# Phishing sites impersonating Signal PhishDestroy has recorded 136 phishing domains impersonating Signal since 2025-08-12, 40 of them in the last 30 days. The most used registrars are Dynadot and NiceNIC; the most common TLDs are .com and .net. Open Signal only from its official app or a saved bookmark. 136Domains, all time 40Last 30 days 92Online at last check 17Confirmed takedowns ## New domains in the last 90 days Signal phishing domains detected per day: 69 from 2026-07-25 to 2026-10-22; peak 15. ## How to tell a fake Signal site Words most often added to the brand in reported domains: moonbirds, jailed, ellonxia, alphatrack, builltt, vote, jaileddotfun, jailedotfun, bridge, duplicate. - Type the address yourself or use a bookmark; phishing links for Signal arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Signal does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Signal phishing domains The 50 most recently detected domains impersonating Signal Domain | First detected | Status at last check | Registrar | [autotradenexus.net](https://phishdestroy.io/domain/autotradenexus.net/) | 2026-10-22 | Online | Dynadot | [auronixpro.net](https://phishdestroy.io/domain/auronixpro.net/) | 2026-10-22 | Online | Dynadot | [autovestiqo.de](https://phishdestroy.io/domain/autovestiqo.de/) | 2026-10-22 | Online | — | [aurefondaise.com](https://phishdestroy.io/domain/aurefondaise.com/) | 2026-10-22 | Online | Dynadot | [aurorarendivo.net](https://phishdestroy.io/domain/aurorarendivo.net/) | 2026-10-22 | Online | Dynadot | [auraxcore92.org](https://phishdestroy.io/domain/auraxcore92.org/) | 2026-10-22 | Online | Dynadot | [apexwave.org](https://phishdestroy.io/domain/apexwave.org/) | 2026-10-21 | Online | Dynadot | [apexcapitalstrade.com](https://phishdestroy.io/domain/apexcapitalstrade.com/) | 2026-10-21 | Online | Dynadot | [easymorsecode.com](https://phishdestroy.io/domain/easymorsecode.com/) | 2026-10-21 | Online | Gransy, s.r.o | [anycredit.net](https://phishdestroy.io/domain/anycredit.net/) | 2026-10-21 | Online | Dynadot | [anresources.net](https://phishdestroy.io/domain/anresources.net/) | 2026-10-21 | Online | Dynadot | [amselquarz.com](https://phishdestroy.io/domain/amselquarz.com/) | 2026-10-21 | Online | Dynadot | [ampleeparature.com](https://phishdestroy.io/domain/ampleeparature.com/) | 2026-10-21 | Online | Dynadot | [altapayvale.com](https://phishdestroy.io/domain/altapayvale.com/) | 2026-10-20 | Online | Dynadot | [tempswg.sbs](https://phishdestroy.io/domain/tempswg.sbs/) | 2026-10-20 | Online | NICENIC | [africapitalai.net](https://phishdestroy.io/domain/africapitalai.net/) | 2026-10-20 | Online | Dynadot | [aivextrade.net](https://phishdestroy.io/domain/aivextrade.net/) | 2026-10-20 | Online | Dynadot | [aiprojectinvest.net](https://phishdestroy.io/domain/aiprojectinvest.net/) | 2026-10-20 | Online | Dynadot | [aiprofitengine.org](https://phishdestroy.io/domain/aiprofitengine.org/) | 2026-10-20 | Online | Dynadot | [ailukaiacademy.net](https://phishdestroy.io/domain/ailukaiacademy.net/) | 2026-10-20 | Online | Dynadot | [aiincomeenginepro.com](https://phishdestroy.io/domain/aiincomeenginepro.com/) | 2026-10-20 | Online | Dynadot | [aiavenuetrade.com](https://phishdestroy.io/domain/aiavenuetrade.com/) | 2026-10-20 | Online | Dynadot | [aftynepaxai.com](https://phishdestroy.io/domain/aftynepaxai.com/) | 2026-10-20 | Offline | Dynadot | [afrilegacyai.com](https://phishdestroy.io/domain/afrilegacyai.com/) | 2026-10-20 | Online | Dynadot | [aethertradetrade.com](https://phishdestroy.io/domain/aethertradetrade.com/) | 2026-10-20 | Online | Dynadot | [adriatradeai.net](https://phishdestroy.io/domain/adriatradeai.net/) | 2026-10-20 | Online | Dynadot | [adani-one.com](https://phishdestroy.io/domain/adani-one.com/) | 2026-10-20 | Online | Dynadot | [acerwansa.com](https://phishdestroy.io/domain/acerwansa.com/) | 2026-10-20 | Online | Dynadot | [4xblue.net](https://phishdestroy.io/domain/4xblue.net/) | 2026-10-19 | Online | DYNADOT | [1kdailyprofit.net](https://phishdestroy.io/domain/1kdailyprofit.net/) | 2026-10-19 | Online | DYNADOT | [24autotrade.org](https://phishdestroy.io/domain/24autotrade.org/) | 2026-10-19 | Online | DYNADOT | [io-bridge.io](https://phishdestroy.io/domain/io-bridge.io/) | 2026-10-19 | Online | Megazone , dba HOSTING.KR | [blockshoptextileshome.shop](https://phishdestroy.io/domain/blockshoptextileshome.shop/) | 2026-10-17 | Online | Dynadot | [blackdeckershop.shop](https://phishdestroy.io/domain/blackdeckershop.shop/) | 2026-10-16 | Online | Dynadot | [battlbox.shop](https://phishdestroy.io/domain/battlbox.shop/) | 2026-10-11 | Online | Dynadot | [fixedfloat-eu.org](https://phishdestroy.io/domain/fixedfloat-eu.org/) | 2026-10-10 | Online | Registrar.eu | [xtradegrok-36-ai.org](https://phishdestroy.io/domain/xtradegrok-36-ai.org/) | 2026-10-09 | Online | Dynadot | [xonuruzirule.com](https://phishdestroy.io/domain/xonuruzirule.com/) | 2026-10-09 | Online | Dynadot | [localfiberinternet.com](https://phishdestroy.io/domain/localfiberinternet.com/) | 2026-10-07 | Online | GoDaddy.com | [sc-capitals.com](https://phishdestroy.io/domain/sc-capitals.com/) | 2026-09-24 | Online | PublicDomainRegistry.com | [tlcrestholdings.com](https://phishdestroy.io/domain/tlcrestholdings.com/) | 2026-09-22 | Offline | Cosmotown | [teslaxcapital.veliroz.us](https://phishdestroy.io/domain/teslaxcapital.veliroz.us/) | 2026-09-11 | Offline | Dynadot | [aethlabs.shop](https://phishdestroy.io/domain/aethlabs.shop/) | 2026-09-09 | Online | Dynadot | [trumpnatorprime.projectlunarx.com](https://phishdestroy.io/domain/trumpnatorprime.projectlunarx.com/) | 2026-09-09 | Online | IONOS SE | [ferveurplacoire.net](https://phishdestroy.io/domain/ferveurplacoire.net/) | 2026-09-07 | Online | Dynadot | [flourishing-vacherin-21c5e5.netlify.app](https://phishdestroy.io/domain/flourishing-vacherin-21c5e5.netlify.app/) | 2026-09-07 | Online | Netlify | [platform-x.trade](https://phishdestroy.io/domain/platform-x.trade/) | 2026-09-06 | Online | Cloudflare | [olelife009.top](https://phishdestroy.io/domain/olelife009.top/) | 2026-09-05 | Unknown | NICENIC | [vantageorigins.com](https://phishdestroy.io/domain/vantageorigins.com/) | 2026-09-05 | Offline | Cosmotown | [plan-b-net-zero.com](https://phishdestroy.io/domain/plan-b-net-zero.com/) | 2026-09-01 | Online | Dynadot | [All 136 Signal reports](https://phishdestroy.io/domain/?brand=Signal) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)32 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)15 - Cloudflare6 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)6 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)6 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)5 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)5 - [Trustname.com](https://phishdestroy.io/registrar/trustname/)5 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)55 - [.net](https://phishdestroy.io/tld/net/)15 - [.org](https://phishdestroy.io/tld/org/)9 - [.app](https://phishdestroy.io/tld/app/)8 - [.live](https://phishdestroy.io/tld/live/)5 - [.cc](https://phishdestroy.io/tld/cc/)5 - [.shop](https://phishdestroy.io/tld/shop/)4 - [.io](https://phishdestroy.io/tld/io/)3 ### Hosting networks - Cloudflare, Inc.33 - Omegatech LTD23 - CLOUDFLARENET, US12 - AS-COLOCROSSING, US9 - CLOUDFLARENET - Cloudflare, Inc., US4 - Amazon.com, Inc.4 - Malakmadze Web LLC4 - OMEGATECH-AS Omegatech LTD, SC4 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Signal; share of all PhishDestroy reports: 0.06%. Canonical: https://phishdestroy.io/brand/signal/