# Reports with the collector brand label Proton Mail PhishDestroy has recorded 13 reports carrying the collector brand label Proton Mail since 2025-09-02, 3 of them in the last 30 days. The most used registrars are NameCheap and Square; the most common TLDs are .com and .site. Open Proton Mail only from its official app or a saved bookmark. 13Domains, all time 3Last 30 days 10Online at last check 1Confirmed takedowns ## New domains in the last 90 days 1102026-08-092026-09-232026-11-06 * Reports labelled Proton Mail recorded per day (domains per day, UTC): 5 from 2026-08-09 to 2026-11-06; peak 1 on 2026-08-11. * The last day is still in progress.Data tableReports labelled Proton Mail recorded per day, domains per day Date | Domains | 2026-08-09 | 0 | 2026-08-10 | 0 | 2026-08-11 | 1 | 2026-08-12 | 0 | 2026-08-13 | 0 | 2026-08-14 | 0 | 2026-08-15 | 0 | 2026-08-16 | 0 | 2026-08-17 | 0 | 2026-08-18 | 0 | 2026-08-19 | 0 | 2026-08-20 | 0 | 2026-08-21 | 0 | 2026-08-22 | 0 | 2026-08-23 | 0 | 2026-08-24 | 0 | 2026-08-25 | 0 | 2026-08-26 | 0 | 2026-08-27 | 0 | 2026-08-28 | 0 | 2026-08-29 | 0 | 2026-08-30 | 0 | 2026-08-31 | 1 | 2026-09-01 | 0 | 2026-09-02 | 0 | 2026-09-03 | 0 | 2026-09-04 | 0 | 2026-09-05 | 0 | 2026-09-06 | 0 | 2026-09-07 | 0 | 2026-09-08 | 0 | 2026-09-09 | 0 | 2026-09-10 | 0 | 2026-09-11 | 0 | 2026-09-12 | 0 | 2026-09-13 | 0 | 2026-09-14 | 0 | 2026-09-15 | 0 | 2026-09-16 | 0 | 2026-09-17 | 0 | 2026-09-18 | 0 | 2026-09-19 | 0 | 2026-09-20 | 0 | 2026-09-21 | 0 | 2026-09-22 | 0 | 2026-09-23 | 0 | 2026-09-24 | 0 | 2026-09-25 | 0 | 2026-09-26 | 0 | 2026-09-27 | 0 | 2026-09-28 | 0 | 2026-09-29 | 0 | 2026-09-30 | 0 | 2026-10-01 | 0 | 2026-10-02 | 0 | 2026-10-03 | 0 | 2026-10-04 | 0 | 2026-10-05 | 0 | 2026-10-06 | 0 | 2026-10-07 | 0 | 2026-10-08 | 0 | 2026-10-09 | 0 | 2026-10-10 | 0 | 2026-10-11 | 0 | 2026-10-12 | 0 | 2026-10-13 | 0 | 2026-10-14 | 0 | 2026-10-15 | 0 | 2026-10-16 | 0 | 2026-10-17 | 0 | 2026-10-18 | 0 | 2026-10-19 | 0 | 2026-10-20 | 0 | 2026-10-21 | 0 | 2026-10-22 | 0 | 2026-10-23 | 0 | 2026-10-24 | 0 | 2026-10-25 | 0 | 2026-10-26 | 0 | 2026-10-27 | 0 | 2026-10-28 | 0 | 2026-10-29 | 0 | 2026-10-30 | 0 | 2026-10-31 | 0 | 2026-11-01 | 1 | 2026-11-02 | 1 | 2026-11-03 | 0 | 2026-11-04 | 1 | 2026-11-05 | 0 | 2026-11-06 * | 0 | ## How to tell a fake Proton Mail site Words most often added to the brand in reported domains: chipmixr, bit, mix, ttescovip, novablemsecuresystem, nexuslinkdarknet, onyxmatilkin, apps, proton, darknetwiki. - Type the address yourself or use a bookmark; phishing links for Proton Mail arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Proton Mail will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest reports labelled Proton Mail The 13 most recently recorded domains labelled Proton Mail Domain | First detected | Status at last check | Registrar | Listed because | [protonmail-100554.square.site](https://phishdestroy.io/domain/protonmail-100554.square.site/) | 2026-11-04 | Online | MarkMonitor | Name resembles Proton Mail | [protonmail-108522.square.site](https://phishdestroy.io/domain/protonmail-108522.square.site/) | 2026-11-02 | Online | Square | Name resembles Proton Mail | [my-business-100814-107514.square.site](https://phishdestroy.io/domain/my-business-100814-107514.square.site/) | 2026-11-01 | Online | Square | Brand label only | [darkweb101.com](https://phishdestroy.io/domain/darkweb101.com/) | 2026-08-31 | Online | NameSilo | Brand label only | [tor.taxi](https://phishdestroy.io/domain/tor.taxi/) | 2026-08-11 | Online | Tucows Domains | Brand label only | [apps-proton.com.cn](https://phishdestroy.io/domain/apps-proton.com.cn/) | 2026-07-06 | Online | 北京新网数码信息技术有限公司 | Brand label only | [onyxmatilkin.ru](https://phishdestroy.io/domain/onyxmatilkin.ru/) | 2026-05-15 | Online | REGRU-RU | Brand label only | [darknetwiki.com](https://phishdestroy.io/domain/darknetwiki.com/) | 2026-05-14 | Online | Eranet | Brand label only | [nexuslinkdarknet.com](https://phishdestroy.io/domain/nexuslinkdarknet.com/) | 2026-03-27 | Offline | NICENIC | Brand label only | [novablemsecuresystem.com](https://phishdestroy.io/domain/novablemsecuresystem.com/) | 2026-03-24 | Taken down | Cosmotown | Brand label only | [ttescovip.com](https://phishdestroy.io/domain/ttescovip.com/) | 2025-11-03 | Online | Xin Net Technology | Brand label only | [bit-mix.biz](https://phishdestroy.io/domain/bit-mix.biz/) | 2025-10-21 | Online | NameCheap | Brand label only | [xn--chipmixr-z30d.com](https://phishdestroy.io/domain/xn--chipmixr-z30d.com/) | 2025-09-02 | Offline | NameCheap | Brand label only | How the 13 domains are attributed to Proton Mail: 2 (15%) have a similar name in the domain, 0 (0%) name Proton Mail in the stored page title and 11 (85%) carry only the stored brand label. These collector labels can be wrong. A similar domain name or a matching page title alone does not establish impersonation, affiliation or common ownership. Open a report to see its dated evidence. [All 13 Proton Mail reports](https://phishdestroy.io/domain/?brand=Protonmail) ## Where they are registered and hosted ### Registrars - [NameCheap](https://phishdestroy.io/registrar/namecheap/)2 - Square2 - Xin Net Technology1 - [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)1 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)1 - REGRU-RU1 - 北京新网数码信息技术有限公司1 - [Eranet](https://phishdestroy.io/registrar/eranet/)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)6 - [.site](https://phishdestroy.io/tld/site/)3 - [.biz](https://phishdestroy.io/tld/biz/)1 - [.ru](https://phishdestroy.io/tld/ru/)1 - [.cn](https://phishdestroy.io/tld/cn/)1 - .taxi1 ### Hosting networks - Cloudflare, Inc.4 - Weebly, Inc.3 - NAMECHEAP-NET, US2 - IT7NET, CA1 - NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD1 - ALIBABA-CN-NET - Alibaba (US) Technology Co., Lt1 - DDOS-GUARD DDOS-GUARD LTD, RU1 ## Related - [Cyber Hygiene Guide: Passwords, 2FA, Backups](https://phishdestroy.io/digital-fortress-guide) Research that mentions Proton Mail - [Crypto wallet drained? Emergency steps](https://phishdestroy.io/critical-action) If you already entered a seed phrase or signed a request - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) Report a fake Proton Mail site to its registrar and host Data: PhishDestroy domain-report database, built 2026-11-06. Counts cover every reported domain whose stored target brand is Proton Mail; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/protonmail/