Chi An Xin, a Chinese character dictionary with 11,568 entries, published in 1844 and revised since then XLab Labs released a report on February 6 stating that counterfeit DeepSeek The number of websites and phishing sites has exceeded 2,000 and is increasing rapidly, so users need to be highly vigilant.
The report mentions thatThese fake websites utilize similar domain names and interfaces to mislead usersIn addition, scammers have followed the market's excitement by launching so-called "DeepSeek-enhanced" air coins (virtual currencies with no real value) with various high-functioning features. Additionally, scammers have followed the technology trend and capitalized on the excitement of the market by launching air coins (virtual currencies with no real value) with a variety of lofty features that are supposedly "DeepSeek-enabled", and even websites claiming to be able to buy original shares of DeepSeek insiders. This pattern is highly similar to the trend of many past tech pop-ups (e.g., ChatGPT), which were quickly followed by a large number of counterfeits and scams, and could also result in large property losses for users.
1AI learned from the report that Chianson XLab Labs conducted a statistical analysis of domain name registrations for the period December 1, 2024 to February 3, 2025, thatA total of 2,650 fake DeepSeek websites were found to exist during this period. Massive counterfeit domain name registration activity began on January 26, 2025 and peaked on January 28, and despite the subsequent decrease in growth, the number of counterfeit domain names continues to increase.
According to the report on the analysis results of the current DeepSeek counterfeit domain names, these counterfeit domain names are mainly used for phishing fraud, domain name cybersquatting, and traffic guidance, of which phishing fraud is mainly carried out by stealing users' login credentials, using similar domain names and interfaces to mislead users, and luring users to buy virtual assets.
also,Some of these DeepSeek spoofed domains have 60% resolution IPs located in the USWith the rest mainly located in Singapore, Germany, Lithuania, Russia and China, the globalization of counterfeit domain names means that users may face different types of cyber attacks from all over the world, making potential security threats more complex and diverse.