Phishing domains under .cloud

.cloud accounts for 366 of the 224,866 domains in the PhishDestroy database (0.16%), with 12 new ones in the last 30 days. The most impersonated brand under .cloud is MetaMask. 117 were online at the last check and 20 have a confirmed takedown.

366
Reported .cloud domains
0.16%
Share of PhishDestroy reports
12
Last 30 days
20
Confirmed takedowns

Detections per month

2025-11: 232025-12: 182026-01: 202026-02: 452026-03: 312026-04: 92026-05: 172026-06: 162026-07: 292026-08: 702026-09: 132026-10: 10
.cloud phishing domains detected per month: 301 from 2025-11 to 2026-10; peak 70.

Brands and registrars

Impersonated brands

  1. MetaMask32
  2. Apple14
  3. PancakeSwap11
  4. Jupiter10
  5. Dpd10
  6. Ledger8
  7. Aave6
  8. Wordpress6

Registrars

  1. HOSTINGER operations74
  2. NICENIC66
  3. Web Commerce Communications51
  4. Dominet (HK)15
  5. Gname.com12
  6. GoDaddy12
  7. NAMECHEAP12
  8. NameSilo10

Latest .cloud phishing domains

The 30 most recently detected .cloud domains
DomainFirst detectedStatus at last checkRegistrar
rabbyweb.cloud2026-10-21OnlineDynadot
us05.cloud2026-10-20OnlineNAMECHEAP
zcontainx.cloud2026-10-20OnlineDominet (HK)
com-gateway-api-gateway-dex-app.cloud2026-10-16OnlineWeb Commerce Communications
com-v3-swap-portal-gateway.cloud2026-10-14OnlineWeb Commerce Communications
bill.you-track.cloud2026-10-13OnlineTucows Domains
trustwalletpay.cloud2026-10-11OnlineHOSTINGER operations
onchnia.cloud2026-10-09OnlineGname.com
phantom.larpshop.cloud2026-10-09OfflineOVH
trajetoprime.cloud2026-10-07UnknownNICENIC
certs.armt.cloud2026-09-27OnlineNAMECHEAP
aurex.cloud2026-09-25OnlineNAMECHEAP
uuss6s.cloud2026-09-18OnlineAlibaba Cloud Computing
daz3d.cloud2026-09-14UnknownNICENIC
lzdocanalyzer.cloud2026-09-11OnlineNAMECHEAP
matanga.cloud2026-09-08OnlineNICENIC
orium.cloud2026-09-05OnlineTrustname.com
bitoq.cloud2026-09-04OfflineGname.com
rojadirecta.cloud2026-09-03OnlineKey-Systems
kraaken.cloud2026-09-03OfflineSpaceship
orca.aykutbayrambey.cloud2026-09-03OnlineHOSTINGER operations
fndk.cloud2026-09-02OnlineGname.com
tectonic-finance.cloud2026-09-01UnknownNICENIC
wiseforum.cloud2026-08-31UnknownNICENIC
reconnect.cloud2026-08-28OfflineHOSTINGER operations
tetherdapp.cloud2026-08-26OfflineNAMECHEAP
appeals-termmax.cloud2026-08-23UnknownNICENIC
ryven.cloud2026-08-20UnknownNICENIC
phase1-xrpl.cloud2026-08-20UnknownNICENIC
lista-dao.cloud2026-08-20UnknownNICENIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .cloud registrations; first .cloud report 2025-07-12.