ScanMalware.com

Security Scan Report: dashboard.phantom-wallet.to

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d6597031-39f0-435a-8df3-433a18b66889Domain and IP registration (RDAP)/api/v1/rdap/d6597031-39f0-435a-8df3-433a18b66889How often this domain was scanned/api/v1/domain/stats/dashboard.phantom-wallet.toScan history for this domain/api/v1/domain/history/dashboard.phantom-wallet.to?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is phantom-wallet.to and was registered 8 months ago.

Submitted URL: https://dashboard.phantom-wallet.to/home/import/index.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing clone of Phantom Wallet on phantom-wallet.to soliciting seed phrases and private keys through 13 password fields — a clear wallet-drainer credential-harvesting page. Never enter a recovery phrase; avoid entirely.

Risk Factors (7)
Brand impersonation of Phantom Wallet on a lookalike non-official domain
Harvests seed phrases and private keys via 13 password fields with no username field
Deceptive hostname constructed from the impersonated brand plus a .to TLD
Unranked domain with no reputation and no published creation date
Page resolves to an IP flagged as a known attacker (generic abuse reputation, weighted low)
HIGH IDS alert: ET DNS query for .to TLD (potentially bad traffic)
Encoded DNS-over-HTTPS TXT lookup to an unrelated .sbs domain from inline JS
Domain age information unavailable

Details

Page Title

Phantom Wallet

Scan Type

public

Domain Name Analysis

The domain 'dashboard.phantom-wallet.to' uses the .to country-code top-level domain with subdomain 'dashboard'. Its registrable label 'phantom-wallet' stretches across 14 characters holding four vowels versus 9 consonants, plus 1 hyphen. Segmentation suggests 2 words: phantom, wallet. The median word length lands at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

< Seed phrase or private key Seed Phrase Private Key Ihave a 12-word phrase v 1 2 Don't have seed phrase or private key yet? Create a wallet Next

Page Load Overview

7.33s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:307 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
64%
cryptocurrency blockchain
51%
healthcare medical
49%
technology software
46%
documentation technical
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
831.59.120.58Paris, Île-de-France, France
AS56971Cgi Global Limited
81--

Detected Technologies4

X-UA-Compatible
100%
Nginx
50%
OpenRestyv1.31.8.1
40%
Ant Design
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141729629A075243B061358B563D9B70F798A454BED47C8007ABC57490FD1E92CBB7EE8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:5GJrECMyec+4wYdMh8Ho72Bt4WneU3gUE6zZblMVE6zZhG:qrEiecc8I7cBneU3gU3FWV3TG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16246:khIpqARxqGSGBMEln2T2AE1COhVGQ7ggy0IUHbhLxBdaEUBGA1yRSAgMgEDACRMlGECAAwwIiSQhUlAJ4liJDAmCShyILAFa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7dbdbe7e7ff
Perceptual Hash:e6cc6633993266cc
Difference Hash:10080412324c4c30
Wavelet Hash:fbc3c3db1b030307
Color Hash:N/A

Other Hashes

Crop Resistant:10080412324c4c30

Scan History

Scan history not available

Unable to load historical scan data