Domains Monitored: 1,972,144 | Report Generated: |
Phishing Threat Report:
Cryptocurrency Industry
Every few minutes we scan millions of look-alike domains for
cryptocurrency service providers.
Think krakẹn.com instead of kraken.com,
legder.com instead of ledger.com. Learn more about
our method →
These look-alike domains are a prime choice for scammers and other entities looking to launch phishing attacks.
The targets are usually both the users and customers of these cryptocurrency services, but also their employees.
binance.com
1,147 | suspicious domains registered |
---|---|
22 registered last month · 145 registered six months ago | |
1,147 | with DNS configured |
↳ 940 A records | |
↳ 132 AAAA records | |
↳ 36 CNAME records | |
↳ 274 DMARC records | |
354 | configured to send email |
↳ 299 with an MX record configured | |
↳ 219 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
869 | hosting a homepage |
↳ 93 mention the original domain or its brand | |
↳ 137 host a credential harvester | |
↳ 74 redirect to the original domain |
Working at Binance? Access all data and more →
binance.us
1,132 | suspicious domains registered |
---|---|
24 registered last month · 138 registered six months ago | |
1,132 | with DNS configured |
↳ 920 A records | |
↳ 135 AAAA records | |
↳ 34 CNAME records | |
↳ 278 DMARC records | |
354 | configured to send email |
↳ 295 with an MX record configured | |
↳ 223 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
847 | hosting a homepage |
↳ 64 mention the original domain or its brand | |
↳ 134 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Binance US? Access all data and more →
bitfinex.com
257 | suspicious domains registered |
---|---|
1 registered last month · 31 registered six months ago | |
257 | with DNS configured |
↳ 187 A records | |
↳ 45 AAAA records | |
↳ 15 CNAME records | |
↳ 62 DMARC records | |
74 | configured to send email |
↳ 56 with an MX record configured | |
↳ 51 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
157 | hosting a homepage |
↳ 17 mention the original domain or its brand | |
↳ 26 host a credential harvester | |
↳ 13 redirect to the original domain |
Working at Bitfinex? Access all data and more →
bitflyer.com
181 | suspicious domains registered |
---|---|
2 registered last month · 25 registered six months ago | |
181 | with DNS configured |
↳ 93 A records | |
↳ 28 AAAA records | |
↳ 12 CNAME records | |
↳ 43 DMARC records | |
50 | configured to send email |
↳ 37 with an MX record configured | |
↳ 37 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
87 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 10 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at BitFlyer? Access all data and more →
bithumb.com
157 | suspicious domains registered |
---|---|
- registered last month · 19 registered six months ago | |
157 | with DNS configured |
↳ 132 A records | |
↳ 22 AAAA records | |
↳ 8 CNAME records | |
↳ 49 DMARC records | |
58 | configured to send email |
↳ 46 with an MX record configured | |
↳ 44 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
119 | hosting a homepage |
↳ 2 mention the original domain or its brand | |
↳ 12 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Bithumb? Access all data and more →
bitmex.com
385 | suspicious domains registered |
---|---|
6 registered last month · 26 registered six months ago | |
385 | with DNS configured |
↳ 235 A records | |
↳ 53 AAAA records | |
↳ 25 CNAME records | |
↳ 206 DMARC records | |
149 | configured to send email |
↳ 103 with an MX record configured | |
↳ 104 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
222 | hosting a homepage |
↳ 3 mention the original domain or its brand | |
↳ 42 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Bitmex? Access all data and more →
bitstamp.net
197 | suspicious domains registered |
---|---|
3 registered last month · 39 registered six months ago | |
197 | with DNS configured |
↳ 166 A records | |
↳ 37 AAAA records | |
↳ 16 CNAME records | |
↳ 62 DMARC records | |
68 | configured to send email |
↳ 49 with an MX record configured | |
↳ 47 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
143 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 23 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Bitstamp? Access all data and more →
bittrex.com
203 | suspicious domains registered |
---|---|
2 registered last month · 32 registered six months ago | |
203 | with DNS configured |
↳ 160 A records | |
↳ 35 AAAA records | |
↳ 18 CNAME records | |
↳ 69 DMARC records | |
84 | configured to send email |
↳ 64 with an MX record configured | |
↳ 61 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
145 | hosting a homepage |
↳ 4 mention the original domain or its brand | |
↳ 25 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Bittrex? Access all data and more →
blockchain.com
1,389 | suspicious domains registered |
---|---|
19 registered last month · 143 registered six months ago | |
1,389 | with DNS configured |
↳ 1,151 A records | |
↳ 141 AAAA records | |
↳ 47 CNAME records | |
↳ 528 DMARC records | |
590 | configured to send email |
↳ 434 with an MX record configured | |
↳ 435 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
1,136 | hosting a homepage |
↳ 22 mention the original domain or its brand | |
↳ 125 host a credential harvester | |
↳ 7 redirect to the original domain |
Working at Blockchain? Access all data and more →
btcturk.com
79 | suspicious domains registered |
---|---|
- registered last month · 6 registered six months ago | |
79 | with DNS configured |
↳ 71 A records | |
↳ 14 AAAA records | |
↳ 7 CNAME records | |
↳ 29 DMARC records | |
30 | configured to send email |
↳ 17 with an MX record configured | |
↳ 24 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
61 | hosting a homepage |
↳ 2 mention the original domain or its brand | |
↳ 8 host a credential harvester | |
↳ 2 redirect to the original domain |
Working at BTCTurk? Access all data and more →
bybit.com
593 | suspicious domains registered |
---|---|
9 registered last month · 111 registered six months ago | |
593 | with DNS configured |
↳ 472 A records | |
↳ 122 AAAA records | |
↳ 26 CNAME records | |
↳ 230 DMARC records | |
278 | configured to send email |
↳ 233 with an MX record configured | |
↳ 188 with an SPF TXT record configured | |
↳ 2 with an DMARC TXT record configured | |
457 | hosting a homepage |
↳ 32 mention the original domain or its brand | |
↳ 62 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Bybit? Access all data and more →
coinbase.com
657 | suspicious domains registered |
---|---|
14 registered last month · 98 registered six months ago | |
657 | with DNS configured |
↳ 497 A records | |
↳ 55 AAAA records | |
↳ 15 CNAME records | |
↳ 288 DMARC records | |
295 | configured to send email |
↳ 106 with an MX record configured | |
↳ 260 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
462 | hosting a homepage |
↳ 15 mention the original domain or its brand | |
↳ 32 host a credential harvester | |
↳ 8 redirect to the original domain |
Working at Coinbase? Access all data and more →
coincheck.com
151 | suspicious domains registered |
---|---|
6 registered last month · 47 registered six months ago | |
151 | with DNS configured |
↳ 128 A records | |
↳ 27 AAAA records | |
↳ 10 CNAME records | |
↳ 48 DMARC records | |
44 | configured to send email |
↳ 30 with an MX record configured | |
↳ 34 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
112 | hosting a homepage |
↳ 4 mention the original domain or its brand | |
↳ 17 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Coincheck? Access all data and more →
coinone.co.kr
173 | suspicious domains registered |
---|---|
3 registered last month · 18 registered six months ago | |
173 | with DNS configured |
↳ 132 A records | |
↳ 34 AAAA records | |
↳ 21 CNAME records | |
↳ 58 DMARC records | |
67 | configured to send email |
↳ 47 with an MX record configured | |
↳ 48 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
135 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 23 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Coinone? Access all data and more →
coins.ph
2,261 | suspicious domains registered |
---|---|
12 registered last month · 119 registered six months ago | |
2,261 | with DNS configured |
↳ 2,065 A records | |
↳ 162 AAAA records | |
↳ 43 CNAME records | |
↳ 479 DMARC records | |
561 | configured to send email |
↳ 424 with an MX record configured | |
↳ 393 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
2,079 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 139 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Coins.ph ? Access all data and more →
crypto.com
2,142 | suspicious domains registered |
---|---|
23 registered last month · 193 registered six months ago | |
2,142 | with DNS configured |
↳ 1,796 A records | |
↳ 304 AAAA records | |
↳ 61 CNAME records | |
↳ 921 DMARC records | |
991 | configured to send email |
↳ 702 with an MX record configured | |
↳ 744 with an SPF TXT record configured | |
↳ 7 with an DMARC TXT record configured | |
1,795 | hosting a homepage |
↳ 28 mention the original domain or its brand | |
↳ 295 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Crypto.com? Access all data and more →
cryptowat.ch
106 | suspicious domains registered |
---|---|
- registered last month · 11 registered six months ago | |
106 | with DNS configured |
↳ 95 A records | |
↳ 21 AAAA records | |
↳ 15 CNAME records | |
↳ 42 DMARC records | |
52 | configured to send email |
↳ 39 with an MX record configured | |
↳ 35 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
88 | hosting a homepage |
↳ 0 mention the original domain or its brand | |
↳ 17 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Cryptowatch? Access all data and more →
gate.io
1,456 | suspicious domains registered |
---|---|
13 registered last month · 100 registered six months ago | |
1,456 | with DNS configured |
↳ 1,165 A records | |
↳ 207 AAAA records | |
↳ 36 CNAME records | |
↳ 668 DMARC records | |
817 | configured to send email |
↳ 654 with an MX record configured | |
↳ 550 with an SPF TXT record configured | |
↳ 2 with an DMARC TXT record configured | |
1,203 | hosting a homepage |
↳ 10 mention the original domain or its brand | |
↳ 260 host a credential harvester | |
↳ 2 redirect to the original domain |
Working at Gate.io? Access all data and more →
gemini.com
848 | suspicious domains registered |
---|---|
11 registered last month · 114 registered six months ago | |
848 | with DNS configured |
↳ 713 A records | |
↳ 137 AAAA records | |
↳ 38 CNAME records | |
↳ 351 DMARC records | |
405 | configured to send email |
↳ 320 with an MX record configured | |
↳ 292 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
698 | hosting a homepage |
↳ 31 mention the original domain or its brand | |
↳ 113 host a credential harvester | |
↳ 10 redirect to the original domain |
Working at Gemini? Access all data and more →
hitbtc.com
142 | suspicious domains registered |
---|---|
6 registered last month · 33 registered six months ago | |
142 | with DNS configured |
↳ 123 A records | |
↳ 36 AAAA records | |
↳ 9 CNAME records | |
↳ 43 DMARC records | |
41 | configured to send email |
↳ 26 with an MX record configured | |
↳ 36 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
98 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 11 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at HitBTC? Access all data and more →
huobi.com
412 | suspicious domains registered |
---|---|
9 registered last month · 43 registered six months ago | |
412 | with DNS configured |
↳ 309 A records | |
↳ 66 AAAA records | |
↳ 31 CNAME records | |
↳ 106 DMARC records | |
119 | configured to send email |
↳ 92 with an MX record configured | |
↳ 76 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
265 | hosting a homepage |
↳ 16 mention the original domain or its brand | |
↳ 20 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Huobi? Access all data and more →
kraken.com
780 | suspicious domains registered |
---|---|
13 registered last month · 97 registered six months ago | |
780 | with DNS configured |
↳ 634 A records | |
↳ 221 AAAA records | |
↳ 39 CNAME records | |
↳ 348 DMARC records | |
398 | configured to send email |
↳ 277 with an MX record configured | |
↳ 293 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
634 | hosting a homepage |
↳ 86 mention the original domain or its brand | |
↳ 115 host a credential harvester | |
↳ 81 redirect to the original domain |
Working at Kraken? Access all data and more →
kucoin.com
461 | suspicious domains registered |
---|---|
7 registered last month · 65 registered six months ago | |
461 | with DNS configured |
↳ 344 A records | |
↳ 50 AAAA records | |
↳ 20 CNAME records | |
↳ 137 DMARC records | |
152 | configured to send email |
↳ 114 with an MX record configured | |
↳ 111 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
305 | hosting a homepage |
↳ 27 mention the original domain or its brand | |
↳ 49 host a credential harvester | |
↳ 15 redirect to the original domain |
Working at Kucoin? Access all data and more →
ledger.com
815 | suspicious domains registered |
---|---|
11 registered last month · 109 registered six months ago | |
815 | with DNS configured |
↳ 681 A records | |
↳ 86 AAAA records | |
↳ 22 CNAME records | |
↳ 359 DMARC records | |
412 | configured to send email |
↳ 314 with an MX record configured | |
↳ 306 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
662 | hosting a homepage |
↳ 90 mention the original domain or its brand | |
↳ 146 host a credential harvester | |
↳ 64 redirect to the original domain |
Working at Ledger? Access all data and more →
luno.com
718 | suspicious domains registered |
---|---|
8 registered last month · 41 registered six months ago | |
718 | with DNS configured |
↳ 583 A records | |
↳ 125 AAAA records | |
↳ 19 CNAME records | |
↳ 314 DMARC records | |
400 | configured to send email |
↳ 333 with an MX record configured | |
↳ 267 with an SPF TXT record configured | |
↳ 3 with an DMARC TXT record configured | |
609 | hosting a homepage |
↳ 5 mention the original domain or its brand | |
↳ 124 host a credential harvester | |
↳ 1 redirect to the original domain |
Working at Luno? Access all data and more →
mexc.com
586 | suspicious domains registered |
---|---|
8 registered last month · 51 registered six months ago | |
586 | with DNS configured |
↳ 465 A records | |
↳ 83 AAAA records | |
↳ 26 CNAME records | |
↳ 255 DMARC records | |
297 | configured to send email |
↳ 240 with an MX record configured | |
↳ 205 with an SPF TXT record configured | |
↳ 3 with an DMARC TXT record configured | |
432 | hosting a homepage |
↳ 13 mention the original domain or its brand | |
↳ 77 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at MEXC? Access all data and more →
okcoin.com
253 | suspicious domains registered |
---|---|
2 registered last month · 22 registered six months ago | |
253 | with DNS configured |
↳ 207 A records | |
↳ 55 AAAA records | |
↳ 25 CNAME records | |
↳ 106 DMARC records | |
107 | configured to send email |
↳ 75 with an MX record configured | |
↳ 79 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
175 | hosting a homepage |
↳ 1 mention the original domain or its brand | |
↳ 22 host a credential harvester | |
↳ 0 redirect to the original domain |
Working at Okcoin? Access all data and more →
okx.com
906 | suspicious domains registered |
---|---|
18 registered last month · 109 registered six months ago | |
906 | with DNS configured |
↳ 710 A records | |
↳ 138 AAAA records | |
↳ 42 CNAME records | |
↳ 305 DMARC records | |
326 | configured to send email |
↳ 242 with an MX record configured | |
↳ 230 with an SPF TXT record configured | |
↳ 2 with an DMARC TXT record configured | |
654 | hosting a homepage |
↳ 9 mention the original domain or its brand | |
↳ 88 host a credential harvester | |
↳ 4 redirect to the original domain |
Working at OKX? Access all data and more →
phemex.com
220 | suspicious domains registered |
---|---|
3 registered last month · 18 registered six months ago | |
220 | with DNS configured |
↳ 180 A records | |
↳ 37 AAAA records | |
↳ 10 CNAME records | |
↳ 63 DMARC records | |
73 | configured to send email |
↳ 51 with an MX record configured | |
↳ 55 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
173 | hosting a homepage |
↳ 24 mention the original domain or its brand | |
↳ 44 host a credential harvester | |
↳ 23 redirect to the original domain |
Working at Phemex? Access all data and more →
poloniex.com
141 | suspicious domains registered |
---|---|
7 registered last month · 27 registered six months ago | |
141 | with DNS configured |
↳ 120 A records | |
↳ 37 AAAA records | |
↳ 9 CNAME records | |
↳ 55 DMARC records | |
46 | configured to send email |
↳ 31 with an MX record configured | |
↳ 40 with an SPF TXT record configured | |
↳ 0 with an DMARC TXT record configured | |
108 | hosting a homepage |
↳ 19 mention the original domain or its brand | |
↳ 18 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at Poloniex? Access all data and more →
trezor.io
357 | suspicious domains registered |
---|---|
6 registered last month · 70 registered six months ago | |
357 | with DNS configured |
↳ 270 A records | |
↳ 45 AAAA records | |
↳ 11 CNAME records | |
↳ 128 DMARC records | |
150 | configured to send email |
↳ 116 with an MX record configured | |
↳ 110 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
265 | hosting a homepage |
↳ 8 mention the original domain or its brand | |
↳ 84 host a credential harvester | |
↳ 6 redirect to the original domain |
Working at Trezor? Access all data and more →
upbit.com
320 | suspicious domains registered |
---|---|
7 registered last month · 34 registered six months ago | |
320 | with DNS configured |
↳ 253 A records | |
↳ 48 AAAA records | |
↳ 14 CNAME records | |
↳ 121 DMARC records | |
140 | configured to send email |
↳ 105 with an MX record configured | |
↳ 98 with an SPF TXT record configured | |
↳ 1 with an DMARC TXT record configured | |
240 | hosting a homepage |
↳ 5 mention the original domain or its brand | |
↳ 40 host a credential harvester | |
↳ 3 redirect to the original domain |
Working at UPbit? Access all data and more →