contact-phantom-wallet[.]carrd[.]co

The domain contact-phantom-wallet.carrd.co is a phishing site engaged in brand impersonation targeting Phantom, a cryptocurrency wallet provider. It posed as a legitimate support page under the title 'How to Contact Phantom Support?' but was designed to deceive users into disclosing sensitive information or transferring funds. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, contact-phantom-wallet.carrd.co has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 3 of 95 VirusTotal security vendors, including ChainPatrol, alphaMountain.ai, and CyRadar. It appeared on one security blocklist, PhishDestroy, but was not flagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc., and resolved to the IP address 104.18.40.34, hosted on Cloudflare's infrastructure in the US (AS13335). The SSL certificate was issued by Google Trust Services (WE1), and the observed HTTP status was 404. No creation date was available for the domain.

Users who interacted with contact-phantom-wallet.carrd.co should take immediate action to secure their assets. If cryptocurrency transactions were initiated, revoke any token approvals and transfer funds to a new wallet. For credential or login phishing, change passwords immediately, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the phishing domain to Phantom's official support channels, as well as to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in mitigation efforts.