Report Overview
Visitedpublic
2026-07-26 18:41:35
Tags
Submit Tags
URL
phantomextension.us
Finishing URL
phantomextension.us/
IP / ASN
23.254.243.66
Title
Phantom Extension - Download Your Phantom Wallet - Phantom
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
phantomextension.us 67 alert(s) on this Host | unknown | 2026-07-22 | 2026-07-26 | 2026-07-26 | 11 kB | 938 kB | 23.254.243.66 |       |
Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.WordPress (CMS, Blogs)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.MySQL (Databases)
MySQL is an open-source relational database management system.PHP:7.4.33 (Programming languages)
PHP is a general-purpose scripting language used for web development.WordPress Block Editor (Page builders)
Sites using the WordPress Block Editor, also known as Gutenberg.WordPress Site Editor (Page builders)
Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.jQuery Migrate:3.4.1 (JavaScript libraries)
Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.Yoast SEO:28.1 (SEO, WordPress plugins)
Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.WordPress:7.0.2 (CMS, Blogs)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | phantomextension.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 | malware | Detects SocGholish obfuscated variant first observed in July 2022 |
| DNS4EU | phantomextension.us | malicious | Sinkholed |
| OpenDNS | phantomextension.us | phishing | Phishing Block |
| Quad9 DNS | phantomextension.us | malicious | Sinkholed |
JavaScript (9)
No JavaScripts
HTTP Transactions (22)
| URL | IP | Response | Size |
|---|