photon-sol[.]my

This domain, photon-sol.my, is flagged for elevated risk of brand impersonation, specifically targeting the brand 'backpack'. The domain was taken offline as of July 25, 2026, and was previously used to host a phishing kit that abused Wallet Connect, a common method for crypto wallet phishing. The site claimed to be 'Photon - Your Trusted Platform for Token Discovery & Trading', a title that could mislead users into believing it was a legitimate platform. The domain resolves to the IP address 172.67.143.212, which is hosted by Cloudflare, Inc. in the United States.

It lacks an SSL certificate, which is a red flag for security-conscious users. The domain was registered through NameSilo, LLC and uses Cloudflare's nameservers, indicating a typical setup for a temporary, high-risk operation. The Gridinsoft trust score for this domain is 0/100, reflecting a very low level of trust. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further confirming its malicious intent.

While the domain is currently offline, defenders should remain vigilant and monitor for any signs of reactivation. The exact content of the site prior to being taken offline is not yet analyzed, but the page title and known scam type suggest it was designed to trick users into revealing their wallet seeds or other sensitive information. Defenders are advised to block this domain and educate users about the risks of wallet/seed phishing, especially when dealing with platforms that claim to offer token discovery and trading services.