# Phishing sites impersonating Puffer PhishDestroy has recorded 20 phishing domains impersonating Puffer since 2025-09-12, 9 of them in the last 30 days. The most used registrars are Dynadot and NameSilo; the most common TLDs are .shop and .xyz. Open Puffer only from its official app or a saved bookmark. 20Domains, all time 9Last 30 days 8Online at last check 1Confirmed takedowns ## New domains in the last 90 days Puffer phishing domains detected per day: 9 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Puffer site Words most often added to the brand in reported domains: pufferfinance, claimspufferfi, claims, duplicate, disabled, vote, voting, finance, puffler, alandusaboutique. - Type the address yourself or use a bookmark; phishing links for Puffer arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Puffer will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Puffer phishing domains The 20 most recently detected domains impersonating Puffer Domain | First detected | Status at last check | Registrar | [bodecollection.shop](https://phishdestroy.io/domain/bodecollection.shop/) | 2026-10-20 | Offline | Dynadot | [bernardofashionsdirect.shop](https://phishdestroy.io/domain/bernardofashionsdirect.shop/) | 2026-10-13 | Online | Dynadot | [bbcicecreamarchive.shop](https://phishdestroy.io/domain/bbcicecreamarchive.shop/) | 2026-10-11 | Online | Dynadot | [bancore.shop](https://phishdestroy.io/domain/bancore.shop/) | 2026-10-10 | Online | Dynadot | [babyphatshop.shop](https://phishdestroy.io/domain/babyphatshop.shop/) | 2026-10-09 | Online | Dynadot | [altovogue.shop](https://phishdestroy.io/domain/altovogue.shop/) | 2026-10-06 | Offline | Dynadot | [animalfashion.shop](https://phishdestroy.io/domain/animalfashion.shop/) | 2026-10-04 | Online | Dynadot | [anycubicics.shop](https://phishdestroy.io/domain/anycubicics.shop/) | 2026-10-02 | Online | Dynadot | [alandusaboutique.shop](https://phishdestroy.io/domain/alandusaboutique.shop/) | 2026-09-25 | Online | Dynadot | [puffler.finance](https://phishdestroy.io/domain/puffler.finance/) | 2026-02-26 | Taken down | GNAME.COM | [puffer.express](https://phishdestroy.io/domain/puffer.express/) | 2026-02-26 | Offline | NameSilo | [v3-puffer.net](https://phishdestroy.io/domain/v3-puffer.net/) | 2026-01-25 | Offline | NiceNIC | [pufferfinance-puffer-finance.cc](https://phishdestroy.io/domain/pufferfinance-puffer-finance.cc/) | 2026-01-25 | Unknown | NiceNIC | [app-puffer.xyz](https://phishdestroy.io/domain/app-puffer.xyz/) | 2026-01-05 | Offline | Dynadot | [voting-puffer.app](https://phishdestroy.io/domain/voting-puffer.app/) | 2025-10-14 | Offline | Cloudflare | [vote-puffer.app](https://phishdestroy.io/domain/vote-puffer.app/) | 2025-10-08 | Offline | Cloudflare | [duplicate-disabled-6568.invalid](https://phishdestroy.io/domain/duplicate-disabled-6568.invalid/) | 2025-09-16 | Offline | NameSilo | [pufferfinance.xyz](https://phishdestroy.io/domain/pufferfinance.xyz/) | 2025-09-16 | Online | NameSilo | [claims-puffer.live](https://phishdestroy.io/domain/claims-puffer.live/) | 2025-09-12 | Offline | NameSilo | [claimspufferfi.guru](https://phishdestroy.io/domain/claimspufferfi.guru/) | 2025-09-12 | Offline | Sav.com | [All 20 Puffer reports](https://phishdestroy.io/domain/?brand=Puffer) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)9 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)4 - Cloudflare2 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)2 - [Sav.com](https://phishdestroy.io/registrar/sav-com/)1 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)1 - [GNAME.COM](https://phishdestroy.io/registrar/name-com/)1 ### Top-level domains - [.shop](https://phishdestroy.io/tld/shop/)9 - [.xyz](https://phishdestroy.io/tld/xyz/)2 - [.app](https://phishdestroy.io/tld/app/)2 - [.guru](https://phishdestroy.io/tld/guru/)1 - [.live](https://phishdestroy.io/tld/live/)1 - [.invalid](https://phishdestroy.io/tld/invalid/)1 - [.cc](https://phishdestroy.io/tld/cc/)1 - [.net](https://phishdestroy.io/tld/net/)1 ### Hosting networks - CLOUDFLARENET, US8 - Malakmadze Web LLC5 - malakmadze Malakmadze Web LLC, GE4 - Cloudflare, Inc.2 - RAILNET Railnet LLC, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Puffer; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/puffer/