governance-pharos[.]xyz

This domain is flagged as a high-risk phishing site specifically targeting users of the Pharos Mainnet governance portal. Analysis indicates the domain is designed to impersonate legitimate cryptocurrency governance interfaces, likely to harvest credentials, private keys, or other sensitive authentication details from unsuspecting users attempting to interact with governance protocols. Infrastructure analysis reveals the domain was registered on April 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP address 104.21.63.100 and is associated with Cloudflare services, including Cloudflare Browser Insights and HTTP/3. The domain appears on three security blocklists and is flagged by 13 out of 95 security vendors on VirusTotal. Additional threat intelligence confirms its presence in one AlienVault OTX pulse. Detection systems such as MetaMask, PhishDestroy, and SEAL have blocked access to this domain, and it currently holds a Gridinsoft trust score of 0/100. The page title, 'Pharos Mainnet: Governance,' directly mimics legitimate governance portals, increasing the likelihood of successful deception. Mitigation steps for this threat include immediate blacklisting of the domain and its associated IP address across all network security controls. Organizations should update endpoint protection rules to block access to governance-pharos.xyz and monitor for any attempts to resolve or connect to 104.21.63.100. Users who may have interacted with this domain should be advised to revoke any active sessions, rotate credentials, and verify wallet or governance permissions for unauthorized changes. Cryptocurrency platforms should alert users to the existence of this phishing domain and reinforce verification steps before accessing governance interfaces.