# Phishing sites impersonating Phantom PhishDestroy has recorded 1,008 phishing domains impersonating Phantom since 2025-07-17, 27 of them in the last 30 days. The most used registrars are Cloudflare and MarkMonitor; the most common TLDs are .com and .dev. The official Phantom domain is phantom.com: any other site asking for your login or wallet is not Phantom. 1,008Domains, all time 27Last 30 days 364Online at last check 187Confirmed takedowns ## New domains in the last 90 days Phantom phishing domains detected per day: 114 from 2026-07-25 to 2026-10-22; peak 8. ## How to tell a fake Phantom site Official domains: phantom.com, phantom.app. Words most often added to the brand in reported domains: wallet, phantomwalletdownload, phantomwallet, phantomeextensionn, wallett, phantomwalletextensiondownload, created, phntom, eng, typedream. - Type the address yourself or use a bookmark; phishing links for Phantom arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Phantom will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Phantom phishing domains The 50 most recently detected domains impersonating Phantom Domain | First detected | Status at last check | Registrar | [whspr.finance](https://phishdestroy.io/domain/whspr.finance/) | 2026-10-20 | Online | NICENIC | [app.phantomlocal.com](https://phishdestroy.io/domain/app.phantomlocal.com/) | 2026-10-19 | Online | GoDaddy.com | [ccreator.io](https://phishdestroy.io/domain/ccreator.io/) | 2026-10-19 | Offline | GoDaddy.com | [tiers-velit.app](https://phishdestroy.io/domain/tiers-velit.app/) | 2026-10-19 | Online | NICENIC | [yearofslu.com](https://phishdestroy.io/domain/yearofslu.com/) | 2026-10-17 | Online | ENOM | [dk-phantom.ru](https://phishdestroy.io/domain/dk-phantom.ru/) | 2026-10-17 | Online | — | [trade-phantom.top](https://phishdestroy.io/domain/trade-phantom.top/) | 2026-10-16 | Unknown | NICENIC | [phantomcard.live](https://phishdestroy.io/domain/phantomcard.live/) | 2026-10-13 | Online | NameSilo | [bentleytrikedirect.shop](https://phishdestroy.io/domain/bentleytrikedirect.shop/) | 2026-10-13 | Offline | Dynadot | [bbalabs.shop](https://phishdestroy.io/domain/bbalabs.shop/) | 2026-10-11 | Offline | Dynadot | [barnettcrossbowshunting.shop](https://phishdestroy.io/domain/barnettcrossbowshunting.shop/) | 2026-10-11 | Online | Dynadot | [gate-phantom.icu](https://phishdestroy.io/domain/gate-phantom.icu/) | 2026-10-10 | Offline | NICENIC | [gatesolanaphantom.xyz](https://phishdestroy.io/domain/gatesolanaphantom.xyz/) | 2026-10-10 | Unknown | NICENIC | [bajaaoapp.shop](https://phishdestroy.io/domain/bajaaoapp.shop/) | 2026-10-10 | Online | Spaceship | [bacsole.shop](https://phishdestroy.io/domain/bacsole.shop/) | 2026-10-10 | Online | Dynadot | [baccafit.shop](https://phishdestroy.io/domain/baccafit.shop/) | 2026-10-10 | Online | Dynadot | [unisport-phantom.app](https://phishdestroy.io/domain/unisport-phantom.app/) | 2026-10-09 | Online | Name.com | [phantom.larpshop.cloud](https://phishdestroy.io/domain/phantom.larpshop.cloud/) | 2026-10-09 | Offline | OVH | [authenticatedhq.shop](https://phishdestroy.io/domain/authenticatedhq.shop/) | 2026-10-08 | Online | Dynadot | [humanpad.digital](https://phishdestroy.io/domain/humanpad.digital/) | 2026-10-07 | Online | NICENIC | [solperps.fun](https://phishdestroy.io/domain/solperps.fun/) | 2026-10-07 | Online | Name.com | [arenalaunch.fun](https://phishdestroy.io/domain/arenalaunch.fun/) | 2026-10-04 | Online | Porkbun | [eng-phantomwallet.com](https://phishdestroy.io/domain/eng-phantomwallet.com/) | 2026-10-03 | Online | NICENIC | [apolloscootersshop.shop](https://phishdestroy.io/domain/apolloscootersshop.shop/) | 2026-10-02 | Online | Dynadot | [alcvinyledit.shop](https://phishdestroy.io/domain/alcvinyledit.shop/) | 2026-09-26 | Offline | Dynadot | [phantom-plateau.com](https://phishdestroy.io/domain/phantom-plateau.com/) | 2026-09-23 | Online | Dynadot | [web3phantom.cc](https://phishdestroy.io/domain/web3phantom.cc/) | 2026-09-22 | Online | Gname.com | [phantomchain.online](https://phishdestroy.io/domain/phantomchain.online/) | 2026-09-19 | Offline | NameCheap | [mistclaw-phantom.com](https://phishdestroy.io/domain/mistclaw-phantom.com/) | 2026-09-18 | Online | Porkbun | [thunderbloom-phantom.com](https://phishdestroy.io/domain/thunderbloom-phantom.com/) | 2026-09-18 | Online | Porkbun | [phantom-app-2mt.pages.dev](https://phishdestroy.io/domain/phantom-app-2mt.pages.dev/) | 2026-09-15 | Online | Cloudflare Pages | [phantom-chat.pages.dev](https://phishdestroy.io/domain/phantom-chat.pages.dev/) | 2026-09-14 | Online | CloudFlare | [phantom-wollwt-us.wasmer.app](https://phishdestroy.io/domain/phantom-wollwt-us.wasmer.app/) | 2026-09-13 | Offline | Wasmer | [phantomwallet-solana.godaddysites.com](https://phishdestroy.io/domain/phantomwallet-solana.godaddysites.com/) | 2026-09-13 | Online | GoDaddy.com | [phantom1-wallet.godaddysites.com](https://phishdestroy.io/domain/phantom1-wallet.godaddysites.com/) | 2026-09-12 | Online | GoDaddy Sites | [fortunephantomai.com](https://phishdestroy.io/domain/fortunephantomai.com/) | 2026-09-11 | Online | Sav.com | [verify-shield.online](https://phishdestroy.io/domain/verify-shield.online/) | 2026-09-11 | Offline | GoDaddy.com | [phantomv2.pro](https://phishdestroy.io/domain/phantomv2.pro/) | 2026-09-11 | Offline | HOSTINGER operations | [phant-tomiowalet.gitbook.io](https://phishdestroy.io/domain/phant-tomiowalet.gitbook.io/) | 2026-09-11 | Offline | Cloudflare | [stashphantom.cc](https://phishdestroy.io/domain/stashphantom.cc/) | 2026-09-11 | Online | Spaceship | [phantomair.top](https://phishdestroy.io/domain/phantomair.top/) | 2026-09-11 | Unknown | NICENIC | [phantom-lottery.vercel.app](https://phishdestroy.io/domain/phantom-lottery.vercel.app/) | 2026-09-11 | Online | Vercel | [mysticdao.click](https://phishdestroy.io/domain/mysticdao.click/) | 2026-09-11 | Offline | Global Domain | [aestherekmewear.shop](https://phishdestroy.io/domain/aestherekmewear.shop/) | 2026-09-09 | Online | Dynadot | [aestherekme.shop](https://phishdestroy.io/domain/aestherekme.shop/) | 2026-09-09 | Online | Dynadot | [phantomapp.io](https://phishdestroy.io/domain/phantomapp.io/) | 2026-09-09 | Online | NAMECHEAP | [tryphantom.xyz](https://phishdestroy.io/domain/tryphantom.xyz/) | 2026-09-09 | Offline | GoDaddy.com | [phantompred.pages.dev](https://phishdestroy.io/domain/phantompred.pages.dev/) | 2026-09-09 | Offline | Cloudflare Pages | [adoretail.shop](https://phishdestroy.io/domain/adoretail.shop/) | 2026-09-09 | Online | Dynadot | [abovethecloudslabel.shop](https://phishdestroy.io/domain/abovethecloudslabel.shop/) | 2026-09-09 | Online | Dynadot | [All 1,008 Phantom reports](https://phishdestroy.io/domain/?brand=Phantom) ## Where they are registered and hosted ### Registrars - Cloudflare182 - [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)58 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)54 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)38 - [GOOGLE (ASN: 15169)](https://phishdestroy.io/registrar/google/)37 - CSC Corporate Domains31 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)29 - [Gname.com](https://phishdestroy.io/registrar/name-com/)29 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)206 - [.dev](https://phishdestroy.io/tld/dev/)162 - [.app](https://phishdestroy.io/tld/app/)78 - [.io](https://phishdestroy.io/tld/io/)36 - [.xyz](https://phishdestroy.io/tld/xyz/)36 - [.fun](https://phishdestroy.io/tld/fun/)32 - [.at](https://phishdestroy.io/tld/at/)26 - [.top](https://phishdestroy.io/tld/top/)23 ### Hosting networks - CLOUDFLARENET, US266 - Cloudflare, Inc.160 - CLOUDFLARENET - Cloudflare, Inc., US66 - AMAZON-02, US64 - GOOGLE, US60 - Google LLC54 - Amazon.com, Inc.44 - metaspinner-asn metaspinner net GmbH, DE18 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Phantom; share of all PhishDestroy reports: 0.45%. Canonical: https://phishdestroy.io/brand/phantom/