2e0.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5ad20764-13ec-446a-8934-bd7cd4cc93d9
- PhishDestroy: https://phishdestroy.io/domain/start-io-phantomwallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/start-io-phantomwallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/start-io-phantomwallet.pages.dev/
Last updated: 2026-03-19