phntmom[.]com

The domain phntmom.com is identified as a brand impersonation threat specifically targeting Phantom, a widely used cryptocurrency wallet service. As of the latest assessment, the domain has been taken offline, though prior activity indicates malicious intent to deceive users into disclosing sensitive credentials or transferring assets to attacker-controlled wallets. Analysis confirms this domain does not represent the legitimate Phantom service and should not be trusted under any circumstances. Infrastructure analysis reveals phntmom.com was flagged by 20 of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious classification. The domain was registered on December 09, 2025, through Name.com, Inc., and resolved to the IP address 34.111.179.208, hosted on Google LLC infrastructure (AS396982) in the United States. No SSL certificate was detected, further reducing the domain’s legitimacy. The domain appeared on one security blocklist, specifically PhishDestroy, prior to being taken offline. The creation date, combined with the lack of encryption and brand impersonation tactics, aligns with common phishing infrastructure deployment patterns targeting cryptocurrency users. Current status confirms phntmom.com is offline, though the threat may re-emerge under similar domains or infrastructure. Users are advised to verify all cryptocurrency-related domains directly through official sources, such as the Phantom wallet’s verified website or application. Enabling multi-factor authentication, using hardware wallets, and cross-referencing domain registration details via WHOIS can mitigate risks. Organizations should monitor for similar impersonation attempts, particularly those leveraging misspelled or visually similar domain names, and update blocklists to include known malicious indicators such as the IP 34.111.179.208. If interaction with this domain occurred, affected parties should revoke wallet permissions, transfer assets to a secure wallet, and monitor for unauthorized transactions.