Phishing sites impersonating Crypto.com

PhishDestroy has recorded 257 phishing domains impersonating Crypto.com since 2025-07-16, 5 of them in the last 30 days. The most used registrars are NiceNIC and GoDaddy.com; the most common TLDs are .com and .io. The official Crypto.com domain is crypto.com: any other site asking for your login or wallet is not Crypto.com.

257
Domains, all time
5
Last 30 days
128
Online at last check
28
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 72026-07-28: 12026-07-29: 12026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 12026-08-04: 152026-08-05: 12026-08-06: 02026-08-07: 12026-08-08: 02026-08-09: 52026-08-10: 12026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 22026-08-15: 02026-08-16: 02026-08-17: 12026-08-18: 22026-08-19: 12026-08-20: 02026-08-21: 22026-08-22: 32026-08-23: 02026-08-24: 12026-08-25: 12026-08-26: 22026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 22026-09-02: 32026-09-03: 02026-09-04: 12026-09-05: 02026-09-06: 12026-09-07: 02026-09-08: 22026-09-09: 02026-09-10: 02026-09-11: 12026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 12026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 12026-09-25: 12026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 12026-10-07: 02026-10-08: 12026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 12026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Crypto.com phishing domains detected per day: 65 from 2026-07-25 to 2026-10-22; peak 15.

How to tell a fake Crypto.com site

Official domain: crypto.com.

Words most often added to the brand in reported domains: crypto, wallet, login, crypt, swap, aauth, checkyourcrypto, trackings, defi, typedream.

  • Type the address yourself or use a bookmark; phishing links for Crypto.com arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Crypto.com will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Crypto.com phishing domains

The 50 most recently detected domains impersonating Crypto.com
DomainFirst detectedStatus at last checkRegistrar
securecryptoexchange.xyz2026-10-13OnlineNameSilo
326815-crypto.com2026-10-08OnlineDynadot
aioraclecrypto.com2026-10-06OnlineDynadot
ust-crypto.com2026-09-25OfflineWeb Commerce Communications dba WebNic.c
crypto.legacytrustfinance.com2026-09-24OnlinePublicDomainRegistry.com
web.aitokencrypto.com2026-09-17OnlineMetaregistrar
crypto.eventchecker.lol2026-09-11OfflinePublicDomainRegistry.com
crypto-cml.netlify.app2026-09-08OfflineNetlify
crypt-comet.com2026-09-08OnlineDynadot
generator-crypto-2-1.vercel.app2026-09-06OnlineVercel
crptmoy.com2026-09-04OfflineRealtime Register
crypto.cryptostar.lol2026-09-02OfflinePublicDomainRegistry.com
rainbet-casino-crypto.com2026-09-02OnlineRegistrar.eu
cryptocot.cc2026-09-02OnlineDynadot
syrusmistri4.blogspot.com2026-09-01OnlineGoogle
823469-crypto.com2026-09-01OnlineNICENIC
crypto.cryptoworld.lol2026-08-31OfflinePublicDomainRegistry.com
343157crypto.com2026-08-26OfflineDominet (HK)
344881-crypto.com2026-08-26OnlineSpaceship
aml.verifica-crypto.com2026-08-25OfflineOwnRegistrar
test213421421243.com2026-08-24OnlineTrustname.com
portal.dwin.online2026-08-22OnlineNAMECHEAP
agamews.slotoplays.com2026-08-22OnlineTrustname.com
db-static-sz6-olk.slotoplays.com2026-08-22OnlineTrustname.com
profitxcrypto.com2026-08-21OfflineName SRS
gainifycrypto.com2026-08-21OfflineName SRS
earncrypto.com2026-08-19OnlineNameCheap
blitz-swap.com2026-08-18OnlineSquarespace Domains II
52353-crypto.com2026-08-18UnknownNICENIC
743826-crypto.com2026-08-17UnknownNICENIC
884666-crypto.com2026-08-14OnlineDynadot
portal.netfflixcas.live2026-08-14OnlineGlobal Domain
crypto.trynet.work2026-08-10OfflineGoDaddy.com
passport.trackings.click2026-08-09OnlineTUCOWS.COM
business.trackings.click2026-08-09OnlineTUCOWS.COM
get.trackings.click2026-08-09OnlineTUCOWS.COM
mix-crypto.com2026-08-09OnlineHOSTINGER operations
securecryptotrade.com2026-08-09OnlineCloudflare
secured.tondrop.xyz2026-08-07OfflineGlobal Domain
install.grandmoney.top2026-08-05OnlinePublicDomainRegistry.com
meadcrypto.com2026-08-04OnlineNAMECHEAP
cps-crypto.com2026-08-04OnlineTUCOWS.COM
khalsacrypto.com2026-08-04OnlineGoDaddy.com
unitycoincrypto.com2026-08-04OfflineIONOS SE
tripletsofcrypto.com2026-08-04OnlineGoDaddy.com
betfurycrypto.com2026-08-04OnlineRegistrar.eu
sparesomecrypto.com2026-08-04OnlineAtom.com Domains
wherecanibuycrypto.com2026-08-04OnlineMetaregistrar
visoncrypto.com2026-08-04OnlineIONOS SE
sharafcrypto.com2026-08-04OnlineGoDaddy.com

All 257 Crypto.com reports

Where they are registered and hosted

Registrars

  1. NiceNIC24
  2. GoDaddy.com19
  3. Cloudflare17
  4. Gname.com15
  5. NameCheap14
  6. NICENIC12
  7. PublicDomainRegistry.com10
  8. Dynadot9

Top-level domains

  1. .com187
  2. .io20
  3. .app5
  4. .live4
  5. .click4
  6. .net3
  7. .top3
  8. .xyz3

Hosting networks

  1. Cloudflare, Inc.76
  2. CLOUDFLARENET - Cloudflare, Inc., US36
  3. CLOUDFLARENET, US24
  4. Amazon.com, Inc.19
  5. Google LLC7
  6. FranTech Solutions5
  7. AMAZON-02, US4
  8. Hostinger International Limited4

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Crypto.com; share of all PhishDestroy reports: 0.11%.