Phishing domains under .ai

.ai accounts for 809 of the 224,866 domains in the PhishDestroy database (0.36%), with 15 new ones in the last 30 days. The most impersonated brand under .ai is Coinbase. 132 were online at the last check and 484 have a confirmed takedown.

809
Reported .ai domains
0.36%
Share of PhishDestroy reports
15
Last 30 days
484
Confirmed takedowns

Detections per month

2025-11: 842025-12: 3472026-01: 212026-02: 642026-03: 292026-04: 242026-05: 102026-06: 1262026-07: 282026-08: 342026-09: 172026-10: 10
.ai phishing domains detected per month: 794 from 2025-11 to 2026-10; peak 347.

Brands and registrars

Impersonated brands

  1. Coinbase148
  2. Trezor132
  3. MetaMask81
  4. Kraken69
  5. Ledger40
  6. Sui32
  7. Rabby15
  8. Phantom13

Registrars

  1. CSC Corporate Domains612
  2. GoDaddy.com45
  3. NameCheap38
  4. Framer16
  5. NAMECHEAP10
  6. NiceNIC9
  7. NameSilo6
  8. Cloudflare6

Latest .ai phishing domains

The 30 most recently detected .ai domains
DomainFirst detectedStatus at last checkRegistrar
autopilot.truefinance.ai2026-10-22OnlineGoDaddy.com
app.oct24.ai2026-10-16OnlineNameCheap
alturalgo.ai2026-10-12OnlineNameCheap
engsuitesapp.framer.ai2026-10-10OfflineCSC Corporate Domains
web-iostrt-trezr-cloud.framer.ai2026-10-10OfflineCSC Corporate Domains
en-trezor-io-start-setup.framer.ai2026-10-10OfflineCSC Corporate Domains
auth-spectrum-net-login1.framer.ai2026-10-10OnlineCSC Corporate Domains
fxtrad.ai2026-10-09OnlineGNAME.COM
live-ledgrapp.relumesite.ai2026-10-08OnlineCloudflare
yldx.ai2026-10-08OnlineGoDaddy.com
web-log-en-trezur.framer.ai2026-09-27OfflineCSC Corporate Domains
wormgpt.ai2026-09-26OnlineHOSTINGER operations
demo.mosci.ai2026-09-25OnlineNAMECHEAP
att.balto.ai2026-09-23OnlineGoDaddy.com
onlineupholdio.framer.ai2026-09-22OnlineCSC Corporate Domains
newsbank.ai2026-09-21OnlineDreamscape Networks
clashx.ai2026-09-19OfflineNAMECHEAP
apps-logon-ndaxcdn.framer.ai2026-09-19OfflineCSC Corporate Domains
public-trezario.framer.ai2026-09-12OfflineCSC Corporate Domains
cloude.ai2026-09-11OnlineDynadot
gvtc-auth.framer.ai2026-09-07OfflineCSC Corporate Domains
icomarks.ai2026-09-07OnlineGoDaddy.com
dashboard.sirenai.ai2026-09-06OfflineHOSTINGER operations
web3o.ai2026-09-04OfflineGNAME.COM
unikyber.ai2026-09-04OnlineCloudflare
osarc.ai2026-09-02OnlineInternetX
video.gemini-omni.ai2026-09-01OfflineSpaceship
momentum.mytessera.ai2026-08-31OnlineNAMECHEAP
decibels.ai2026-08-28OfflineNAMECHEAP
metamasks.ai2026-08-26OnlineGoDaddy.com

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .ai registrations; first .ai report 2025-08-03.