ph-omtt-swalet[.]pages[.]dev

Ph-omtt-swalet.pages.dev is actively impersonating Phantom, a popular cryptocurrency wallet, to deceive users into divulging sensitive information. The domain, registered through Cloudflare, Inc., is hosted on an IP address located in Canada. It has been flagged as malicious by 3 out of 93 vendors on VirusTotal, indicating a significant threat level.

The domain is part of a cryptocurrency scam, as evidenced by its page title 'Phantom_@Wallet — Presentation', which likely aims to lure users into believing they are interacting with the legitimate Phantom service. The site is listed on public blocklists from PhishDestroy, MetaMask, and SEAL, underscoring the recognized risk it poses to cryptocurrency users.

Despite being detected by only a few vendors, the domain's presence on multiple blocklists and its high platform risk score of 83/100 highlight its potential danger. Phishing domains like this one often exploit the time gap between their creation and detection by antivirus databases, allowing them to operate under the radar initially. PhishDestroy's early detection capabilities have identified this threat, providing a critical window for mitigation.

The active status of ph-omtt-swalet.pages.dev and its targeted approach towards Phantom users make it a notable concern for the cryptocurrency community. Users interacting with Phantom services should remain aware of such threats and verify the authenticity of any communication or website claiming to be associated with the brand.