phantom-wallet-support-recovery[.]blogspot[.]com
“Phantom Wallet Support Email, conatct support phone, Hacked Account Recovery & Help”
phantom-wallet-support-recovery.blogspot.com — İçerik kullanılamıyor. Marka kimliğine bürünme: Phantom; Dolandırıcılık türü: Seed Phrase Theft. Kanıt özeti: VirusTotal 10/95 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 80/100. Kayıt kuruluşu: GOOGLE (ASN: 15169).
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain phantom-wallet-support-recovery.blogspot.com was identified as a brand-impersonation site targeting Phantom wallet users. Infrastructure analysis shows the domain resolves to IP address 142.251.140.161, which belongs to Google LLC (ASN 15169) and is located in the United States. The site was hosted on the Blogger platform and served content over HTTPS using a Google Trust Services certificate issued by the WE2 authority. An HTTP request returned a 404 status, indicating that the malicious page has been removed or the site is otherwise inaccessible.
Technical fingerprints report the presence of Java, Python, OpenGSE libraries and HTTP/3 support, consistent with typical Blogger deployments. VirusTotal scans recorded ten positive detections out of ninety‑five security vendors, confirming that multiple scanners recognize the domain as malicious. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing resource. The page title captured from the site—"Phantom Wallet Support Email, conatct support phone, Hacked Account Recovery & Help"—directly references the Phantom brand and aligns with the recorded scam type of wallet/seed phishing.
Registration data shows the domain was created through Google’s registrar, further linking it to the same hosting infrastructure. Current status is reported as offline, suggesting the content has been taken down, but the observed indicators warrant continued vigilance. Defenders should ensure that the domain is added to URL filtering and DNS blocklists, monitor for new subdomains that mimic the same naming pattern, and educate users about unsolicited support emails that request wallet seeds or private keys. Continuous threat‑intel feeds should be consulted for any re‑appearance of similar impersonation campaigns targeting the Phantom brand.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 5 identified
Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.
www.blogger.com %100 güvenJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com %100 güvenOpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.
code.google.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Arşivlenmiş Kanıtlar
Kanıtlar ve Dış Raporlar
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin