# Phishing sites impersonating Bitcoin PhishDestroy has recorded 1,202 phishing domains impersonating Bitcoin since 2025-02-06, 40 of them in the last 30 days. The most used registrars are Cloudflare and NiceNIC; the most common TLDs are .com and .dev. The official Bitcoin domain is bitcoin.org: any other site asking for your login or wallet is not Bitcoin. 1,202Domains, all time 40Last 30 days 592Online at last check 123Confirmed takedowns ## New domains in the last 90 days Bitcoin phishing domains detected per day: 207 from 2026-07-25 to 2026-10-22; peak 38. ## How to tell a fake Bitcoin site Official domain: bitcoin.org. Words most often added to the brand in reported domains: bitcoinhyper, wallet, btc, mixer, claim, paybis, coin, whir, the, greenbitcoin. - Type the address yourself or use a bookmark; phishing links for Bitcoin arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Bitcoin will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Bitcoin phishing domains The 50 most recently detected domains impersonating Bitcoin Domain | First detected | Status at last check | Registrar | [playrainbet.cc](https://phishdestroy.io/domain/playrainbet.cc/) | 2026-10-22 | Online | Eranet | [bitrefill.com-gift-esim-ag04.com](https://phishdestroy.io/domain/bitrefill.com-gift-esim-ag04.com/) | 2026-10-21 | Online | NICENIC | [bitrefill.com-gift-esim-ad04.com](https://phishdestroy.io/domain/bitrefill.com-gift-esim-ad04.com/) | 2026-10-21 | Online | NICENIC | [profitdexpro.com](https://phishdestroy.io/domain/profitdexpro.com/) | 2026-10-20 | Online | Registrar.eu | [stacksbtc.net](https://phishdestroy.io/domain/stacksbtc.net/) | 2026-10-20 | Online | NICENIC | [web-netcoins-login-doc.typedream.app](https://phishdestroy.io/domain/web-netcoins-login-doc.typedream.app/) | 2026-10-20 | Online | — | [sitemvewd4w0tngj.cfd](https://phishdestroy.io/domain/sitemvewd4w0tngj.cfd/) | 2026-10-19 | Offline | Spaceship | [sitemvdm66xf9twc.cfd](https://phishdestroy.io/domain/sitemvdm66xf9twc.cfd/) | 2026-10-19 | Online | Spaceship | [launch-bitcoineverlight.site](https://phishdestroy.io/domain/launch-bitcoineverlight.site/) | 2026-10-13 | Online | NameSilo | [swanbitcoinreports.live](https://phishdestroy.io/domain/swanbitcoinreports.live/) | 2026-10-13 | Online | NICENIC | [sitemv5o2p6w9rqm.cfd](https://phishdestroy.io/domain/sitemv5o2p6w9rqm.cfd/) | 2026-10-13 | Online | Spaceship | [sitemv5kuz5lhbtf.cfd](https://phishdestroy.io/domain/sitemv5kuz5lhbtf.cfd/) | 2026-10-13 | Online | Spaceship | [sitemv4c57e5h81k.cfd](https://phishdestroy.io/domain/sitemv4c57e5h81k.cfd/) | 2026-10-13 | Online | Spaceship | [coinexsi.ink](https://phishdestroy.io/domain/coinexsi.ink/) | 2026-10-09 | Online | NameMart | [mixer.money](https://phishdestroy.io/domain/mixer.money/) | 2026-10-09 | Online | NameCheap | [zcashmixer.com](https://phishdestroy.io/domain/zcashmixer.com/) | 2026-10-08 | Online | SOLLUTIUM | [eth-mixer.org](https://phishdestroy.io/domain/eth-mixer.org/) | 2026-10-08 | Online | SOLLUTIUM | [chipmixer.pro](https://phishdestroy.io/domain/chipmixer.pro/) | 2026-10-08 | Online | Global Domain | [mixero.digital](https://phishdestroy.io/domain/mixero.digital/) | 2026-10-07 | Online | NICENIC | [bitcoinirapolicy.com](https://phishdestroy.io/domain/bitcoinirapolicy.com/) | 2026-10-07 | Online | NICENIC | [otc-claim.xyz](https://phishdestroy.io/domain/otc-claim.xyz/) | 2026-10-07 | Unknown | NICENIC | [otc-claims.xyz](https://phishdestroy.io/domain/otc-claims.xyz/) | 2026-10-07 | Unknown | NICENIC | [bitcoin-qrcode-generators.com](https://phishdestroy.io/domain/bitcoin-qrcode-generators.com/) | 2026-10-07 | Online | NICENIC | [bitcoinirabrief.com](https://phishdestroy.io/domain/bitcoinirabrief.com/) | 2026-10-07 | Online | NICENIC | [bitcoinhyper-live.xyz](https://phishdestroy.io/domain/bitcoinhyper-live.xyz/) | 2026-10-07 | Online | NICENIC | [profitfurnace.com](https://phishdestroy.io/domain/profitfurnace.com/) | 2026-10-07 | Online | Global Domain | [bestvalueinves.com](https://phishdestroy.io/domain/bestvalueinves.com/) | 2026-10-07 | Online | Cosmotown | [bitcoin-tumbler.com](https://phishdestroy.io/domain/bitcoin-tumbler.com/) | 2026-10-07 | Online | NICENIC | [cryptomixer.digital](https://phishdestroy.io/domain/cryptomixer.digital/) | 2026-10-05 | Online | NICENIC | [bitcoingenerator.me](https://phishdestroy.io/domain/bitcoingenerator.me/) | 2026-10-01 | Online | CommuniGal Communication | [primetradingnz.org](https://phishdestroy.io/domain/primetradingnz.org/) | 2026-10-01 | Online | DYNADOT | [dxvwb3.cc](https://phishdestroy.io/domain/dxvwb3.cc/) | 2026-09-30 | Online | Dominet (HK) | [bitcoin-fund-manager.cc](https://phishdestroy.io/domain/bitcoin-fund-manager.cc/) | 2026-09-29 | Online | Porkbun | [mixermoney.org](https://phishdestroy.io/domain/mixermoney.org/) | 2026-09-27 | Online | Global Domain | [btcmixer.xyz](https://phishdestroy.io/domain/btcmixer.xyz/) | 2026-09-27 | Online | SOLLUTIUM | [cryptocurrency-tumbler.com](https://phishdestroy.io/domain/cryptocurrency-tumbler.com/) | 2026-09-27 | Online | SOLLUTIUM | [freelitecoin.online](https://phishdestroy.io/domain/freelitecoin.online/) | 2026-09-27 | Online | OnlineNIC | [tumbler.cc](https://phishdestroy.io/domain/tumbler.cc/) | 2026-09-25 | Online | NICENIC | [ascendeex.com](https://phishdestroy.io/domain/ascendeex.com/) | 2026-09-23 | Online | Internet Domain Service BS | [remitmargin.com](https://phishdestroy.io/domain/remitmargin.com/) | 2026-09-23 | Offline | NAMECHEAP | [the-bitcoinfuture.org](https://phishdestroy.io/domain/the-bitcoinfuture.org/) | 2026-09-22 | Online | Internet Domain Service BS | [xbitcoin-club.io](https://phishdestroy.io/domain/xbitcoin-club.io/) | 2026-09-20 | Online | TLD Registrar Solutions | [xbitcoinapp.org](https://phishdestroy.io/domain/xbitcoinapp.org/) | 2026-09-20 | Online | Internet Domain Service BS | [notrace.exchange](https://phishdestroy.io/domain/notrace.exchange/) | 2026-09-19 | Online | NameCheap | [bmix.io](https://phishdestroy.io/domain/bmix.io/) | 2026-09-17 | Online | NAMECHEAP | [coinomize.fun](https://phishdestroy.io/domain/coinomize.fun/) | 2026-09-17 | Online | Trustname.com | [sso--netcoins-com-cdn-n-auuth.webflow.io](https://phishdestroy.io/domain/sso--netcoins-com-cdn-n-auuth.webflow.io/) | 2026-09-15 | Online | Webflow | [cryptomixer.site](https://phishdestroy.io/domain/cryptomixer.site/) | 2026-09-15 | Unknown | NICENIC | [mixero.site](https://phishdestroy.io/domain/mixero.site/) | 2026-09-15 | Online | NICENIC | [crestforlding.org](https://phishdestroy.io/domain/crestforlding.org/) | 2026-09-12 | Online | Cosmotown | [All 1,202 Bitcoin reports](https://phishdestroy.io/domain/?brand=Bitcoin) ## Where they are registered and hosted ### Registrars - Cloudflare181 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)140 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)113 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)63 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)45 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)40 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)37 - [Porkbun](https://phishdestroy.io/registrar/porkbun/)30 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)438 - [.dev](https://phishdestroy.io/tld/dev/)174 - [.org](https://phishdestroy.io/tld/org/)60 - [.io](https://phishdestroy.io/tld/io/)58 - [.live](https://phishdestroy.io/tld/live/)50 - [.app](https://phishdestroy.io/tld/app/)43 - [.net](https://phishdestroy.io/tld/net/)42 - [.xyz](https://phishdestroy.io/tld/xyz/)38 ### Hosting networks - Cloudflare, Inc.517 - CLOUDFLARENET, US143 - CLOUDFLARENET - Cloudflare, Inc., US103 - Amazon.com, Inc.60 - Hostinger International Limited21 - AMAZON-02, US16 - Ideal Hosting Teknoloji A.S.16 - AS-COLOCROSSING, US15 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bitcoin; share of all PhishDestroy reports: 0.53%. Canonical: https://phishdestroy.io/brand/bitcoin/