# Phishing domains under .app

.app accounts for 14,317 of the 224,866 domains in the PhishDestroy database (6.37%), with 176 new ones in the last 30 days. The most impersonated brand under .app is MetaMask. 6,565 were online at the last check and 2,641 have a confirmed takedown.

14,317Reported .app domains

6.37%Share of PhishDestroy reports

176Last 30 days

2,641Confirmed takedowns

## Detections per month

.app phishing domains detected per month: 13,385 from 2025-11 to 2026-10; peak 2,762.

## Brands and registrars

### Impersonated brands

- [MetaMask](https://phishdestroy.io/brand/metamask/)802
- [Trezor](https://phishdestroy.io/brand/trezor/)692
- [Google](https://phishdestroy.io/brand/google/)486
- [Moonshot](https://phishdestroy.io/brand/moonshot/)389
- [Coinbase](https://phishdestroy.io/brand/coinbase/)353
- [Ledger](https://phishdestroy.io/brand/ledger/)349
- [OpenSea](https://phishdestroy.io/brand/opensea/)294
- [Solana](https://phishdestroy.io/brand/solana/)260

### Registrars

- Netlify2,167
- Vercel1,707
- [Tucows Domains](https://phishdestroy.io/registrar/tucows/)1,672
- Vercel1,633
- [Squarespace Domains II](https://phishdestroy.io/registrar/squarespace/)642
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)628
- Typedream616
- Cloudflare586

## Latest .app phishing domains

The 30 most recently detected .app domains
Domain | First detected | Status at last check | Registrar | 
[penguinsegg.app](https://phishdestroy.io/domain/penguinsegg.app/) | 2026-10-22 | Online | NICENIC | 
[overview--en--trzer-en.typedream.app](https://phishdestroy.io/domain/overview--en--trzer-en.typedream.app/) | 2026-10-22 | Unknown | Squarespace Domains II | 
[getpikashow.app](https://phishdestroy.io/domain/getpikashow.app/) | 2026-10-21 | Online | Spaceship | 
[xaman-dashboard.app](https://phishdestroy.io/domain/xaman-dashboard.app/) | 2026-10-21 | Offline | NameSilo | 
[hyperecosystems.app](https://phishdestroy.io/domain/hyperecosystems.app/) | 2026-10-21 | Online | NICENIC | 
[amlradar.app](https://phishdestroy.io/domain/amlradar.app/) | 2026-10-20 | Online | Key-Systems | 
[app.poseidondata.app](https://phishdestroy.io/domain/app.poseidondata.app/) | 2026-10-20 | Online | Namecheap | 
[dashboard-cake.app](https://phishdestroy.io/domain/dashboard-cake.app/) | 2026-10-20 | Online | NICENIC | 
[dashboard-curve.app](https://phishdestroy.io/domain/dashboard-curve.app/) | 2026-10-20 | Online | NICENIC | 
[web-netcoins-login-doc.typedream.app](https://phishdestroy.io/domain/web-netcoins-login-doc.typedream.app/) | 2026-10-20 | Online | — | 
[dow-nload-ledger-live--doc.typedream.app](https://phishdestroy.io/domain/dow-nload-ledger-live--doc.typedream.app/) | 2026-10-20 | Online | — | 
[access-divace-bridge.typedream.app](https://phishdestroy.io/domain/access-divace-bridge.typedream.app/) | 2026-10-20 | Online | — | 
[gametweak.app](https://phishdestroy.io/domain/gametweak.app/) | 2026-10-19 | Online | Namecheap | 
[quantaai.app](https://phishdestroy.io/domain/quantaai.app/) | 2026-10-19 | Online | CloudFlare | 
[bitmix.app](https://phishdestroy.io/domain/bitmix.app/) | 2026-10-19 | Online | NICENIC | 
[anniversary-xaman.app](https://phishdestroy.io/domain/anniversary-xaman.app/) | 2026-10-19 | Online | Dynadot | 
[ledger-live-download-auth-co.typedream.app](https://phishdestroy.io/domain/ledger-live-download-auth-co.typedream.app/) | 2026-10-19 | Online | — | 
[secondfi-desktop.app](https://phishdestroy.io/domain/secondfi-desktop.app/) | 2026-10-19 | Online | NICENIC | 
[tiers-velit.app](https://phishdestroy.io/domain/tiers-velit.app/) | 2026-10-19 | Online | NICENIC | 
[get-zksync.app](https://phishdestroy.io/domain/get-zksync.app/) | 2026-10-19 | Online | NICENIC | 
[claim-bybit.app](https://phishdestroy.io/domain/claim-bybit.app/) | 2026-10-19 | Online | NICENIC | 
[claim-soniclabs.app](https://phishdestroy.io/domain/claim-soniclabs.app/) | 2026-10-19 | Online | NICENIC | 
[dashboard-robin.app](https://phishdestroy.io/domain/dashboard-robin.app/) | 2026-10-19 | Online | NICENIC | 
[get-cashcat.app](https://phishdestroy.io/domain/get-cashcat.app/) | 2026-10-19 | Online | NICENIC | 
[get-symbiosis.app](https://phishdestroy.io/domain/get-symbiosis.app/) | 2026-10-19 | Online | NICENIC | 
[paperstrade.app](https://phishdestroy.io/domain/paperstrade.app/) | 2026-10-19 | Online | NICENIC | 
[safe-ldgreliveapp.typedream.app](https://phishdestroy.io/domain/safe-ldgreliveapp.typedream.app/) | 2026-10-19 | Online | — | 
[support--legderlive--us--learn.typedream.app](https://phishdestroy.io/domain/support--legderlive--us--learn.typedream.app/) | 2026-10-19 | Online | Squarespace Domains II | 
[ledger-com-start-sso-start-web.typedream.app](https://phishdestroy.io/domain/ledger-com-start-sso-start-web.typedream.app/) | 2026-10-17 | Offline | — | 
[ledger-live-donload-web.typedream.app](https://phishdestroy.io/domain/ledger-live-donload-web.typedream.app/) | 2026-10-17 | Offline | — | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .app registrations; first .app report 2024-03-20.

Canonical: https://phishdestroy.io/tld/app/