Phishing sites impersonating Bitfinex

PhishDestroy has recorded 48 phishing domains impersonating Bitfinex since 2025-08-02, 1 of them in the last 30 days. The most used registrars are NiceNIC and MarkMonitor; the most common TLDs are .com and .dev. Open Bitfinex only from its official app or a saved bookmark.

48
Domains, all time
1
Last 30 days
17
Online at last check
4
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 32026-07-28: 12026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 12026-08-25: 12026-08-26: 12026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 12026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 12026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 12026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Bitfinex phishing domains detected per day: 12 from 2026-07-25 to 2026-10-22; peak 3.

How to tell a fake Bitfinex site

Words most often added to the brand in reported domains: plasma, edgeone, transfer, duplicate, disabled, plasmachecks, authorize, primequotex, qfsnanoxleger, bitfinexdesktopapp.

  • Type the address yourself or use a bookmark; phishing links for Bitfinex arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Bitfinex will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Bitfinex phishing domains

The 48 most recently detected domains impersonating Bitfinex
DomainFirst detectedStatus at last checkRegistrar
bitfinextaxdocument.com2026-10-08OnlineDynadot
authorise-transfer-dp2yby7u8ziv.edgeone.dev2026-09-09OnlineMarkMonitor
xn--btfnex-p9ac.com2026-09-01OnlineGoDaddy.com
authorize-transfer-dp8gjz5m9o4i.edgeone.dev2026-08-31OnlineMarkMonitor
payment-account-dpcz51xt64hv.edgeone.dev2026-08-28OnlineMarkMonitor
bitfinexkr.com2026-08-26OnlineGabia
authorize-transfer-dpfviqvao6vv.edgeone.dev2026-08-25OnlineMarkMonitor
legacy-bitfundex.today2026-08-24OnlineNICENIC
bitwinex.io2026-07-28OnlineGoDaddy.com
boommoment.com2026-07-27OnlineNAMECHEAP
opticryptomarkets.com2026-07-27OnlineNetwork Solutions
getbfinexorg.com2026-07-27OnlineRegistrar.eu
h5.bitfinn.com2026-06-18OnlineChengdu Fly-Digital Technology
plasmalabs.us2026-06-15OnlineGoDaddy.com
appplasma.sbs2026-05-02OfflinePorkbun
app-plasma.sbs2026-05-02OnlinePorkbun
bitfinax.wixstudio.com2026-04-06OnlineWix Studio
fxaxm.com2026-03-09OfflineGMO Internet
bitfinexprofit.com2026-02-26Offline—
distribution-plasma.com2026-02-26OfflinePublicDomainRegistry.com
auth-s1.co2026-02-26Taken downNameSilo
bitfinexc.win2026-02-24OfflineGname.com
bitfinex.kids2026-02-24OfflineGname.com
check-plasma.app2026-02-13UnknownNiceNIC
bitfinexw.asia2026-02-01OfflineGname.com
tmall990.cyou2026-01-06OfflineDynadot
thespkflareline.com2026-01-04Taken downCosmotown
www-plasma.app2025-12-20Taken downNiceNIC
plasma.mom2025-12-07OfflinePorkbun
eligible-plasma.com2025-11-19UnknownNiceNIC
plasma.credit2025-10-28Taken downCloudflare
coinstake.info2025-10-19OnlineTT-20230331 (ASN: 51167)
amazingbestearning.com2025-10-19OfflineNameSilo
plasmachainlive.com2025-10-09OfflineOwnRegistrar
plasma.allocation-invest.com2025-10-01OfflinePublicDomainRegistry.com
plasmareward.com2025-10-01OfflineOwnRegistrar
plasmachecks.com2025-10-01OfflineOwnRegistrar
plasmachecks.xyz2025-10-01UnknownNiceNIC
plasmachecker.xyz2025-09-30UnknownNiceNIC
proposal-plasma.com2025-09-27UnknownNiceNIC
plasmalive.xyz2025-09-26UnknownNiceNIC
bitfinexes.com2025-09-09OfflineAmazon Registrar
duplicate-disabled-4485.invalid2025-09-09OfflineAmazon Registrar
bitfinexdesktopapp.com2025-09-09OfflineERANET
qfsnanoxleger.co2025-09-07OfflineCosmotown
primequotex.com2025-08-09OfflineWeb Commerce Communications
duplicate-disabled-517.invalid2025-08-08OfflinePublicDomainRegistry.com
piltradcom.com2025-08-02OfflineNameCheap

All 48 Bitfinex reports

Where they are registered and hosted

Registrars

  1. NiceNIC7
  2. MarkMonitor4
  3. PublicDomainRegistry.com3
  4. OwnRegistrar3
  5. Gname.com3
  6. GoDaddy.com3
  7. Cosmotown2
  8. Amazon Registrar2

Top-level domains

  1. .com23
  2. .dev4
  3. .xyz3
  4. .invalid2
  5. .co2
  6. .app2
  7. .sbs2
  8. .info1

Hosting networks

  1. CLOUDFLARENET, US13
  2. Cloudflare, Inc.6
  3. AS-COLOCROSSING, US4
  4. Amazon.com, Inc.4
  5. ACE4
  6. ACE-AS-AP ACE, SG2
  7. Sollutium-NL SOLLUTIUM EU Sp z.o.o., PL2
  8. CLOUDFLARENET - Cloudflare, Inc., US2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Bitfinex; share of all PhishDestroy reports: 0.02%.