Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is network-abuse@google.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
phantom-wallett[.]blogspot[.]com[.]ar
“Phantom Wallet - A friendly Crypto Wallet”
phantom-wallett.blogspot.com.ar — Belum terverifikasi. Peniruan identitas merek: Phantom; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 12/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); URLQuery 3 alerts; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 92/100. Registrar: nicar.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain phantom-wallett.blogspot.com.ar is currently active and has been classified as a brand‑impersonation site targeting the Phantom crypto wallet. Infrastructure analysis shows the domain resolves to IP 172.217.16.193, an address owned by Google LLC (AS15169) in the United States. The site presents a valid SSL certificate issued by Google Trust Services under the WE2 authority, a common artifact of Blogger‑hosted pages, and returns an HTTP 302 status, indicating a redirection that may be used to forward victims to malicious payloads. The page title "Phantom Wallet - A friendly Crypto Wallet" directly references the targeted brand, confirming the impersonation intent. Registration data indicates the domain was created on 21 February 2026 and was registered through the registrar nicar.
The domain’s trust score from Gridinsoft is 0 out of 100, reflecting a high‑risk assessment. Detection engines have flagged the site: 11 of 93 VirusTotal scanners reported malicious activity, Google Safe Browsing lists it for social engineering, and it appears on three independent security blocklists. Additional defensive products—PhishDestroy, MetaMask, and SEAL—have explicitly blocked the domain. Technical fingerprinting reveals the use of Blogger, Java, Python, OpenGSE, Google Analytics, and HTTP/3, all consistent with a typical hosted blog environment but not indicative of legitimate content. Nameservers include a.lactld.org, c.dns.ar, d.dns.ar, e.dns.ar, f.dns.ar, ns1.google.com, and ns2.google.com, confirming reliance on both regional and Google DNS infrastructure.
Given the combination of a brand‑specific page title, low trust score, multiple vendor detections, and blocklist presence, defenders should treat the domain as high‑risk. Recommended actions are to add the domain to perimeter blocklists, implement DNS‑level sinkholing, monitor for derivative subdomains, and educate users about unsolicited requests claiming to be from Phantom.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 6 identified
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of phantom-wallett.blogspot.com.ar · checked Mar 2, 2026
Bukti & Laporan Eksternal
PD-20260131-E82659 Recipient: network-abuse@google.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive