Protocol-impersonator domain registered (typosquat)
Frax Finance's assessment for RD-F-161 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Typosquat / impersonator domain assessment for frax.finance. Domain-monitoring feed not available for definitive 90d WHOIS registration check. However: (1) Fake GitHub Pages sites (financefrax.github.io, web-frax-finance.github.io) found active in 2026-05-17 search results — confirmed hosted impersonation surfaces. (2) The Nov 2023 DNS hijack created a temporary registrar-level domain impersonation. Registration delta for typosquat check: 00-profile.md profiled 2026-05-17, this assessment 2026-05-17, delta = 0 days. A dedicated typosquat WHOIS registration within 90d cannot be confirmed or denied without domain-monitoring feed. Yellow: fake GitHub Pages hosting is confirmed impersonation; dedicated recently-registered typosquat domain status requires feed for definitive check.
Sources #
- URLfinancefrax.github.io — Frax Finance impersonation siteFake Frax Finance GitHub Pages site — active as of 2026-05-17 searchretrieved 2026-05-17
- crypto.news — Frax Finance DNS hijack 2023Nov 2023 DNS hijack: registrar-level frax.finance domain compromise — historical precedentretrieved 2026-05-17
- web-frax-finance.github.io — Frax Finance impersonation siteSecond fake Frax Finance GitHub Pages site — active as of 2026-05-17 searchretrieved 2026-05-17
Methodology #
Determine whether a typosquat of the official protocol domain has been registered in the last 90 days.
See the full factor methodology and distribution across all protocols →