# Phishing sites impersonating Cardano PhishDestroy has recorded 13 phishing domains impersonating Cardano since 2025-12-17, 1 of them in the last 30 days. The most used registrars are NICENIC and Cloudflare; the most common TLDs are .net and .org. The official Cardano domain is cardano.org: any other site asking for your login or wallet is not Cardano. 13Domains, all time 1Last 30 days 13Online at last check 1Confirmed takedowns ## New domains in the last 90 days Cardano phishing domains detected per day: 1 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Cardano site Official domain: cardano.org. Words most often added to the brand in reported domains: snekevent, ada, cardanofoundationdesktop, snekx, snekprize, lenfilabs, sneklabs, sale, surgecardano, cnft. - Type the address yourself or use a bookmark; phishing links for Cardano arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Cardano does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Cardano phishing domains The 13 most recently detected domains impersonating Cardano Domain | First detected | Status at last check | Registrar | [daedaluswallet.net](https://phishdestroy.io/domain/daedaluswallet.net/) | 2026-10-13 | Online | NameSilo | [realfi.finance](https://phishdestroy.io/domain/realfi.finance/) | 2026-06-08 | Online | GoDaddy.com | [adalite.co](https://phishdestroy.io/domain/adalite.co/) | 2026-05-16 | Online | Tucows Domains | [cnft-gift.cielstakepool.com](https://phishdestroy.io/domain/cnft-gift.cielstakepool.com/) | 2026-04-07 | Online | Cloudflare | [sale-surgecardano-com.pages.dev](https://phishdestroy.io/domain/sale-surgecardano-com.pages.dev/) | 2026-03-28 | Online | Cloudflare | [sneklabs.org](https://phishdestroy.io/domain/sneklabs.org/) | 2026-03-28 | Online | NICENIC | [snekevent.org](https://phishdestroy.io/domain/snekevent.org/) | 2026-03-28 | Online | NICENIC | [snekevent.site](https://phishdestroy.io/domain/snekevent.site/) | 2026-03-28 | Online | NICENIC | [snekprize.net](https://phishdestroy.io/domain/snekprize.net/) | 2026-03-28 | Online | NICENIC | [lenfilabs.net](https://phishdestroy.io/domain/lenfilabs.net/) | 2026-03-28 | Online | NICENIC | [snekx.net](https://phishdestroy.io/domain/snekx.net/) | 2026-03-28 | Online | NICENIC | [cardanofoundationdesktop.app](https://phishdestroy.io/domain/cardanofoundationdesktop.app/) | 2026-03-23 | Online | Vercel | [ada.markets](https://phishdestroy.io/domain/ada.markets/) | 2025-12-17 | Taken down | NameCheap | [All 13 Cardano reports](https://phishdestroy.io/domain/?brand=Cardano) ## Where they are registered and hosted ### Registrars - [NICENIC](https://phishdestroy.io/registrar/nicenic/)6 - Cloudflare2 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)1 - Vercel1 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)1 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)1 ### Top-level domains - [.net](https://phishdestroy.io/tld/net/)4 - [.org](https://phishdestroy.io/tld/org/)2 - [.markets](https://phishdestroy.io/tld/markets/)1 - [.app](https://phishdestroy.io/tld/app/)1 - [.site](https://phishdestroy.io/tld/site/)1 - [.dev](https://phishdestroy.io/tld/dev/)1 - [.com](https://phishdestroy.io/tld/com/)1 - [.co](https://phishdestroy.io/tld/co/)1 ### Hosting networks - Cloudflare, Inc.8 - Amazon.com, Inc.2 - GOOGLE-2, US1 - Host Europe GmbH1 - M247 Europe SRL1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Cardano; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/cardano/