Security Report: app.phantomlocal.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a63edf36-0da4-482d-8405-302c021a41f9 Domain and IP registration (RDAP)/api/v1/rdap/a63edf36-0da4-482d-8405-302c021a41f9How often this domain was scanned/api/v1/domain/stats/app.phantomlocal.com Scan history for this domain/api/v1/domain/history/app.phantomlocal.com?limit=15

This website contacted 9 IPs in 1 country across 5 domains to perform 28 HTTP transactions. The main domain is phantomlocal.com and was registered 3 years 10 months ago.

Submitted URL: https://app.phantomlocal.com/welcome

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Site brands itself 'Phantom' on phantomlocal.com, not the recognised Phantom wallet domain, and pushes an extension install plus sign-up. No forms, Indicators of Compromise or malware on the page, but the brand/domain mismatch warrants caution.

Risk Factors (3)

Brand/domain mismatch: site presents itself as 'Phantom' on a domain that is not the recognised Phantom wallet domain

Extension-install + account-creation onboarding on a non-official brand domain is a known fake-wallet lure pattern

Domain unranked in Cisco Umbrella, giving no independent corroboration of the brand claim

Safety Factors (5)

Domain has been registered for over 3 years (since 2023-01-15)

No credential, password or payment fields anywhere on the page

No Indicators of Compromise, hunting rule malware matches, IDS alerts or Safe Browsing hits

No cross-origin form submission or credential exfiltration detected

Download link is presented as pointing to the official Chrome Webstore rather than a direct binary

Domain age information unavailable

Details

Page Title

Phantom - Welcome

Scan Type

public

Favicon Hash

MMH3: -1656109288

MD5: c535d9dde1d5dd39a383abeaaa3d9bba

Domain Name Analysis

The domain 'app.phantomlocal.com' uses the commercial generic top-level domain (.com) and includes subdomain 'app'. The registrable portion 'phantomlocal' spans 12 characters with 4 vowels and eight consonants. Breaking it apart gives two words: phantom, local. Median word length comes out to 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.97s

Total Load Time

509 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:275 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software30% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	66.33.60.130Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	76.76.21.164Aws · CLOUD	Walnut, California, United States	AS16509Amazon.com, Inc.
3	35.209.208.156Google · CDN	Council Bluffs, Iowa, United States	AS15169Google LLC
3	192.178.183.95Google · CDN	United States	AS15169Google LLC
3	192.178.183.94Google · CDN	United States	AS15169Google LLC
3	104.19.229.21Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.18.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	66.33.60.34Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	104.18.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
28	9	-	-