Official MASTR logo MASTR
Menu
Contents
← Wiki home

Scam patterns

DNS hijacking

Domain records are changed so a real name resolves to attacker infrastructure.

Reference note · Sources below

Research articles and reference entries are published in English. Navigation is available in seven languages.

In this article
  1. Overview
  2. Why it matters
  3. What to check
  4. Sources

Overview

Domain records are changed so a real name resolves to attacker infrastructure.

Why it matters

Users type the correct domain but receive hostile wallet requests.

What to check

Check DNS history, registrar events, certificates and response hashes.

Sources

Related reading

MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet