Security Scan Report: phantomguard.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 4 domains to perform 17 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://phantomguard.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Safe Browsing social-engineering flag plus a walkthrough for importing a real crypto wallet into an extension installed from this site — a classic wallet-drainer phishing setup. Do not connect, install or import anything.

Risk Factors (6)
Google Safe Browsing: Social Engineering threat detected
Phishing threat-intel match on the primary domain (single-source, unverified)
Guides victim to import an existing wallet / recovery phrase into an extension installed through the site
Fresh-browser / clean-environment instructions consistent with evading detection
Unranked instant-hosting subdomain used to front a financial-compliance service
Unverifiable financial claims and 'certificates available' assertions
Domain age information unavailable

Details

Page Title

PhantomGuard | AML Verification

Scan Type

public

Domain Name Analysis

The domain 'phantomguard.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'phantomguard'. The second-level label 'vercel' is 6 characters long split between two vowels and four consonants. Breaking it apart gives two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://phantomguard.vercel.app/

Page Load Overview

0.56s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,122 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software86% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
86%
cryptocurrency blockchain
85%
finance banking
75%
government public service
73%
documentation technical
68%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
964.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
179--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D782A62196E9223312E380D67AA45E9ABED1C707CA475244B2FE47C84FD2D93EF5316C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hrm9Vz2sVPx7vcwlB2UgMxmRw8DVWu2bRIo35bXK+K610TKQlKPoYY8:hrLsVPtvcaadG9bX9ZAriJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18684:3OCNxC+DE0ShIRyIlAJYACg1AANoHSRqAlQUEOiJBFEAUDmhVAEAAYhSE6YAscDCiNRgWlATRJjQGYl/JyeCBlJ4RSkFsABA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000c6e4c0c0c0000
Perceptual Hash:92926d6db86dd192
Difference Hash:96cdcdc98d8d7389
Wavelet Hash:020e7f6d4d0d01ff
Color Hash:#87a2c5

Scan History

Scan history not available

Unable to load historical scan data