phantomwalletextensiondownload[.]blogspot[.]com[.]au
“Phantom wallet extension download”
phantomwalletextensiondownload.blogspot.com.au — 未验证. 品牌冒充:Phantom; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 9/91 (alphaMountain.ai, BitDefender, CyRadar, ESET, Fortinet); CF Radar malicious; PhishDestroy score 77/100. 注册商: MarkMonitor.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This site, titled "Phantom wallet extension download," impersonates the Phantom cryptocurrency wallet brand to pose a threat of credential theft or wallet compromise. As a cryptocurrency scam, it attempts to deceive users into downloading a malicious extension, likely to steal private keys or login credentials.
Technical evidence includes detection by 14 out of 95 VirusTotal vendors, with flags from ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The site is hosted on IP 216.58.206.33 in Germany, under AS15169 Google LLC, and registered via MarkMonitor, Inc. SSL is issued by Google Trust Services (WE2), and nameservers are ns1 through ns4.google.com. No creation date is provided.
The site is currently offline, reducing immediate risk, but the domain remains a high-risk threat due to its impersonation of a popular cryptocurrency brand and multiple blocklist entries. Users should avoid any interaction with this domain.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 6 identified
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。