# Phishing sites impersonating Blur PhishDestroy has recorded 20 phishing domains impersonating Blur since 2024-03-20, 1 of them in the last 30 days. The most used registrars are Cloudflare and NameCheap; the most common TLDs are .dev and .com. The official Blur domain is blur.io: any other site asking for your login or wallet is not Blur. 20Domains, all time 1Last 30 days 9Online at last check 2Confirmed takedowns ## New domains in the last 90 days Blur phishing domains detected per day: 2 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Blur site Official domain: blur.io. Words most often added to the brand in reported domains: nft, airdropblurcoin, blurioseason, blurcoin, blurwin, blures, blurrww, netadata, aga, simpleblur. - Type the address yourself or use a bookmark; phishing links for Blur arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Blur will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Blur phishing domains The 20 most recently detected domains impersonating Blur Domain | First detected | Status at last check | Registrar | [blurindia.shop](https://phishdestroy.io/domain/blurindia.shop/) | 2026-10-18 | Online | Dynadot | [blurbridge.com](https://phishdestroy.io/domain/blurbridge.com/) | 2026-08-09 | Offline | NameCheap | [blur-nft.xyz](https://phishdestroy.io/domain/blur-nft.xyz/) | 2026-07-20 | Offline | PublicDomainRegistry.com | [app.blurcards.com](https://phishdestroy.io/domain/app.blurcards.com/) | 2026-06-20 | Online | GoDaddy.com | [reward-blur-io.xyz](https://phishdestroy.io/domain/reward-blur-io.xyz/) | 2026-06-19 | Online | GMO Internet | [simpleblur.pages.dev](https://phishdestroy.io/domain/simpleblur.pages.dev/) | 2026-06-15 | Online | Cloudflare Pages | [blurcity.com](https://phishdestroy.io/domain/blurcity.com/) | 2026-06-15 | Online | NameCheap | [blur-io-eth.pages.dev](https://phishdestroy.io/domain/blur-io-eth.pages.dev/) | 2026-04-29 | Taken down | Cloudflare | [blur-marketplace.pages.dev](https://phishdestroy.io/domain/blur-marketplace.pages.dev/) | 2026-04-24 | Online | Cloudflare | [blur-collections.pages.dev](https://phishdestroy.io/domain/blur-collections.pages.dev/) | 2026-03-29 | Online | Cloudflare | [blur-nft.pages.dev](https://phishdestroy.io/domain/blur-nft.pages.dev/) | 2026-03-28 | Online | Cloudflare | [aga123.pages.dev](https://phishdestroy.io/domain/aga123.pages.dev/) | 2026-03-24 | Offline | Cloudflare | [netadata.pages.dev](https://phishdestroy.io/domain/netadata.pages.dev/) | 2026-03-22 | Offline | Cloudflare | [blurrww.pages.dev](https://phishdestroy.io/domain/blurrww.pages.dev/) | 2026-03-22 | Offline | Cloudflare | [blures.xyz](https://phishdestroy.io/domain/blures.xyz/) | 2026-02-13 | Unknown | NiceNIC | [blurwin.com](https://phishdestroy.io/domain/blurwin.com/) | 2025-12-25 | Unknown | NiceNIC | [airdropblurcoin.live](https://phishdestroy.io/domain/airdropblurcoin.live/) | 2025-09-08 | Taken down | Web Commerce Communications | [blur.gay](https://phishdestroy.io/domain/blur.gay/) | 2025-08-09 | Online | NameCheap | [blurcoin.app](https://phishdestroy.io/domain/blurcoin.app/) | 2024-06-07 | Offline | arin | [blurioseason2.com](https://phishdestroy.io/domain/blurioseason2.com/) | 2024-03-20 | Offline | arin | [All 20 Blur reports](https://phishdestroy.io/domain/?brand=Blur) ## Where they are registered and hosted ### Registrars - Cloudflare7 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)3 - arin2 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)2 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)1 - Cloudflare Pages1 - [GMO Internet](https://phishdestroy.io/registrar/gmo-internet/)1 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1 ### Top-level domains - [.dev](https://phishdestroy.io/tld/dev/)8 - [.com](https://phishdestroy.io/tld/com/)5 - [.xyz](https://phishdestroy.io/tld/xyz/)3 - .gay1 - [.live](https://phishdestroy.io/tld/live/)1 - [.app](https://phishdestroy.io/tld/app/)1 - [.shop](https://phishdestroy.io/tld/shop/)1 ### Hosting networks - Cloudflare, Inc.8 - CLOUDFLARENET, US4 - AMAZON-02, US1 - CLOUDFLARENET - Cloudflare, Inc., US1 - Amarutu Technology Ltd1 - AS16509 Amazon.com, Inc.1 - Google LLC1 - MHost LLC1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Blur; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/blur/