phantomwalletextensiondownload[.]blogspot[.]bg
“Phantom wallet extension download”
phantomwalletextensiondownload.blogspot.bg — 未验证. 品牌冒充:Phantom; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 10/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); CF Radar malicious; PhishDestroy score 80/100. 注册商: GOOGLE (ASN: 15169).
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report documents the technical threat posed by the domain phantomwalletextensiondownload.blogspot.bg. Based on the page title "Phantom wallet extension download" and the identified impersonated brand "Phantom," this site is a cryptocurrency scam. It poses a threat by attempting to deceive users into downloading a fake wallet extension, likely to steal cryptocurrency credentials or funds.
Technical evidence shows the site was flagged by 9 out of 95 VirusTotal vendors, including alphaMountain.ai, BitDefender, CyRadar, ESET, and Emsisoft. It also appeared on one blocklist. The domain resolved to IP address 2a00:1450:4001:829::2001 located in Germany, with AS15169 assigned to Google LLC. The registrar is GOOGLE (ASN: 15169), and the SSL certificate was issued by Google Trust Services / WE2.
The site is currently down/offline, reducing immediate risk. However, the detection by multiple security vendors and its impersonation of a legitimate brand indicate a high risk level for potential victims if the site becomes active again. Users should avoid any interaction with this domain.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 6 identified
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。