# Phishing sites impersonating Scroll PhishDestroy has recorded 161 phishing domains impersonating Scroll since 2025-07-12, 12 of them in the last 30 days. The most used registrars are Cloudflare and HOSTINGER operations; the most common TLDs are .com and .dev. Open Scroll only from its official app or a saved bookmark. 161Domains, all time 12Last 30 days 87Online at last check 15Confirmed takedowns ## New domains in the last 90 days Scroll phishing domains detected per day: 38 from 2026-07-25 to 2026-10-22; peak 4. ## How to tell a fake Scroll site Words most often added to the brand in reported domains: airdrop, usa, duplicate, disabled, nft, sol, encryptfile, proposal, beninmaritime, alipay. - Type the address yourself or use a bookmark; phishing links for Scroll arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Scroll will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Scroll phishing domains The 50 most recently detected domains impersonating Scroll Domain | First detected | Status at last check | Registrar | [vacuumadj.com](https://phishdestroy.io/domain/vacuumadj.com/) | 2026-10-17 | Online | Gransy, s.r.o | [icpnt.org](https://phishdestroy.io/domain/icpnt.org/) | 2026-10-16 | Online | TUCOWS.COM | [trustcashless.com](https://phishdestroy.io/domain/trustcashless.com/) | 2026-10-14 | Online | NAMECHEAP | [vraxairdrop.lol](https://phishdestroy.io/domain/vraxairdrop.lol/) | 2026-10-13 | Online | NameSilo | [doge1sol.space](https://phishdestroy.io/domain/doge1sol.space/) | 2026-10-13 | Online | NameSilo | [artificialdoge.xyz](https://phishdestroy.io/domain/artificialdoge.xyz/) | 2026-10-13 | Online | Global Domain | [scr111.site](https://phishdestroy.io/domain/scr111.site/) | 2026-10-13 | Online | NICENIC | [iqminds.me](https://phishdestroy.io/domain/iqminds.me/) | 2026-10-11 | Online | GoDaddy.com | [freepalestine.top](https://phishdestroy.io/domain/freepalestine.top/) | 2026-10-11 | Online | Spaceship | [jacketamerica.com](https://phishdestroy.io/domain/jacketamerica.com/) | 2026-10-11 | Online | Dynadot | [itelligent.nl](https://phishdestroy.io/domain/itelligent.nl/) | 2026-10-11 | Online | The Registrar | [wascontainer.com](https://phishdestroy.io/domain/wascontainer.com/) | 2026-09-23 | Online | CV. Rumahweb Indonesia | [shophorne.live](https://phishdestroy.io/domain/shophorne.live/) | 2026-09-21 | Offline | Dynadot | [auberge-lorraine-levaltin.fr](https://phishdestroy.io/domain/auberge-lorraine-levaltin.fr/) | 2026-09-21 | Online | IONOS SE | [shoppl.cc](https://phishdestroy.io/domain/shoppl.cc/) | 2026-09-20 | Online | HiChina (www.net.cn) | [figstake.com](https://phishdestroy.io/domain/figstake.com/) | 2026-09-19 | Offline | Key-Systems | [thespiritualspa.live](https://phishdestroy.io/domain/thespiritualspa.live/) | 2026-09-19 | Offline | Dynadot | [quantumglobalbnk.online](https://phishdestroy.io/domain/quantumglobalbnk.online/) | 2026-09-19 | Online | Cosmotown | [alipay.grandpashabet7988.com](https://phishdestroy.io/domain/alipay.grandpashabet7988.com/) | 2026-09-17 | Online | Name.com | [beta-login.grandpashabet7305.com](https://phishdestroy.io/domain/beta-login.grandpashabet7305.com/) | 2026-09-17 | Online | Name.com | [alipay.hizlicicekci.com](https://phishdestroy.io/domain/alipay.hizlicicekci.com/) | 2026-09-17 | Offline | Name.com | [mxservicexpres.to](https://phishdestroy.io/domain/mxservicexpres.to/) | 2026-09-17 | Online | Government of Kingdom of Tonga | [dekorbuy.live](https://phishdestroy.io/domain/dekorbuy.live/) | 2026-09-10 | Online | Dynadot | [t-constructioncompany.com](https://phishdestroy.io/domain/t-constructioncompany.com/) | 2026-09-09 | Online | Squarespace Domains | [scroll-anime.vercel.app](https://phishdestroy.io/domain/scroll-anime.vercel.app/) | 2026-09-08 | Online | Vercel | [esuntera.org](https://phishdestroy.io/domain/esuntera.org/) | 2026-09-05 | Offline | Trustname.com | [scroll-dlm.pages.dev](https://phishdestroy.io/domain/scroll-dlm.pages.dev/) | 2026-08-26 | Online | Cloudflare Pages | [fig-stake.com](https://phishdestroy.io/domain/fig-stake.com/) | 2026-08-26 | Online | Key-Systems | [gtrmod.com](https://phishdestroy.io/domain/gtrmod.com/) | 2026-08-24 | Online | NAMECHEAP | [scroll-spin.fun](https://phishdestroy.io/domain/scroll-spin.fun/) | 2026-08-17 | Offline | PublicDomainRegistry.com | [robobrokers.xyz](https://phishdestroy.io/domain/robobrokers.xyz/) | 2026-08-07 | Online | NICENIC | [uplevelrewards.club](https://phishdestroy.io/domain/uplevelrewards.club/) | 2026-08-04 | Online | GoDaddy.com | [demo2.jasinfotech.co.in](https://phishdestroy.io/domain/demo2.jasinfotech.co.in/) | 2026-08-04 | Online | HOSTINGER operations | [dualspace.fun](https://phishdestroy.io/domain/dualspace.fun/) | 2026-08-03 | Offline | Registrar of Domain Names REG.RU | [us-33autosales.com](https://phishdestroy.io/domain/us-33autosales.com/) | 2026-07-31 | Online | NICENIC | [orbitalforgelabs.com](https://phishdestroy.io/domain/orbitalforgelabs.com/) | 2026-07-30 | Online | Ultahost | [daveymorse.com](https://phishdestroy.io/domain/daveymorse.com/) | 2026-07-27 | Online | Squarespace Domains II | [kauche.dev](https://phishdestroy.io/domain/kauche.dev/) | 2026-07-27 | Online | Squarespace Domains II | [neverdoom.life](https://phishdestroy.io/domain/neverdoom.life/) | 2026-07-22 | Online | GoDaddy.com | [proposal-scroll.live](https://phishdestroy.io/domain/proposal-scroll.live/) | 2026-06-28 | Online | NICENIC | [beninmaritime.org](https://phishdestroy.io/domain/beninmaritime.org/) | 2026-06-21 | Online | Web Commerce Communications dba WebNic.c | [beninmaritime.co](https://phishdestroy.io/domain/beninmaritime.co/) | 2026-06-21 | Online | — | [voting-scroll.xyz](https://phishdestroy.io/domain/voting-scroll.xyz/) | 2026-06-20 | Unknown | NICENIC | [proposal-scroll.xyz](https://phishdestroy.io/domain/proposal-scroll.xyz/) | 2026-06-19 | Unknown | NICENIC | [cloudbank-nft-mining-dev.pages.dev](https://phishdestroy.io/domain/cloudbank-nft-mining-dev.pages.dev/) | 2026-06-15 | Online | Cloudflare | [encryptfile.cc](https://phishdestroy.io/domain/encryptfile.cc/) | 2026-06-15 | Unknown | NICENIC | [pb489.encryptfile.cc](https://phishdestroy.io/domain/pb489.encryptfile.cc/) | 2026-06-15 | Unknown | NICENIC | [scroll.exchange](https://phishdestroy.io/domain/scroll.exchange/) | 2026-06-15 | Online | Amazon Registrar | [scroll.network](https://phishdestroy.io/domain/scroll.network/) | 2026-06-13 | Offline | Tucows Domains | [airdrop-yupaopao.xyz](https://phishdestroy.io/domain/airdrop-yupaopao.xyz/) | 2026-06-13 | Online | Global Domain | [All 161 Scroll reports](https://phishdestroy.io/domain/?brand=Scroll) ## Where they are registered and hosted ### Registrars - Cloudflare12 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)11 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)9 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)9 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)7 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)6 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)6 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)6 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)61 - [.dev](https://phishdestroy.io/tld/dev/)9 - [.xyz](https://phishdestroy.io/tld/xyz/)8 - [.live](https://phishdestroy.io/tld/live/)8 - [.app](https://phishdestroy.io/tld/app/)8 - [.org](https://phishdestroy.io/tld/org/)7 - [.io](https://phishdestroy.io/tld/io/)6 - [.online](https://phishdestroy.io/tld/online/)5 ### Hosting networks - Cloudflare, Inc.37 - CLOUDFLARENET, US36 - Hostinger International Limited9 - CLOUDFLARENET - Cloudflare, Inc., US7 - AS-COLOCROSSING, US5 - AMAZON-02, US5 - AS-HOSTINGER Hostinger International Limited, CY5 - Amazon.com, Inc.4 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Scroll; share of all PhishDestroy reports: 0.07%. Canonical: https://phishdestroy.io/brand/scroll/