Phishing sites impersonating Phantom Wallet

PhishDestroy has recorded 14 phishing domains impersonating Phantom Wallet since 2025-10-08, 0 of them in the last 30 days. The most used registrars are NiceNIC and Global Domain; the most common TLDs are .cc and .com. Open Phantom Wallet only from its official app or a saved bookmark.

14
Domains, all time
0
Last 30 days
2
Online at last check
3
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Phantom Wallet phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Phantom Wallet site

Words most often added to the brand in reported domains: solcenter, phantmmm, wallet, polymarkt, dropinfo, olivedrab, salamander, hostingersite, phan, phatom.

  • Type the address yourself or use a bookmark; phishing links for Phantom Wallet arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Phantom Wallet will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Phantom Wallet phishing domains

The 14 most recently detected domains impersonating Phantom Wallet
DomainFirst detectedStatus at last checkRegistrar
trackfy.shop2026-02-24OfflineHOSTINGER operations
mail.esmedicare.com2026-02-23OnlineLiquidNet
lawalex.cc2026-02-19OfflineGlobal Domain
phantom-voted.com2026-02-17OfflineGlobal Domain
phantomvoted.com2026-02-17OfflineHello Internet
phantomvote.org2026-02-17OfflineGlobal Domain
ab.sol-lib.cc2026-02-14OfflineNiceNIC
xn--phatom-yeb.com2026-02-12UnknownNiceNIC
phan.solcenter.cc2026-02-09UnknownNiceNIC
pp.solcenter.cc2026-02-09UnknownNiceNIC
olivedrab-salamander-780422.hostingersite.com2026-01-20Taken downHOSTINGER operations
dropinfo.vercel.app2025-11-22Taken downVercel
polymarkt.cc2025-10-22OfflineSpaceship
phantmmm-wallet.webflow.io2025-10-08Taken downMarkMonitor

All 14 Phantom Wallet reports

Where they are registered and hosted

Registrars

  1. NiceNIC4
  2. Global Domain3
  3. HOSTINGER operations2
  4. MarkMonitor1
  5. Spaceship1
  6. Vercel1
  7. Hello Internet1
  8. LiquidNet1

Top-level domains

  1. .cc5
  2. .com5
  3. .io1
  4. .app1
  5. .org1
  6. .shop1

Hosting networks

  1. Cloudflare, Inc.7
  2. CLOUDFLARENET, US2
  3. AMAZON-02, US1
  4. AS-HOSTINGER Hostinger International Limited, CY1
  5. SERV.HOST GROUP LTD1
  6. CLOUDFLARENET - Cloudflare, Inc., US1
  7. ATMAN-ISP-AS Atman Sp. z o.o., PL1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Phantom Wallet; share of all PhishDestroy reports: 0.01%.