# Phishing sites impersonating Crypto.com PhishDestroy has recorded 257 phishing domains impersonating Crypto.com since 2025-07-16, 5 of them in the last 30 days. The most used registrars are NiceNIC and GoDaddy.com; the most common TLDs are .com and .io. The official Crypto.com domain is crypto.com: any other site asking for your login or wallet is not Crypto.com. 257Domains, all time 5Last 30 days 128Online at last check 28Confirmed takedowns ## New domains in the last 90 days Crypto.com phishing domains detected per day: 65 from 2026-07-25 to 2026-10-22; peak 15. ## How to tell a fake Crypto.com site Official domain: crypto.com. Words most often added to the brand in reported domains: crypto, wallet, login, crypt, swap, aauth, checkyourcrypto, trackings, defi, typedream. - Type the address yourself or use a bookmark; phishing links for Crypto.com arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Crypto.com will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Crypto.com phishing domains The 50 most recently detected domains impersonating Crypto.com Domain | First detected | Status at last check | Registrar | [securecryptoexchange.xyz](https://phishdestroy.io/domain/securecryptoexchange.xyz/) | 2026-10-13 | Online | NameSilo | [326815-crypto.com](https://phishdestroy.io/domain/326815-crypto.com/) | 2026-10-08 | Online | Dynadot | [aioraclecrypto.com](https://phishdestroy.io/domain/aioraclecrypto.com/) | 2026-10-06 | Online | Dynadot | [ust-crypto.com](https://phishdestroy.io/domain/ust-crypto.com/) | 2026-09-25 | Offline | Web Commerce Communications dba WebNic.c | [crypto.legacytrustfinance.com](https://phishdestroy.io/domain/crypto.legacytrustfinance.com/) | 2026-09-24 | Online | PublicDomainRegistry.com | [web.aitokencrypto.com](https://phishdestroy.io/domain/web.aitokencrypto.com/) | 2026-09-17 | Online | Metaregistrar | [crypto.eventchecker.lol](https://phishdestroy.io/domain/crypto.eventchecker.lol/) | 2026-09-11 | Offline | PublicDomainRegistry.com | [crypto-cml.netlify.app](https://phishdestroy.io/domain/crypto-cml.netlify.app/) | 2026-09-08 | Offline | Netlify | [crypt-comet.com](https://phishdestroy.io/domain/crypt-comet.com/) | 2026-09-08 | Online | Dynadot | [generator-crypto-2-1.vercel.app](https://phishdestroy.io/domain/generator-crypto-2-1.vercel.app/) | 2026-09-06 | Online | Vercel | [crptmoy.com](https://phishdestroy.io/domain/crptmoy.com/) | 2026-09-04 | Offline | Realtime Register | [crypto.cryptostar.lol](https://phishdestroy.io/domain/crypto.cryptostar.lol/) | 2026-09-02 | Offline | PublicDomainRegistry.com | [rainbet-casino-crypto.com](https://phishdestroy.io/domain/rainbet-casino-crypto.com/) | 2026-09-02 | Online | Registrar.eu | [cryptocot.cc](https://phishdestroy.io/domain/cryptocot.cc/) | 2026-09-02 | Online | Dynadot | [syrusmistri4.blogspot.com](https://phishdestroy.io/domain/syrusmistri4.blogspot.com/) | 2026-09-01 | Online | Google | [823469-crypto.com](https://phishdestroy.io/domain/823469-crypto.com/) | 2026-09-01 | Online | NICENIC | [crypto.cryptoworld.lol](https://phishdestroy.io/domain/crypto.cryptoworld.lol/) | 2026-08-31 | Offline | PublicDomainRegistry.com | [343157crypto.com](https://phishdestroy.io/domain/343157crypto.com/) | 2026-08-26 | Offline | Dominet (HK) | [344881-crypto.com](https://phishdestroy.io/domain/344881-crypto.com/) | 2026-08-26 | Online | Spaceship | [aml.verifica-crypto.com](https://phishdestroy.io/domain/aml.verifica-crypto.com/) | 2026-08-25 | Offline | OwnRegistrar | [test213421421243.com](https://phishdestroy.io/domain/test213421421243.com/) | 2026-08-24 | Online | Trustname.com | [portal.dwin.online](https://phishdestroy.io/domain/portal.dwin.online/) | 2026-08-22 | Online | NAMECHEAP | [agamews.slotoplays.com](https://phishdestroy.io/domain/agamews.slotoplays.com/) | 2026-08-22 | Online | Trustname.com | [db-static-sz6-olk.slotoplays.com](https://phishdestroy.io/domain/db-static-sz6-olk.slotoplays.com/) | 2026-08-22 | Online | Trustname.com | [profitxcrypto.com](https://phishdestroy.io/domain/profitxcrypto.com/) | 2026-08-21 | Offline | Name SRS | [gainifycrypto.com](https://phishdestroy.io/domain/gainifycrypto.com/) | 2026-08-21 | Offline | Name SRS | [earncrypto.com](https://phishdestroy.io/domain/earncrypto.com/) | 2026-08-19 | Online | NameCheap | [blitz-swap.com](https://phishdestroy.io/domain/blitz-swap.com/) | 2026-08-18 | Online | Squarespace Domains II | [52353-crypto.com](https://phishdestroy.io/domain/52353-crypto.com/) | 2026-08-18 | Unknown | NICENIC | [743826-crypto.com](https://phishdestroy.io/domain/743826-crypto.com/) | 2026-08-17 | Unknown | NICENIC | [884666-crypto.com](https://phishdestroy.io/domain/884666-crypto.com/) | 2026-08-14 | Online | Dynadot | [portal.netfflixcas.live](https://phishdestroy.io/domain/portal.netfflixcas.live/) | 2026-08-14 | Online | Global Domain | [crypto.trynet.work](https://phishdestroy.io/domain/crypto.trynet.work/) | 2026-08-10 | Offline | GoDaddy.com | [passport.trackings.click](https://phishdestroy.io/domain/passport.trackings.click/) | 2026-08-09 | Online | TUCOWS.COM | [business.trackings.click](https://phishdestroy.io/domain/business.trackings.click/) | 2026-08-09 | Online | TUCOWS.COM | [get.trackings.click](https://phishdestroy.io/domain/get.trackings.click/) | 2026-08-09 | Online | TUCOWS.COM | [mix-crypto.com](https://phishdestroy.io/domain/mix-crypto.com/) | 2026-08-09 | Online | HOSTINGER operations | [securecryptotrade.com](https://phishdestroy.io/domain/securecryptotrade.com/) | 2026-08-09 | Online | Cloudflare | [secured.tondrop.xyz](https://phishdestroy.io/domain/secured.tondrop.xyz/) | 2026-08-07 | Offline | Global Domain | [install.grandmoney.top](https://phishdestroy.io/domain/install.grandmoney.top/) | 2026-08-05 | Online | PublicDomainRegistry.com | [meadcrypto.com](https://phishdestroy.io/domain/meadcrypto.com/) | 2026-08-04 | Online | NAMECHEAP | [cps-crypto.com](https://phishdestroy.io/domain/cps-crypto.com/) | 2026-08-04 | Online | TUCOWS.COM | [khalsacrypto.com](https://phishdestroy.io/domain/khalsacrypto.com/) | 2026-08-04 | Online | GoDaddy.com | [unitycoincrypto.com](https://phishdestroy.io/domain/unitycoincrypto.com/) | 2026-08-04 | Offline | IONOS SE | [tripletsofcrypto.com](https://phishdestroy.io/domain/tripletsofcrypto.com/) | 2026-08-04 | Online | GoDaddy.com | [betfurycrypto.com](https://phishdestroy.io/domain/betfurycrypto.com/) | 2026-08-04 | Online | Registrar.eu | [sparesomecrypto.com](https://phishdestroy.io/domain/sparesomecrypto.com/) | 2026-08-04 | Online | Atom.com Domains | [wherecanibuycrypto.com](https://phishdestroy.io/domain/wherecanibuycrypto.com/) | 2026-08-04 | Online | Metaregistrar | [visoncrypto.com](https://phishdestroy.io/domain/visoncrypto.com/) | 2026-08-04 | Online | IONOS SE | [sharafcrypto.com](https://phishdestroy.io/domain/sharafcrypto.com/) | 2026-08-04 | Online | GoDaddy.com | [All 257 Crypto.com reports](https://phishdestroy.io/domain/?brand=Crypto.com) ## Where they are registered and hosted ### Registrars - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)24 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)19 - Cloudflare17 - [Gname.com](https://phishdestroy.io/registrar/name-com/)15 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)14 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)12 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)10 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)9 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)187 - [.io](https://phishdestroy.io/tld/io/)20 - [.app](https://phishdestroy.io/tld/app/)5 - [.live](https://phishdestroy.io/tld/live/)4 - [.click](https://phishdestroy.io/tld/click/)4 - [.net](https://phishdestroy.io/tld/net/)3 - [.top](https://phishdestroy.io/tld/top/)3 - [.xyz](https://phishdestroy.io/tld/xyz/)3 ### Hosting networks - Cloudflare, Inc.76 - CLOUDFLARENET - Cloudflare, Inc., US36 - CLOUDFLARENET, US24 - Amazon.com, Inc.19 - Google LLC7 - FranTech Solutions5 - AMAZON-02, US4 - Hostinger International Limited4 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Crypto.com; share of all PhishDestroy reports: 0.11%. Canonical: https://phishdestroy.io/brand/crypto-com/