Protect your wallet

How to spot fake Blur sites

Blur is a popular NFT marketplace, which makes it a frequent target for phishing. The only official domain is blur.io. Everything else claiming to be Blur should be treated as suspicious.

Common fake Blur tricks

Look-alike letters

Domains that swap letters for similar characters, so blur.io becomes something that looks identical at a glance.

Brand in a sub-part

Putting “blur” in a subdomain or path of a domain the brand doesn't own, e.g. blur.claim-xyz.top.

Bait pages

“Claim your Blur airdrop”, “restore Blur wallet”, “verify Blur account” — urgency to make you connect fast.

Checklist before you connect

  • Confirm the domain is exactly blur.io — character by character.
  • Check for a padlock and no “xn--” prefix in the address bar.
  • Never sign a request you don't understand — especially unlimited approvals.
  • Use a security extension that flags fake Blur domains automatically.

Trust Line catches fake Blur sites for you

Trust Line compares every domain you visit against Blur's real address using on-device heuristics, and blocks impersonators before they load.

Add to browser — free