# Phishing domains under .cfd

.cfd accounts for 1,566 of the 224,866 domains in the PhishDestroy database (0.70%), with 130 new ones in the last 30 days. The most impersonated brand under .cfd is Google. 342 were online at the last check and 74 have a confirmed takedown.

1,566Reported .cfd domains

0.70%Share of PhishDestroy reports

130Last 30 days

74Confirmed takedowns

## Detections per month

.cfd phishing domains detected per month: 1,371 from 2025-11 to 2026-10; peak 362.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)335
- [Dpd](https://phishdestroy.io/brand/dpd/)94
- [MetaMask](https://phishdestroy.io/brand/metamask/)58
- [SushiSwap](https://phishdestroy.io/brand/sushiswap/)52
- [Binance](https://phishdestroy.io/brand/binance/)27
- [Bitcoin](https://phishdestroy.io/brand/bitcoin/)21
- [Gmail](https://phishdestroy.io/brand/gmail/)17
- [Steam](https://phishdestroy.io/brand/steam/)15

### Registrars

- [Dynadot](https://phishdestroy.io/registrar/dynadot/)440
- [Aceville](https://phishdestroy.io/registrar/aceville/)159
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)156
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)141
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)132
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)95
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)95
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)62

## Latest .cfd phishing domains

The 30 most recently detected .cfd domains
Domain | First detected | Status at last check | Registrar | 
[glsmzna.cfd](https://phishdestroy.io/domain/glsmzna.cfd/) | 2026-10-22 | Unknown | Aceville | 
[sitemvhxgcydip4z.cfd](https://phishdestroy.io/domain/sitemvhxgcydip4z.cfd/) | 2026-10-21 | Online | Spaceship | 
[discord-cz.cfd](https://phishdestroy.io/domain/discord-cz.cfd/) | 2026-10-20 | Unknown | NICENIC | 
[wechat-co.cfd](https://phishdestroy.io/domain/wechat-co.cfd/) | 2026-10-20 | Online | NICENIC | 
[sitemvewdltrli6k.cfd](https://phishdestroy.io/domain/sitemvewdltrli6k.cfd/) | 2026-10-19 | Offline | Spaceship | 
[sitemvdniggulris.cfd](https://phishdestroy.io/domain/sitemvdniggulris.cfd/) | 2026-10-19 | Offline | Spaceship | 
[sitemvewd4w0tngj.cfd](https://phishdestroy.io/domain/sitemvewd4w0tngj.cfd/) | 2026-10-19 | Offline | Spaceship | 
[sitemvdm6v7knwdc.cfd](https://phishdestroy.io/domain/sitemvdm6v7knwdc.cfd/) | 2026-10-19 | Offline | Spaceship | 
[sitemvdm66xf9twc.cfd](https://phishdestroy.io/domain/sitemvdm66xf9twc.cfd/) | 2026-10-19 | Online | Spaceship | 
[kakobuyde.cfd](https://phishdestroy.io/domain/kakobuyde.cfd/) | 2026-10-19 | Online | Spaceship | 
[kakobuybestsheet.cfd](https://phishdestroy.io/domain/kakobuybestsheet.cfd/) | 2026-10-19 | Online | Spaceship | 
[superbuyfr.cfd](https://phishdestroy.io/domain/superbuyfr.cfd/) | 2026-10-19 | Online | Spaceship | 
[superbuyde.cfd](https://phishdestroy.io/domain/superbuyde.cfd/) | 2026-10-19 | Online | Spaceship | 
[raydiun.cfd](https://phishdestroy.io/domain/raydiun.cfd/) | 2026-10-19 | Online | Dynadot | 
[zaptrx.cfd](https://phishdestroy.io/domain/zaptrx.cfd/) | 2026-10-19 | Offline | Spaceship | 
[oopbuy-spreadsheets.cfd](https://phishdestroy.io/domain/oopbuy-spreadsheets.cfd/) | 2026-10-16 | Online | Spaceship | 
[joya-goo.cfd](https://phishdestroy.io/domain/joya-goo.cfd/) | 2026-10-16 | Online | Spaceship | 
[oop-buy.cfd](https://phishdestroy.io/domain/oop-buy.cfd/) | 2026-10-16 | Online | Spaceship | 
[oopbuyse.cfd](https://phishdestroy.io/domain/oopbuyse.cfd/) | 2026-10-16 | Online | Spaceship | 
[web3-trustwallet.cfd](https://phishdestroy.io/domain/web3-trustwallet.cfd/) | 2026-10-15 | Online | NameSilo | 
[quosqzrvex.cfd](https://phishdestroy.io/domain/quosqzrvex.cfd/) | 2026-10-15 | Offline | Spaceship | 
[tokenimnet-cdn-gw-hk27.cfd](https://phishdestroy.io/domain/tokenimnet-cdn-gw-hk27.cfd/) | 2026-10-14 | Offline | Dynadot | 
[ckytopind.cfd](https://phishdestroy.io/domain/ckytopind.cfd/) | 2026-10-14 | Offline | Dynadot | 
[northbridgefp.cfd](https://phishdestroy.io/domain/northbridgefp.cfd/) | 2026-10-13 | Online | NameSilo | 
[vegaswow.cfd](https://phishdestroy.io/domain/vegaswow.cfd/) | 2026-10-13 | Online | NICENIC | 
[kinetiqxyz.cfd](https://phishdestroy.io/domain/kinetiqxyz.cfd/) | 2026-10-13 | Unknown | NICENIC | 
[sitemv5o2p6w9rqm.cfd](https://phishdestroy.io/domain/sitemv5o2p6w9rqm.cfd/) | 2026-10-13 | Online | Spaceship | 
[sitemv5kuz5lhbtf.cfd](https://phishdestroy.io/domain/sitemv5kuz5lhbtf.cfd/) | 2026-10-13 | Online | Spaceship | 
[sitemv4c57e5h81k.cfd](https://phishdestroy.io/domain/sitemv4c57e5h81k.cfd/) | 2026-10-13 | Online | Spaceship | 
[googalagoogala.cfd](https://phishdestroy.io/domain/googalagoogala.cfd/) | 2026-10-13 | Online | NICENIC | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .cfd registrations; first .cfd report 2025-07-03.

Canonical: https://phishdestroy.io/tld/cfd/