phoenicvesting[.]com

PhishDestroy identifies phoenicvesting.com as an active presale token phishing domain. The page titled Phoenic Presale Token Claim is designed to trick users into claiming tokens from a fraudulent presale event, indicating a targeted phishing campaign against cryptocurrency investors. This domain is currently under investigation with a risk level marked as active, necessitating immediate user awareness and caution.

PhishDestroy flagged phoenicvesting.com based on several critical indicators. The domain was registered on December 23, 2024, through GoDaddy.com, LLC, and resolves to the IP address 54.216.74.104. Despite utilizing a Let's Encrypt SSL certificate, the domain shows zero detections on VirusTotal (1/95 engines), suggesting it has not yet been widely recognized as malicious by security vendors. The domain's recent creation date and lack of presence on known blocklists further underscore its potential as a newly deployed phishing resource.

To mitigate risks associated with presale token phishing on phoenicvesting.com, users should avoid interacting with the site entirely. Cryptocurrency investors are advised to verify any presale or token-related claims through official channels and trusted platforms. Website administrators and security teams should monitor this domain for further malicious activity and consider blocking the IP address 54.216.74.104 and domain at the network level. Reporting this domain to relevant authorities and phishing databases can help prevent wider victimization.