Phishing sites impersonating LinkedIn

PhishDestroy has recorded 192 phishing domains impersonating LinkedIn since 2025-08-10, 9 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .org. The official LinkedIn domain is linkedin.com: any other site asking for your login or wallet is not LinkedIn.

192
Domains, all time
9
Last 30 days
71
Online at last check
32
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 22026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 12026-08-01: 02026-08-02: 02026-08-03: 12026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 12026-08-08: 22026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 12026-08-13: 02026-08-14: 12026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 12026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 12026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 12026-09-06: 02026-09-07: 02026-09-08: 12026-09-09: 02026-09-10: 02026-09-11: 12026-09-12: 12026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 12026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 22026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 12026-10-05: 02026-10-06: 12026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 32026-10-12: 02026-10-13: 22026-10-14: 02026-10-15: 22026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
LinkedIn phishing domains detected per day: 27 from 2026-07-25 to 2026-10-22; peak 3.

How to tell a fake LinkedIn site

Official domain: linkedin.com.

Words most often added to the brand in reported domains: aml, usdt, verification, checking, wlfi, finance, check, audit, lockbox, claim.

  • Type the address yourself or use a bookmark; phishing links for LinkedIn arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • LinkedIn does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest LinkedIn phishing domains

The 50 most recently detected domains impersonating LinkedIn
DomainFirst detectedStatus at last checkRegistrar
linkedin.rent2026-10-15OnlineGoDaddy.com
manychatforlinkedin.com2026-10-15OnlineGoDaddy.com
sandboxswappro.live2026-10-13OfflineNameSilo
faran.ac.ir2026-10-13Online—
eaziit.com2026-10-11OnlineAmazon Registrar
chedea.eu2026-10-11OnlinePorkbun
k-h.co.il2026-10-11OnlineCommunigal Communication
receiptslinkedin.com2026-10-06OnlineNameSilo
a-linkedlin.com2026-10-04OnlineKey-Systems
ume.la2026-09-21OnlinePDR
wwww-linkedin.be2026-09-21OnlineKey-Systems
log-linkedin.com2026-09-17OfflineKey-Systems
start-linkedin.com2026-09-12OfflineKey-Systems
sol.worldliberty1financial.com2026-09-11OfflineWebNIC
consultorestm.com2026-09-08OnlineSquarespace Domains II
invreceiptslinkedin.com2026-09-05OnlineNameSilo
eu-mirvynth.cyou2026-08-24OnlineNAMECHEAP
prysmtrading.com2026-08-18OnlineIONOS SE
aml-guard.net2026-08-14OnlineNICENIC
kimi-ai-plus.softhvn.xyz2026-08-12OnlineHOSTINGER operations
aml-checkin.app2026-08-08OnlineDynadot
amldoc.com2026-08-08OnlineGoDaddy.com
finserveconsulting.com2026-08-07OnlineWild West Domains
etherexplorer.net2026-08-03OfflineWeb Commerce Communications dba WebNic.c
search-aml.net2026-07-31OfflineCloudflare
assetsarch.com2026-07-27OfflineName.com
frontdoor.trellisconnect.com2026-07-27OnlineSquarespace Domains II
echo-copy.app2026-06-25OnlineName.com
aitrade-exj.pages.dev2026-06-21OnlineCloudflare
sdfguipoijhgcx-dpai1gwpp6mr.edgeone.cool2026-06-18OnlineDNSPod
linked-on.com2026-06-12OnlinePublicDomainRegistry.com
eri0-dreayi.vercel.app2026-06-10OnlineVercel
brazil-2sl.pages.dev2026-06-07OnlineCloudflare
georgetownmover.com2026-05-29Taken downGoDaddy.com
finovexus.com2026-05-15OnlineRegistrar.eu
pauloromeira.com2026-05-07OnlineCloudflare
dhruvi-patel15.github.io2026-05-01Taken downGitHub
wallet-adapter-wine.vercel.app2026-04-27OnlineVercel
future-laboratories.org2026-04-26OnlineGoDaddy.com
adnanbaloch8923-ship-it.github.io2026-04-22Taken downGitHub
bafybeifhkli7dfi6brfwr3637krztfkps6yf26wqe45ks7mq23jkrg5pzm.ipfs.dweb.link2026-04-21Taken downCSC Corporate Domains
vnario.github.io2026-04-18OnlineGitHub
renjith-baby.github.io2026-04-15Taken downGitHub
eth-compliance.app2026-03-31UnknownNICENIC
aml-crypto-bot.org2026-03-28OfflineDynadot
page-linkedin-sales-nav-export.pages.dev2026-03-28OfflineCloudflare
aml-check.it.com2026-03-28OfflineIntis Telecom
aml-cryptobot.one2026-03-28OnlineDynadot
lynx-signal.pages.dev2026-03-28OnlineCloudflare
sdjiocsdncosco.com2026-03-28UnknownNICENIC

All 192 LinkedIn reports

Where they are registered and hosted

Registrars

  1. NiceNIC40
  2. Cloudflare13
  3. GoDaddy.com9
  4. Dynadot8
  5. Web Commerce Communications8
  6. NameCheap7
  7. GitHub7
  8. NICENIC7

Top-level domains

  1. .com73
  2. .org18
  3. .net17
  4. .app10
  5. .io10
  6. .dev9
  7. .info6
  8. .pro6

Hosting networks

  1. CLOUDFLARENET, US67
  2. Cloudflare, Inc.14
  3. CLOUDFLARENET - Cloudflare, Inc., US12
  4. Fastly, Inc.8
  5. VDSINA SERVERS TECH FZCO, AE5
  6. AS56971 CGI GLOBAL LIMITED, HK5
  7. Amazon.com, Inc.5
  8. abstract ab stract ltd, FI4

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is LinkedIn; share of all PhishDestroy reports: 0.09%.