Phishing sites impersonating Kelp

PhishDestroy has recorded 20 phishing domains impersonating Kelp since 2025-09-12, 10 of them in the last 30 days. The most used registrars are Spaceship and PublicDomainRegistry.com; the most common TLDs are .com and .co. Open Kelp only from its official app or a saved bookmark.

20
Domains, all time
10
Last 30 days
14
Online at last check
0
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 12026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 12026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 12026-10-16: 62026-10-17: 22026-10-18: 02026-10-19: 12026-10-20: 02026-10-21: 02026-10-22: 0
Kelp phishing domains detected per day: 12 from 2026-07-25 to 2026-10-22; peak 6.

How to tell a fake Kelp site

Words most often added to the brand in reported domains: kelpdao, rainbet, oopbuyse, oop, buy, oopbuy, spreadsheets, claim, rseth, kernel.

  • Type the address yourself or use a bookmark; phishing links for Kelp arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Kelp does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Kelp phishing domains

The 20 most recently detected domains impersonating Kelp
DomainFirst detectedStatus at last checkRegistrar
oopbuy-spreadsheets.lifestyle2026-10-19OnlineSpaceship
oop-buy.motorcycles2026-10-17OnlineSpaceship
kako-sheets.monster2026-10-17OnlineSpaceship
oopbuy-spreadsheets.cfd2026-10-16OnlineSpaceship
oop-buy.quest2026-10-16OnlineSpaceship
kakobuyde.cyou2026-10-16OnlineSpaceship
oopbuyse.quest2026-10-16OnlineSpaceship
oopbuyse.forum2026-10-16OnlineSpaceship
kakobuy-spreadsheet.boats2026-10-16OnlineSpaceship
rainbet-kasino-sweden.com2026-10-15OnlineDynadot
binkbottlepolska.com2026-09-21OfflineCNOBIN INFORMATION TECHNOLOGY
rainbet-fi.com2026-09-08OfflineRegery.com
kleankelp.duckdns.org2026-06-15OnlineDuckDNS
portal-kelpdao.co2026-04-19OnlineDynadot
kelpairdrop.online2026-02-26Offline—
kelpdao.com-app-connect-v2-wailet.com2026-02-26Offline—
bafybeidnuheiongovjpcilixkn5dpy3rtppyfodni7rdtuldmdc3jlqqve.ipfs.dweb.link2025-12-23OnlineCSC Corporate Domains
app-kernel-dao-v1.com2025-10-14OnlineWeb Commerce Communications
rseth.org2025-09-17OfflinePublicDomainRegistry.com
claim-kelpdao.co2025-09-12OfflinePublicDomainRegistry.com

All 20 Kelp reports

Where they are registered and hosted

Top-level domains

  1. .com5
  2. .co2
  3. .org2
  4. .quest2
  5. .link1
  6. .online1
  7. .boats1
  8. .forum1

Hosting networks

  1. AMAZON-02 - Amazon.com, Inc., US9
  2. CLOUDFLARENET, US4
  3. Cloudflare, Inc.3
  4. PROTOCOL, US1
  5. FEMO IT SOLUTIONS LIMITED1
  6. CLOUDFLARENET - Cloudflare, Inc., US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Kelp; share of all PhishDestroy reports: 0.01%.