# Phishing sites impersonating Hashflow

PhishDestroy has recorded 11 phishing domains impersonating Hashflow since 2025-10-28, 0 of them in the last 30 days. The most used registrars are Dynadot and Cloudflare; the most common TLDs are .com and .top. Open Hashflow only from its official app or a saved bookmark.

11Domains, all time

0Last 30 days

2Online at last check

2Confirmed takedowns

## New domains in the last 90 days

Hashflow phishing domains detected per day: 1 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Hashflow site

Words most often added to the brand in reported domains: kamino, swap, layer, komino, kamlnofl, karnino, market, kamlno, finv, fin.
- Type the address yourself or use a bookmark; phishing links for Hashflow arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Hashflow will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Hashflow phishing domains

The 11 most recently detected domains impersonating Hashflow
Domain | First detected | Status at last check | Registrar | 
[kmno.finance](https://phishdestroy.io/domain/kmno.finance/) | 2026-08-06 | Online | Dynadot | 
[kamlnno.top](https://phishdestroy.io/domain/kamlnno.top/) | 2026-01-24 | Offline | Eranet | 
[app-kamino-fin5.top](https://phishdestroy.io/domain/app-kamino-fin5.top/) | 2026-01-23 | Unknown | NiceNIC | 
[app-kamino-finv2.top](https://phishdestroy.io/domain/app-kamino-finv2.top/) | 2026-01-20 | Taken down | NiceNIC | 
[kamlno.pro](https://phishdestroy.io/domain/kamlno.pro/) | 2025-12-03 | Offline | Cloudflare | 
[kamino-market.com](https://phishdestroy.io/domain/kamino-market.com/) | 2025-11-30 | Taken down | Dynadot | 
[karnino.live](https://phishdestroy.io/domain/karnino.live/) | 2025-11-16 | Offline | Cloudflare | 
[kamlnofl.cfd](https://phishdestroy.io/domain/kamlnofl.cfd/) | 2025-11-06 | Offline | Web Commerce Communications | 
[komino.finance](https://phishdestroy.io/domain/komino.finance/) | 2025-10-31 | Online | Cloudflare | 
[kamino-layer.com](https://phishdestroy.io/domain/kamino-layer.com/) | 2025-10-30 | Offline | Dynadot | 
[kamino-swap.com](https://phishdestroy.io/domain/kamino-swap.com/) | 2025-10-28 | Offline | Dynadot | 

[All 11 Hashflow reports](https://phishdestroy.io/domain/?brand=Hashflow)

## Where they are registered and hosted

### Registrars

- [Dynadot](https://phishdestroy.io/registrar/dynadot/)3
- Cloudflare3
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)2
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)1
- [Eranet](https://phishdestroy.io/registrar/eranet/)1
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)1

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)3
- [.top](https://phishdestroy.io/tld/top/)3
- [.finance](https://phishdestroy.io/tld/finance/)2
- [.cfd](https://phishdestroy.io/tld/cfd/)1
- [.live](https://phishdestroy.io/tld/live/)1
- [.pro](https://phishdestroy.io/tld/pro/)1

### Hosting networks

- CLOUDFLARENET, US7
- CLOUDFLARENET - Cloudflare, Inc., US2
- PROSPERO-AS PROSPERO OOO, RU1
- Cloudflare, Inc.1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Hashflow; share of all PhishDestroy reports: 0.00%.

Canonical: https://phishdestroy.io/brand/hashflow/