xn--phatom-yeb[.]com

This domain is identified as a brand impersonation threat, specifically targeting users of Phantom Wallet. Its aim is to lure users into believing it is the legitimate site for Phantom Wallet, potentially leading to unauthorized access or financial losses. As a brand impersonation site, it could engage in malicious activities such as crypto draining by presenting fake download links.

The domain was flagged by 16 out of 95 security vendors on VirusTotal, indicating significant suspicion within the cybersecurity community. It was created on February 21, 2026, and registered through NiceNIC International Group Co., Limited. The domain resolves to an IP address located in Russia, specifically 146.19.128.37, which is operated by SERV.HOST GROUP LTD. The absence of an SSL certificate further reduces its credibility.

If someone visited this site, it is recommended to immediately check their device and accounts for any unauthorized activity. Users should consider changing their passwords for any potentially affected accounts and enable two-factor authentication. Additionally, running a security scan on the device to detect any possible malware is advised. Staying informed about recognized platforms and cross-verifying URLs can prevent falling victim to such threats in the future.