phantom-backup[.]com
Verificação de phishing e segurança de phantom-backup.com
“phantom-backup.com — Domain welcome page for”
phantom-backup.com — Último ativo conhecido (HTTP 200). Representação da marca: Phantom; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 17/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 100/100. Registrador: Sav.com.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, phantom-backup.com, is flagged as a brand impersonation threat targeting the Phantom brand. The domain poses a significant risk by potentially distributing malicious content, stealing sensitive information, or misleading users into providing personal or financial data.
Analysis indicates that phantom-backup.com has been flagged by 23 out of 95 security vendors on VirusTotal, suggesting a high level of suspicion among the cybersecurity community. The domain was registered through Sav.com, LLC and was created on August 05, 2025. Additionally, it appears on 2 security blocklists, further emphasizing its potential involvement in malicious activities. The domain currently does not have an SSL certificate, which can indicate a lack of security and legitimacy.
If users have visited phantom-backup.com, they are advised to immediately change any passwords or credentials that may have been entered on the site. Users should also monitor their financial and personal accounts for any unusual activity. It is recommended to run a comprehensive security scan on any devices that accessed the site and to avoid clicking on links or downloading files from suspicious sources in the future.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 3 identified
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
“i received this email and it said connecting to wallet after clicking on email. after that it said I needed to provide recovery phrase. After doing that and freezing for a while I went to my phantom app, my account was cleared.”
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo