# Phishing sites impersonating LinkedIn

PhishDestroy has recorded 192 phishing domains impersonating LinkedIn since 2025-08-10, 9 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .org. The official LinkedIn domain is linkedin.com: any other site asking for your login or wallet is not LinkedIn.

192Domains, all time

9Last 30 days

71Online at last check

32Confirmed takedowns

## New domains in the last 90 days

LinkedIn phishing domains detected per day: 27 from 2026-07-25 to 2026-10-22; peak 3.

## How to tell a fake LinkedIn site

Official domain: linkedin.com.

Words most often added to the brand in reported domains: aml, usdt, verification, checking, wlfi, finance, check, audit, lockbox, claim.
- Type the address yourself or use a bookmark; phishing links for LinkedIn arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- LinkedIn does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest LinkedIn phishing domains

The 50 most recently detected domains impersonating LinkedIn
Domain | First detected | Status at last check | Registrar | 
[linkedin.rent](https://phishdestroy.io/domain/linkedin.rent/) | 2026-10-15 | Online | GoDaddy.com | 
[manychatforlinkedin.com](https://phishdestroy.io/domain/manychatforlinkedin.com/) | 2026-10-15 | Online | GoDaddy.com | 
[sandboxswappro.live](https://phishdestroy.io/domain/sandboxswappro.live/) | 2026-10-13 | Offline | NameSilo | 
[faran.ac.ir](https://phishdestroy.io/domain/faran.ac.ir/) | 2026-10-13 | Online | — | 
[eaziit.com](https://phishdestroy.io/domain/eaziit.com/) | 2026-10-11 | Online | Amazon Registrar | 
[chedea.eu](https://phishdestroy.io/domain/chedea.eu/) | 2026-10-11 | Online | Porkbun | 
[k-h.co.il](https://phishdestroy.io/domain/k-h.co.il/) | 2026-10-11 | Online | Communigal Communication | 
[receiptslinkedin.com](https://phishdestroy.io/domain/receiptslinkedin.com/) | 2026-10-06 | Online | NameSilo | 
[a-linkedlin.com](https://phishdestroy.io/domain/a-linkedlin.com/) | 2026-10-04 | Online | Key-Systems | 
[ume.la](https://phishdestroy.io/domain/ume.la/) | 2026-09-21 | Online | PDR | 
[wwww-linkedin.be](https://phishdestroy.io/domain/wwww-linkedin.be/) | 2026-09-21 | Online | Key-Systems | 
[log-linkedin.com](https://phishdestroy.io/domain/log-linkedin.com/) | 2026-09-17 | Offline | Key-Systems | 
[start-linkedin.com](https://phishdestroy.io/domain/start-linkedin.com/) | 2026-09-12 | Offline | Key-Systems | 
[sol.worldliberty1financial.com](https://phishdestroy.io/domain/sol.worldliberty1financial.com/) | 2026-09-11 | Offline | WebNIC | 
[consultorestm.com](https://phishdestroy.io/domain/consultorestm.com/) | 2026-09-08 | Online | Squarespace Domains II | 
[invreceiptslinkedin.com](https://phishdestroy.io/domain/invreceiptslinkedin.com/) | 2026-09-05 | Online | NameSilo | 
[eu-mirvynth.cyou](https://phishdestroy.io/domain/eu-mirvynth.cyou/) | 2026-08-24 | Online | NAMECHEAP | 
[prysmtrading.com](https://phishdestroy.io/domain/prysmtrading.com/) | 2026-08-18 | Online | IONOS SE | 
[aml-guard.net](https://phishdestroy.io/domain/aml-guard.net/) | 2026-08-14 | Online | NICENIC | 
[kimi-ai-plus.softhvn.xyz](https://phishdestroy.io/domain/kimi-ai-plus.softhvn.xyz/) | 2026-08-12 | Online | HOSTINGER operations | 
[aml-checkin.app](https://phishdestroy.io/domain/aml-checkin.app/) | 2026-08-08 | Online | Dynadot | 
[amldoc.com](https://phishdestroy.io/domain/amldoc.com/) | 2026-08-08 | Online | GoDaddy.com | 
[finserveconsulting.com](https://phishdestroy.io/domain/finserveconsulting.com/) | 2026-08-07 | Online | Wild West Domains | 
[etherexplorer.net](https://phishdestroy.io/domain/etherexplorer.net/) | 2026-08-03 | Offline | Web Commerce Communications dba WebNic.c | 
[search-aml.net](https://phishdestroy.io/domain/search-aml.net/) | 2026-07-31 | Offline | Cloudflare | 
[assetsarch.com](https://phishdestroy.io/domain/assetsarch.com/) | 2026-07-27 | Offline | Name.com | 
[frontdoor.trellisconnect.com](https://phishdestroy.io/domain/frontdoor.trellisconnect.com/) | 2026-07-27 | Online | Squarespace Domains II | 
[echo-copy.app](https://phishdestroy.io/domain/echo-copy.app/) | 2026-06-25 | Online | Name.com | 
[aitrade-exj.pages.dev](https://phishdestroy.io/domain/aitrade-exj.pages.dev/) | 2026-06-21 | Online | Cloudflare | 
[sdfguipoijhgcx-dpai1gwpp6mr.edgeone.cool](https://phishdestroy.io/domain/sdfguipoijhgcx-dpai1gwpp6mr.edgeone.cool/) | 2026-06-18 | Online | DNSPod | 
[linked-on.com](https://phishdestroy.io/domain/linked-on.com/) | 2026-06-12 | Online | PublicDomainRegistry.com | 
[eri0-dreayi.vercel.app](https://phishdestroy.io/domain/eri0-dreayi.vercel.app/) | 2026-06-10 | Online | Vercel | 
[brazil-2sl.pages.dev](https://phishdestroy.io/domain/brazil-2sl.pages.dev/) | 2026-06-07 | Online | Cloudflare | 
[georgetownmover.com](https://phishdestroy.io/domain/georgetownmover.com/) | 2026-05-29 | Taken down | GoDaddy.com | 
[finovexus.com](https://phishdestroy.io/domain/finovexus.com/) | 2026-05-15 | Online | Registrar.eu | 
[pauloromeira.com](https://phishdestroy.io/domain/pauloromeira.com/) | 2026-05-07 | Online | Cloudflare | 
[dhruvi-patel15.github.io](https://phishdestroy.io/domain/dhruvi-patel15.github.io/) | 2026-05-01 | Taken down | GitHub | 
[wallet-adapter-wine.vercel.app](https://phishdestroy.io/domain/wallet-adapter-wine.vercel.app/) | 2026-04-27 | Online | Vercel | 
[future-laboratories.org](https://phishdestroy.io/domain/future-laboratories.org/) | 2026-04-26 | Online | GoDaddy.com | 
[adnanbaloch8923-ship-it.github.io](https://phishdestroy.io/domain/adnanbaloch8923-ship-it.github.io/) | 2026-04-22 | Taken down | GitHub | 
[bafybeifhkli7dfi6brfwr3637krztfkps6yf26wqe45ks7mq23jkrg5pzm.ipfs.dweb.link](https://phishdestroy.io/domain/bafybeifhkli7dfi6brfwr3637krztfkps6yf26wqe45ks7mq23jkrg5pzm.ipfs.dweb.link/) | 2026-04-21 | Taken down | CSC Corporate Domains | 
[vnario.github.io](https://phishdestroy.io/domain/vnario.github.io/) | 2026-04-18 | Online | GitHub | 
[renjith-baby.github.io](https://phishdestroy.io/domain/renjith-baby.github.io/) | 2026-04-15 | Taken down | GitHub | 
[eth-compliance.app](https://phishdestroy.io/domain/eth-compliance.app/) | 2026-03-31 | Unknown | NICENIC | 
[aml-crypto-bot.org](https://phishdestroy.io/domain/aml-crypto-bot.org/) | 2026-03-28 | Offline | Dynadot | 
[page-linkedin-sales-nav-export.pages.dev](https://phishdestroy.io/domain/page-linkedin-sales-nav-export.pages.dev/) | 2026-03-28 | Offline | Cloudflare | 
[aml-check.it.com](https://phishdestroy.io/domain/aml-check.it.com/) | 2026-03-28 | Offline | Intis Telecom | 
[aml-cryptobot.one](https://phishdestroy.io/domain/aml-cryptobot.one/) | 2026-03-28 | Online | Dynadot | 
[lynx-signal.pages.dev](https://phishdestroy.io/domain/lynx-signal.pages.dev/) | 2026-03-28 | Online | Cloudflare | 
[sdjiocsdncosco.com](https://phishdestroy.io/domain/sdjiocsdncosco.com/) | 2026-03-28 | Unknown | NICENIC | 

[All 192 LinkedIn reports](https://phishdestroy.io/domain/?brand=LinkedIn)

## Where they are registered and hosted

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)40
- Cloudflare13
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)9
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)8
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)8
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)7
- GitHub7
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)7

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)73
- [.org](https://phishdestroy.io/tld/org/)18
- [.net](https://phishdestroy.io/tld/net/)17
- [.app](https://phishdestroy.io/tld/app/)10
- [.io](https://phishdestroy.io/tld/io/)10
- [.dev](https://phishdestroy.io/tld/dev/)9
- [.info](https://phishdestroy.io/tld/info/)6
- [.pro](https://phishdestroy.io/tld/pro/)6

### Hosting networks

- CLOUDFLARENET, US67
- Cloudflare, Inc.14
- CLOUDFLARENET - Cloudflare, Inc., US12
- Fastly, Inc.8
- VDSINA SERVERS TECH FZCO, AE5
- AS56971 CGI GLOBAL LIMITED, HK5
- Amazon.com, Inc.5
- abstract ab stract ltd, FI4

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is LinkedIn; share of all PhishDestroy reports: 0.09%.

Canonical: https://phishdestroy.io/brand/linkedin/