phantommedia[.]us

PhishDestroy has identified the domain phantommedia.us as an active brand impersonation threat with an elevated risk level. This domain specifically targets the Phantom brand, attempting to deceive users into believing they are interacting with legitimate Phantom services. The domain is currently active and poses a significant risk to individuals who may encounter it through phishing campaigns or malicious links.

Technical analysis reveals that phantommedia.us is flagged by 7 out of 95 security vendors on VirusTotal, indicating broad recognition of its malicious nature. The domain was registered on February 21, 2026, through Tucows Domains Inc., and resolves to IP address 20.115.65.93. It appears on 3 security blocklists and has been found in one AlienVault OTX threat intelligence pulse. The domain uses an SSL certificate issued by Let's Encrypt / R12, which adds a false sense of security to unsuspecting visitors. The page title is currently set to "Under Construction," which may be a placeholder while the phishing pages are being developed.

Given the elevated risk level and active status, users are strongly advised to avoid interacting with phantommedia.us. Do not enter any personal information, login credentials, or financial data on this domain. If you have already visited the site, change your passwords immediately and monitor your accounts for suspicious activity. PhishDestroy recommends blocking this domain at the network level and reporting it to relevant security teams to prevent further victimization.