Domains Monitored: 1,972,144 | Report Generated: |
Phishing Threat Report:
Cryptocurrency Industry
Every few minutes we scan millions of look-alike domains for
cryptocurrency service providers.
Think krakẹn.com instead of kraken.com,
legder.com instead of ledger.com. Learn more about
our method →
These look-alike domains are a prime choice for scammers and other entities looking to launch phishing attacks.
The targets are usually both the users and customers of these cryptocurrency services, but also their employees.
binance.com
1,123 | suspicious domains registered |
---|---|
22 registered last month · 143 registered six months ago | |
1,123 | with DNS configured |
↳ 915 A records | |
↳ 148 AAAA records | |
↳ 46 CNAME records | |
↳ 270 DMARC records | |
358 | configured to send email |
↳ 307 with an MX record configured | |
↳ 203 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
870 | hosting a homepage |
↳ 96 mention the original domain or its brand | |
↳ 137 host a credential harvester | |
↳ 78 redirect to the original domain |
Working at Binance? Access all data and more →
binance.us
1,124 | suspicious domains registered |
---|---|
23 registered last month · 144 registered six months ago | |
1,124 | with DNS configured |
↳ 919 A records | |
↳ 159 AAAA records | |
↳ 52 CNAME records | |
↳ 292 DMARC records | |
368 | configured to send email |
↳ 300 with an MX record configured | |
↳ 215 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
867 | hosting a homepage |
↳ 70 mention the original domain or its brand | |
↳ 136 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Binance US? Access all data and more →
bitfinex.com
261 | suspicious domains registered |
---|---|
3 registered last month · 27 registered six months ago | |
261 | with DNS configured |
↳ 189 A records | |
↳ 40 AAAA records | |
↳ 17 CNAME records | |
↳ 70 DMARC records | |
82 | configured to send email |
↳ 66 with an MX record configured | |
↳ 57 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
173 | hosting a homepage |
↳ 16 mention the original domain or its brand | |
↳ 29 host a credential harvester | |
↳ 13 redirect to the original domain |
Working at Bitfinex? Access all data and more →
bitflyer.com
190 | suspicious domains registered |
---|---|
3 registered last month · 27 registered six months ago | |
190 | with DNS configured |
↳ 106 A records | |
↳ 28 AAAA records | |
↳ 13 CNAME records | |
↳ 49 DMARC records | |
54 | configured to send email |
↳ 41 with an MX record configured | |
↳ 42 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
95 | hosting a homepage |
↳ 0 mention the original domain or its brand | |
↳ 13 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at BitFlyer? Access all data and more →
bithumb.com
170 | suspicious domains registered |
---|---|
9 registered last month · 24 registered six months ago | |
170 | with DNS configured |
↳ 144 A records | |
↳ 28 AAAA records | |
↳ 11 CNAME records | |
↳ 63 DMARC records | |
67 | configured to send email |
↳ 51 with an MX record configured | |
↳ 53 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
138 | hosting a homepage |
↳ 2 mention the original domain or its brand | |
↳ 16 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Bithumb? Access all data and more →
bitmex.com
397 | suspicious domains registered |
---|---|
1 registered last month · 23 registered six months ago | |
397 | with DNS configured |
↳ 244 A records | |
↳ 50 AAAA records | |
↳ 24 CNAME records | |
↳ 213 DMARC records | |
152 | configured to send email |
↳ 104 with an MX record configured | |
↳ 111 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
245 | hosting a homepage |
↳ 13 mention the original domain or its brand | |
↳ 44 host a credential harvester | |
↳ 13 redirect to the original domain |
Working at Bitmex? Access all data and more →
bitstamp.net
204 | suspicious domains registered |
---|---|
4 registered last month · 41 registered six months ago | |
204 | with DNS configured |
↳ 170 A records | |
↳ 38 AAAA records | |
↳ 13 CNAME records | |
↳ 67 DMARC records | |
73 | configured to send email |
↳ 53 with an MX record configured | |
↳ 56 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
149 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 25 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Bitstamp? Access all data and more →
bittrex.com
209 | suspicious domains registered |
---|---|
3 registered last month · 33 registered six months ago | |
209 | with DNS configured |
↳ 175 A records | |
↳ 37 AAAA records | |
↳ 20 CNAME records | |
↳ 82 DMARC records | |
87 | configured to send email |
↳ 66 with an MX record configured | |
↳ 72 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
150 | hosting a homepage |
↳ 4 mention the original domain or its brand | |
↳ 28 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Bittrex? Access all data and more →
blockchain.com
1,426 | suspicious domains registered |
---|---|
16 registered last month · 145 registered six months ago | |
1,426 | with DNS configured |
↳ 1,201 A records | |
↳ 144 AAAA records | |
↳ 58 CNAME records | |
↳ 553 DMARC records | |
592 | configured to send email |
↳ 405 with an MX record configured | |
↳ 442 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
1,166 | hosting a homepage |
↳ 21 mention the original domain or its brand | |
↳ 137 host a credential harvester | |
↳ 8 redirect to the original domain |
Working at Blockchain? Access all data and more →
btcturk.com
81 | suspicious domains registered |
---|---|
- registered last month · 5 registered six months ago | |
81 | with DNS configured |
↳ 70 A records | |
↳ 17 AAAA records | |
↳ 7 CNAME records | |
↳ 33 DMARC records | |
33 | configured to send email |
↳ 21 with an MX record configured | |
↳ 25 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
63 | hosting a homepage |
↳ 2 mention the original domain or its brand | |
↳ 9 host a credential harvester | |
↳ 2 redirect to the original domain |
Working at BTCTurk? Access all data and more →
bybit.com
603 | suspicious domains registered |
---|---|
17 registered last month · 111 registered six months ago | |
603 | with DNS configured |
↳ 479 A records | |
↳ 119 AAAA records | |
↳ 23 CNAME records | |
↳ 237 DMARC records | |
286 | configured to send email |
↳ 236 with an MX record configured | |
↳ 199 with an SPF TXT record configured | |
↳ 2 with an DMARC TXT record configured | |
463 | hosting a homepage |
↳ 32 mention the original domain or its brand | |
↳ 63 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Bybit? Access all data and more →
coinbase.com
671 | suspicious domains registered |
---|---|
10 registered last month · 91 registered six months ago | |
671 | with DNS configured |
↳ 497 A records | |
↳ 59 AAAA records | |
↳ 16 CNAME records | |
↳ 302 DMARC records | |
302 | configured to send email |
↳ 109 with an MX record configured | |
↳ 266 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
471 | hosting a homepage |
↳ 17 mention the original domain or its brand | |
↳ 38 host a credential harvester | |
↳ 8 redirect to the original domain |
Working at Coinbase? Access all data and more →
coincheck.com
157 | suspicious domains registered |
---|---|
2 registered last month · 45 registered six months ago | |
157 | with DNS configured |
↳ 131 A records | |
↳ 29 AAAA records | |
↳ 12 CNAME records | |
↳ 52 DMARC records | |
53 | configured to send email |
↳ 36 with an MX record configured | |
↳ 42 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
121 | hosting a homepage |
↳ 3 mention the original domain or its brand | |
↳ 18 host a credential harvester | |
↳ 2 redirect to the original domain |
Working at Coincheck? Access all data and more →
coinone.co.kr
179 | suspicious domains registered |
---|---|
1 registered last month · 15 registered six months ago | |
179 | with DNS configured |
↳ 137 A records | |
↳ 36 AAAA records | |
↳ 22 CNAME records | |
↳ 69 DMARC records | |
76 | configured to send email |
↳ 59 with an MX record configured | |
↳ 59 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
140 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 21 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Coinone? Access all data and more →
coins.ph
2,363 | suspicious domains registered |
---|---|
10 registered last month · 114 registered six months ago | |
2,363 | with DNS configured |
↳ 2,170 A records | |
↳ 169 AAAA records | |
↳ 46 CNAME records | |
↳ 512 DMARC records | |
578 | configured to send email |
↳ 425 with an MX record configured | |
↳ 420 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
2,193 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 139 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Coins.ph ? Access all data and more →
crypto.com
2,161 | suspicious domains registered |
---|---|
31 registered last month · 194 registered six months ago | |
2,161 | with DNS configured |
↳ 1,803 A records | |
↳ 338 AAAA records | |
↳ 86 CNAME records | |
↳ 932 DMARC records | |
1,008 | configured to send email |
↳ 731 with an MX record configured | |
↳ 749 with an SPF TXT record configured | |
↳ 8 with an DMARC TXT record configured | |
1,808 | hosting a homepage |
↳ 25 mention the original domain or its brand | |
↳ 308 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Crypto.com? Access all data and more →
cryptowat.ch
108 | suspicious domains registered |
---|---|
- registered last month · 8 registered six months ago | |
108 | with DNS configured |
↳ 93 A records | |
↳ 20 AAAA records | |
↳ 14 CNAME records | |
↳ 52 DMARC records | |
53 | configured to send email |
↳ 34 with an MX record configured | |
↳ 43 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
92 | hosting a homepage |
↳ 0 mention the original domain or its brand | |
↳ 18 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Cryptowatch? Access all data and more →
gate.io
1,455 | suspicious domains registered |
---|---|
14 registered last month · 103 registered six months ago | |
1,455 | with DNS configured |
↳ 1,184 A records | |
↳ 204 AAAA records | |
↳ 40 CNAME records | |
↳ 667 DMARC records | |
814 | configured to send email |
↳ 654 with an MX record configured | |
↳ 549 with an SPF TXT record configured | |
↳ 3 with an DMARC TXT record configured | |
1,205 | hosting a homepage |
↳ 13 mention the original domain or its brand | |
↳ 259 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Gate.io? Access all data and more →
gemini.com
854 | suspicious domains registered |
---|---|
6 registered last month · 79 registered six months ago | |
854 | with DNS configured |
↳ 687 A records | |
↳ 141 AAAA records | |
↳ 48 CNAME records | |
↳ 364 DMARC records | |
416 | configured to send email |
↳ 322 with an MX record configured | |
↳ 295 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
714 | hosting a homepage |
↳ 29 mention the original domain or its brand | |
↳ 119 host a credential harvester | |
↳ 9 redirect to the original domain |
Working at Gemini? Access all data and more →
hitbtc.com
146 | suspicious domains registered |
---|---|
5 registered last month · 38 registered six months ago | |
146 | with DNS configured |
↳ 131 A records | |
↳ 33 AAAA records | |
↳ 8 CNAME records | |
↳ 46 DMARC records | |
48 | configured to send email |
↳ 26 with an MX record configured | |
↳ 41 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
96 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 12 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at HitBTC? Access all data and more →
huobi.com
408 | suspicious domains registered |
---|---|
5 registered last month · 36 registered six months ago | |
408 | with DNS configured |
↳ 311 A records | |
↳ 68 AAAA records | |
↳ 36 CNAME records | |
↳ 115 DMARC records | |
124 | configured to send email |
↳ 100 with an MX record configured | |
↳ 81 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
276 | hosting a homepage |
↳ 17 mention the original domain or its brand | |
↳ 22 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Huobi? Access all data and more →
kraken.com
788 | suspicious domains registered |
---|---|
17 registered last month · 83 registered six months ago | |
788 | with DNS configured |
↳ 648 A records | |
↳ 220 AAAA records | |
↳ 27 CNAME records | |
↳ 338 DMARC records | |
399 | configured to send email |
↳ 267 with an MX record configured | |
↳ 301 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
632 | hosting a homepage |
↳ 89 mention the original domain or its brand | |
↳ 105 host a credential harvester | |
↳ 86 redirect to the original domain |
Working at Kraken? Access all data and more →
kucoin.com
454 | suspicious domains registered |
---|---|
9 registered last month · 56 registered six months ago | |
454 | with DNS configured |
↳ 340 A records | |
↳ 51 AAAA records | |
↳ 18 CNAME records | |
↳ 132 DMARC records | |
148 | configured to send email |
↳ 99 with an MX record configured | |
↳ 109 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
312 | hosting a homepage |
↳ 30 mention the original domain or its brand | |
↳ 53 host a credential harvester | |
↳ 17 redirect to the original domain |
Working at Kucoin? Access all data and more →
ledger.com
820 | suspicious domains registered |
---|---|
18 registered last month · 117 registered six months ago | |
820 | with DNS configured |
↳ 662 A records | |
↳ 87 AAAA records | |
↳ 21 CNAME records | |
↳ 365 DMARC records | |
415 | configured to send email |
↳ 325 with an MX record configured | |
↳ 314 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
658 | hosting a homepage |
↳ 93 mention the original domain or its brand | |
↳ 150 host a credential harvester | |
↳ 65 redirect to the original domain |
Working at Ledger? Access all data and more →
luno.com
730 | suspicious domains registered |
---|---|
12 registered last month · 49 registered six months ago | |
730 | with DNS configured |
↳ 610 A records | |
↳ 131 AAAA records | |
↳ 24 CNAME records | |
↳ 332 DMARC records | |
421 | configured to send email |
↳ 344 with an MX record configured | |
↳ 285 with an SPF TXT record configured | |
↳ 3 with an DMARC TXT record configured | |
621 | hosting a homepage |
↳ 3 mention the original domain or its brand | |
↳ 132 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Luno? Access all data and more →
mexc.com
592 | suspicious domains registered |
---|---|
11 registered last month · 59 registered six months ago | |
592 | with DNS configured |
↳ 466 A records | |
↳ 96 AAAA records | |
↳ 22 CNAME records | |
↳ 243 DMARC records | |
296 | configured to send email |
↳ 229 with an MX record configured | |
↳ 204 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
436 | hosting a homepage |
↳ 12 mention the original domain or its brand | |
↳ 73 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at MEXC? Access all data and more →
okcoin.com
245 | suspicious domains registered |
---|---|
2 registered last month · 17 registered six months ago | |
245 | with DNS configured |
↳ 198 A records | |
↳ 45 AAAA records | |
↳ 18 CNAME records | |
↳ 83 DMARC records | |
96 | configured to send email |
↳ 59 with an MX record configured | |
↳ 65 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
173 | hosting a homepage |
↳ 0 mention the original domain or its brand | |
↳ 23 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Okcoin? Access all data and more →
okx.com
921 | suspicious domains registered |
---|---|
25 registered last month · 124 registered six months ago | |
921 | with DNS configured |
↳ 727 A records | |
↳ 150 AAAA records | |
↳ 42 CNAME records | |
↳ 297 DMARC records | |
330 | configured to send email |
↳ 249 with an MX record configured | |
↳ 226 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
668 | hosting a homepage |
↳ 11 mention the original domain or its brand | |
↳ 86 host a credential harvester | |
↳ 5 redirect to the original domain |
Working at OKX? Access all data and more →
phemex.com
214 | suspicious domains registered |
---|---|
- registered last month · 14 registered six months ago | |
214 | with DNS configured |
↳ 171 A records | |
↳ 29 AAAA records | |
↳ 12 CNAME records | |
↳ 68 DMARC records | |
75 | configured to send email |
↳ 53 with an MX record configured | |
↳ 56 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
174 | hosting a homepage |
↳ 27 mention the original domain or its brand | |
↳ 48 host a credential harvester | |
↳ 26 redirect to the original domain |
Working at Phemex? Access all data and more →
poloniex.com
141 | suspicious domains registered |
---|---|
3 registered last month · 22 registered six months ago | |
141 | with DNS configured |
↳ 114 A records | |
↳ 30 AAAA records | |
↳ 11 CNAME records | |
↳ 46 DMARC records | |
44 | configured to send email |
↳ 37 with an MX record configured | |
↳ 35 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
104 | hosting a homepage |
↳ 7 mention the original domain or its brand | |
↳ 17 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Poloniex? Access all data and more →
trezor.io
361 | suspicious domains registered |
---|---|
4 registered last month · 64 registered six months ago | |
361 | with DNS configured |
↳ 272 A records | |
↳ 47 AAAA records | |
↳ 12 CNAME records | |
↳ 127 DMARC records | |
150 | configured to send email |
↳ 112 with an MX record configured | |
↳ 110 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
222 | hosting a homepage |
↳ 8 mention the original domain or its brand | |
↳ 43 host a credential harvester | |
↳ 7 redirect to the original domain |
Working at Trezor? Access all data and more →
upbit.com
325 | suspicious domains registered |
---|---|
3 registered last month · 35 registered six months ago | |
325 | with DNS configured |
↳ 251 A records | |
↳ 46 AAAA records | |
↳ 9 CNAME records | |
↳ 118 DMARC records | |
139 | configured to send email |
↳ 103 with an MX record configured | |
↳ 93 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
247 | hosting a homepage |
↳ 4 mention the original domain or its brand | |
↳ 42 host a credential harvester | |
↳ 2 redirect to the original domain |
Working at UPbit? Access all data and more →