Is phantom-alerts.net a scam? TrustSniffer's high-risk assessment: 0/100

phantom-alerts.net
Download PDF Check another site How we score

Verdict

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

0 OUT OF 100
Critical Risk

phantom-alerts.net shows high-risk / scam indicators.

Sensitive Interaction Risk Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines3 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain age1 months oldMost scam domains are under a year oldRisk
CertificateEncrypted connectionIssued by WE1Noted
Hosted byCLOUDFLARENETServer in USNoted

The page as captured

https://phantom-alerts.net/
Screenshot of the phantom-alerts.net homepage captured during the TrustSniffer assessment
What phantom-alerts.net served when TrustSniffer captured it on 2026-10-22. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: less than 1 year (registration continuity).
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

Full analysis

Overview

phantom-alerts.net is a newly registered website with no readable business content. When the analysis visited its homepage, a Cloudflare interstitial titled as a suspected-phishing warning intercepted the request and returned a blocked response. The visit therefore captured no products, services, operator name or stated purpose, and the site's intended business model cannot be established from what it presents.

Scam/Impersonation Risk

This assessment is cautionary and security-forward. Contradictory signals are present. The domain is blacklisted: several independent threat-intelligence engines currently classify it as malicious or suspicious, and an external blacklist confirms the listing. The interstitial a visitor meets is itself a phishing warning. This reputation signal is decisive. The domain's very recent registration and the protective services in front of it do not offset it. No conflicting legal-entity names and no brand impersonation were observed. No readable pages were available to test for either. The risk therefore rests on reputation and provenance, not on any content the site displays. Behavioural testing found no wallet-drainer activity, no clipboard manipulation, no hidden or externally posting credential forms and no wallet-connection prompts. The pages were heavily dependent on external network calls and generated many script errors, which fits an unstable or minimally built site. The behavioural result is not a clearance, because the content that would carry any sensitive interaction was not reachable. Evidence:

  • Homepage: the page title shown to the automated visit was a Cloudflare "suspected phishing" warning, and the request was blocked with a 403 status after a bot challenge.
  • Reputation: 3 threat-intelligence engines rated the domain malicious and 2 rated it suspicious. An external blacklist listing was also confirmed.
  • Domain provenance: registered on 2026-09-09 (about 43 days old, ~0.12 years), with a registration term running to 2027-09-09.
  • Homepage behaviour: 25 external XHR/fetch calls and 9 external POST requests across 3 test runs, all to recognised destinations. 20 console errors were logged, and up to 95.7% of activity went to external hosts in some runs.

Regulatory Verification Notes

No legal, terms, about or licensing pages could be read, so the site's regulatory standing, corporate identity and disclosure quality cannot be assessed from the site. Nothing here shows a regulated or licensed status. Real-world operator identity has not been independently verified. Registration details show ownership opacity: the registrant is not clearly identified. This is an administrative limitation and not an identity contradiction. No third-party broker or regulatory-watch entry matched the domain, which is neutral context and not a licensing verdict. The domain is registered through Global Domain Group LLC and uses a standard domain-validated certificate. Evidence:

  • Registration: registrar is Global Domain Group LLC, and the registrant is not clearly identified in the registration record.
  • Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-08 with 46 days remaining. Domain validation confirms control of the domain only and says nothing about who operates it.
  • Broker context: no match was found in the third-party broker reputation dataset.

What to Verify Next

Before any engagement, the site's operator and purpose should be established through channels independent of the site. Check whether the claimed operator appears in the relevant financial or consumer-protection registry, and if a licence is claimed, confirm it against the issuing authority's own register. Any contact route or link that led to this domain should be traced back to its source, such as the message, advertisement or referral that supplied it. The sender should be confirmed offline or through an official channel. The domain should also be compared with any established brand that uses a similar name, to rule out lookalike activity. Reputation status should be re-checked over time, since a listing may be cleared or confirmed as the domain matures. Evidence:

  • Homepage: the warning interstitial replaced all site content, so no claimed operator, licence or contact route could be read and none can be taken at face value.
  • Domain provenance: the domain is only weeks old, so it has no track record that could corroborate an operator's claims.
  • Reputation: the current malicious and suspicious classifications are the baseline to re-test against.

Summary Verdict

The overall posture is high risk. Confirmed reputational listings and an interstitial warning outweigh the neutral signals of valid encryption and mainstream hosting. A domain this new, with an unidentified operator and no readable content, has nothing to establish legitimacy against these listings. Identity remains unverified, and the evidence supports a firmly cautionary conclusion.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, and the true origin host was not observable. This protects the site against attack and is a mild mitigating factor. It also prevents independent verification of where the site is actually hosted and could mask rapid content changes, and it does not count as evidence of legitimacy. A heuristic noted a young domain with sparse subdomains, which is unconfirmed and carries no weight beyond the verdict. Evidence:

  • Hosting: served from AS13335 (Cloudflare, Inc., US), with 4 edge IPs observed (2 IPv4, 2 IPv6) and no origin candidates.
  • Bot protection: Cloudflare's challenge mechanism was active on the homepage.

Closing Assessment

Account creation, login, credential entry, wallet connection and any payment or financial interaction with this domain should be avoided until the reputation listings are cleared and the operator is independently verified. At most, passive and isolated viewing is reasonable. Nothing should be downloaded from the site.

Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, registration and ownership.

01 External reputation

  • An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation rule:EXT_BLACKLIST_CRITICAL

02 Hosting and network

  • The domain was registered less than three months ago.Hosting and network rule:DNS_NEW_DOMAIN_90D
  • The domain is young and has almost nothing else set up around it.Hosting and network rule:DNS_SPARSE_YOUNG_DOMAIN

03 Behaviour in a sandbox

  • Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox rule:BEHAV_EXTERNAL_RATIO_HIGH
  • The page produced an unusually high number of errors while it ran.Behaviour in a sandbox rule:BEHAV_CONSOLE_ERRORS_HIGH

04 Registration and ownership

  • The public registration record for this domain is incomplete.Registration and ownership rule:KF_WHOIS_INCOMPLETE

Identity verification

StatusUNKNOWN
Identity score50/100
Identity verification confidence30%
  • AI page analysis unavailable (page captured; identity not AI-verified)

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of phantom-alerts.net.

  • The request stayed on phantom-alerts.net. It was not redirected to another domain. Clear
  • Registration is published under Global Domain Group LLC. Clear
  • DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
  • The registration is paid up to 2027-09-09. Noted
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarGlobal Domain Group LLC
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:3034::6815:1e50
Name serversAURORA.NS.CLOUDFLARE.COM, GRAHAM.NS.CLOUDFLARE.COM
CDN / edge networkDetected (cloudflare)
Resolved IP addresses4
Edge IP addresses4
Likely origin IP addresses0
SSL issuerWE1
SSL expiry2026-12-08
Domain age0.12 years (continuous registration)
Domain expiry2027-09-09
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about phantom-alerts.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about phantom-alerts.net

Is phantom-alerts.net a scam?

TrustSniffer's assessment of phantom-alerts.net found strong scam indicators. It scored 0 out of 100 on 2026-10-22, which is the critical-risk band. The specific signals are listed in the evidence above.

Is phantom-alerts.net safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of phantom-alerts.net?

phantom-alerts.net scored 0 out of 100 on 2026-10-22, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-22 · how we assess · report a mistake