# Phishing sites impersonating Phantom Wallet

PhishDestroy has recorded 14 phishing domains impersonating Phantom Wallet since 2025-10-08, 0 of them in the last 30 days. The most used registrars are NiceNIC and Global Domain; the most common TLDs are .cc and .com. Open Phantom Wallet only from its official app or a saved bookmark.

14Domains, all time

0Last 30 days

2Online at last check

3Confirmed takedowns

## New domains in the last 90 days

Phantom Wallet phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Phantom Wallet site

Words most often added to the brand in reported domains: solcenter, phantmmm, wallet, polymarkt, dropinfo, olivedrab, salamander, hostingersite, phan, phatom.
- Type the address yourself or use a bookmark; phishing links for Phantom Wallet arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Phantom Wallet will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Phantom Wallet phishing domains

The 14 most recently detected domains impersonating Phantom Wallet
Domain | First detected | Status at last check | Registrar | 
[trackfy.shop](https://phishdestroy.io/domain/trackfy.shop/) | 2026-02-24 | Offline | HOSTINGER operations | 
[mail.esmedicare.com](https://phishdestroy.io/domain/mail.esmedicare.com/) | 2026-02-23 | Online | LiquidNet | 
[lawalex.cc](https://phishdestroy.io/domain/lawalex.cc/) | 2026-02-19 | Offline | Global Domain | 
[phantom-voted.com](https://phishdestroy.io/domain/phantom-voted.com/) | 2026-02-17 | Offline | Global Domain | 
[phantomvoted.com](https://phishdestroy.io/domain/phantomvoted.com/) | 2026-02-17 | Offline | Hello Internet | 
[phantomvote.org](https://phishdestroy.io/domain/phantomvote.org/) | 2026-02-17 | Offline | Global Domain | 
[ab.sol-lib.cc](https://phishdestroy.io/domain/ab.sol-lib.cc/) | 2026-02-14 | Offline | NiceNIC | 
[xn--phatom-yeb.com](https://phishdestroy.io/domain/xn--phatom-yeb.com/) | 2026-02-12 | Unknown | NiceNIC | 
[phan.solcenter.cc](https://phishdestroy.io/domain/phan.solcenter.cc/) | 2026-02-09 | Unknown | NiceNIC | 
[pp.solcenter.cc](https://phishdestroy.io/domain/pp.solcenter.cc/) | 2026-02-09 | Unknown | NiceNIC | 
[olivedrab-salamander-780422.hostingersite.com](https://phishdestroy.io/domain/olivedrab-salamander-780422.hostingersite.com/) | 2026-01-20 | Taken down | HOSTINGER operations | 
[dropinfo.vercel.app](https://phishdestroy.io/domain/dropinfo.vercel.app/) | 2025-11-22 | Taken down | Vercel | 
[polymarkt.cc](https://phishdestroy.io/domain/polymarkt.cc/) | 2025-10-22 | Offline | Spaceship | 
[phantmmm-wallet.webflow.io](https://phishdestroy.io/domain/phantmmm-wallet.webflow.io/) | 2025-10-08 | Taken down | MarkMonitor | 

[All 14 Phantom Wallet reports](https://phishdestroy.io/domain/?brand=Phantom Wallet)

## Where they are registered and hosted

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)4
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)3
- [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)2
- [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)1
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)1
- Vercel1
- [Hello Internet](https://phishdestroy.io/registrar/hello-internet/)1
- LiquidNet1

### Top-level domains

- [.cc](https://phishdestroy.io/tld/cc/)5
- [.com](https://phishdestroy.io/tld/com/)5
- [.io](https://phishdestroy.io/tld/io/)1
- [.app](https://phishdestroy.io/tld/app/)1
- [.org](https://phishdestroy.io/tld/org/)1
- [.shop](https://phishdestroy.io/tld/shop/)1

### Hosting networks

- Cloudflare, Inc.7
- CLOUDFLARENET, US2
- AMAZON-02, US1
- AS-HOSTINGER Hostinger International Limited, CY1
- SERV.HOST GROUP LTD1
- CLOUDFLARENET - Cloudflare, Inc., US1
- ATMAN-ISP-AS Atman Sp. z o.o., PL1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Phantom Wallet; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/phantom-wallet/