# Phishing sites impersonating Documentlure

PhishDestroy has recorded 10 phishing domains impersonating Documentlure since 2026-06-03, 2 of them in the last 30 days. The most used registrars are Launchpad.com and Hosting Concepts dba Openprovider; the most common TLDs are .com and .de. Open Documentlure only from its official app or a saved bookmark.

10Domains, all time

2Last 30 days

9Online at last check

1Confirmed takedowns

## New domains in the last 90 days

Documentlure phishing domains detected per day: 9 from 2026-07-25 to 2026-10-22; peak 2.

## How to tell a fake Documentlure site

Words most often added to the brand in reported domains: almarabeaunited, kunststeinviertel, thetechnofy, zappitellicpasinc, biturbo, ingeko, energies, carivo, finaznauto, olhodesogra.
- Type the address yourself or use a bookmark; phishing links for Documentlure arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Documentlure will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Documentlure phishing domains

The 10 most recently detected domains impersonating Documentlure
Domain | First detected | Status at last check | Registrar | 
[2hmes.com](https://phishdestroy.io/domain/2hmes.com/) | 2026-10-16 | Online | NameSilo | 
[olhodesogra.com.br](https://phishdestroy.io/domain/olhodesogra.com.br/) | 2026-10-09 | Offline | — | 
[finaznauto.es](https://phishdestroy.io/domain/finaznauto.es/) | 2026-09-04 | Online | — | 
[carivo.vu](https://phishdestroy.io/domain/carivo.vu/) | 2026-09-03 | Online | — | 
[ingeko-energies.fr](https://phishdestroy.io/domain/ingeko-energies.fr/) | 2026-08-21 | Online | OVH | 
[biturbo.com.pk](https://phishdestroy.io/domain/biturbo.com.pk/) | 2026-08-11 | Online | — | 
[zappitellicpasinc.com](https://phishdestroy.io/domain/zappitellicpasinc.com/) | 2026-08-06 | Online | ENOM | 
[thetechnofy.in](https://phishdestroy.io/domain/thetechnofy.in/) | 2026-08-06 | Online | Hosting Concepts dba Openprovider | 
[kunststeinviertel.de](https://phishdestroy.io/domain/kunststeinviertel.de/) | 2026-07-31 | Online | — | 
[almarabeaunited.com](https://phishdestroy.io/domain/almarabeaunited.com/) | 2026-06-03 | Taken down | Launchpad.com | 

[All 10 Documentlure reports](https://phishdestroy.io/domain/?brand=Documentlure)

## Where they are registered and hosted

### Registrars

- Launchpad.com1
- Hosting Concepts dba Openprovider1
- [ENOM](https://phishdestroy.io/registrar/enom/)1
- [OVH](https://phishdestroy.io/registrar/ovh/)1
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)1

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)3
- [.de](https://phishdestroy.io/tld/de/)1
- [.in](https://phishdestroy.io/tld/in/)1
- [.pk](https://phishdestroy.io/tld/pk/)1
- [.fr](https://phishdestroy.io/tld/fr/)1
- [.vu](https://phishdestroy.io/tld/vu/)1
- [.es](https://phishdestroy.io/tld/es/)1
- [.br](https://phishdestroy.io/tld/br/)1

### Hosting networks

- ORACLE-BMC-31898 - Oracle Corporation, US2
- Microsoft Corporation2
- OVH SAS1
- ATMAN-ISP-AS Atman Sp. z o.o., PL1
- Societe Francaise Du Radiotelephone - SFR SA1
- Host4Geeks LLC1
- Cloudflare, Inc.1
- HETZNER-AS Hetzner Online GmbH, DE1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Documentlure; share of all PhishDestroy reports: 0.00%.

Canonical: https://phishdestroy.io/brand/documentlure/