Scam patterns
DNS hijacking
Domain records are changed so a real name resolves to attacker infrastructure.
Research articles and reference entries are published in English. Navigation is available in seven languages.
People & projects
In this article
Overview
Domain records are changed so a real name resolves to attacker infrastructure.
Why it matters
Users type the correct domain but receive hostile wallet requests.
What to check
Check DNS history, registrar events, certificates and response hashes.