en-phan-tom[.]pages[.]dev

PhishDestroy identifies en-phan-tom.pages.dev as a site posing a brand impersonation threat, where attackers mimic a well-known brand to deceive users. The site was created on October 10, 2025, and was registered through Cloudflare, Inc., with 3 out of 95 security vendors on VirusTotal flagging it as potentially malicious, and Google Safe Browsing also flags it as phishing, which are clear indicators of its malicious intent.

This domain appears to impersonate Across, with a page title claiming to be Phantom: The crypto wallet for everyone — Presentation, and it has been taken offline, but not before it resolved to IP 188.114.96.3 and appeared on at least one security blocklist, further solidifying the threat it poses.

If a user visited en-phan-tom.pages.dev, they should be cautious of any information they might have shared, and take immediate action to secure their accounts and personal data, considering the elevated risk level and the specific brand impersonation threat this site poses, as indicated by the 3 security vendors and Google Safe Browsing warnings.