# Phishing domains under .co

.co accounts for 1,084 of the 224,866 domains in the PhishDestroy database (0.48%), with 42 new ones in the last 30 days. The most impersonated brand under .co is MetaMask. 548 were online at the last check and 136 have a confirmed takedown.

1,084Reported .co domains

0.48%Share of PhishDestroy reports

42Last 30 days

136Confirmed takedowns

## Detections per month

.co phishing domains detected per month: 982 from 2025-11 to 2026-10; peak 180.

## Brands and registrars

### Impersonated brands

- [MetaMask](https://phishdestroy.io/brand/metamask/)28
- [Google](https://phishdestroy.io/brand/google/)25
- [1inch](https://phishdestroy.io/brand/1inch/)20
- [Coinbase](https://phishdestroy.io/brand/coinbase/)20
- [Ledger](https://phishdestroy.io/brand/ledger/)18
- [Ethereum](https://phishdestroy.io/brand/ethereum/)18
- [Roblox](https://phishdestroy.io/brand/roblox/)16
- [Solana](https://phishdestroy.io/brand/solana/)13

### Registrars

- [DYNADOT](https://phishdestroy.io/registrar/dynadot/)92
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)91
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)85
- [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)65
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)50
- [Tucows Domains](https://phishdestroy.io/registrar/tucows/)41
- [NAMECHEAP](https://phishdestroy.io/registrar/namecheap/)39
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)35

## Latest .co phishing domains

The 30 most recently detected .co domains
Domain | First detected | Status at last check | Registrar | 
[houdiniswap.co](https://phishdestroy.io/domain/houdiniswap.co/) | 2026-10-21 | Online | GoDaddy.com | 
[algoblaze.co](https://phishdestroy.io/domain/algoblaze.co/) | 2026-10-20 | Online | Registrar.eu | 
[4fpl.detaliczny.co](https://phishdestroy.io/domain/4fpl.detaliczny.co/) | 2026-10-19 | Online | DYNADOT | 
[darkhub.co](https://phishdestroy.io/domain/darkhub.co/) | 2026-10-19 | Online | NICENIC | 
[zaviqueglobal.co](https://phishdestroy.io/domain/zaviqueglobal.co/) | 2026-10-17 | Online | Dynadot | 
[wealth-isa.co](https://phishdestroy.io/domain/wealth-isa.co/) | 2026-10-16 | Online | TLD Registrar Solutions | 
[mrking10055.co](https://phishdestroy.io/domain/mrking10055.co/) | 2026-10-15 | Online | NameSilo | 
[mrking10056.co](https://phishdestroy.io/domain/mrking10056.co/) | 2026-10-15 | Online | — | 
[aeroinsta.net.co](https://phishdestroy.io/domain/aeroinsta.net.co/) | 2026-10-15 | Online | DYNADOT | 
[mrking10058.co](https://phishdestroy.io/domain/mrking10058.co/) | 2026-10-14 | Offline | — | 
[oakwaver.co](https://phishdestroy.io/domain/oakwaver.co/) | 2026-10-14 | Online | — | 
[parik-24.co](https://phishdestroy.io/domain/parik-24.co/) | 2026-10-13 | Online | DYNADOT | 
[rnonero.com.co](https://phishdestroy.io/domain/rnonero.com.co/) | 2026-10-11 | Online | Registrar.eu | 
[robinhoodfox.co](https://phishdestroy.io/domain/robinhoodfox.co/) | 2026-10-11 | Online | DYNADOT | 
[iconosgroup.com.co](https://phishdestroy.io/domain/iconosgroup.com.co/) | 2026-10-11 | Online | Hello Internet 8 | 
[jvl-jp.co](https://phishdestroy.io/domain/jvl-jp.co/) | 2026-10-11 | Online | DYNADOT | 
[service.courrierar24.co](https://phishdestroy.io/domain/service.courrierar24.co/) | 2026-10-09 | Online | Dynadot | 
[xorqevin.co](https://phishdestroy.io/domain/xorqevin.co/) | 2026-10-09 | Online | Cloudflare | 
[uqsolutionseducation.co](https://phishdestroy.io/domain/uqsolutionseducation.co/) | 2026-10-08 | Online | Registrar.eu | 
[zwina.co](https://phishdestroy.io/domain/zwina.co/) | 2026-10-07 | Offline | GoDaddy.com | 
[skyexchange9.co](https://phishdestroy.io/domain/skyexchange9.co/) | 2026-10-07 | Online | GoDaddy.com | 
[spacexaccess.co](https://phishdestroy.io/domain/spacexaccess.co/) | 2026-10-07 | Online | Dynadot | 
[trustinvestprime.co](https://phishdestroy.io/domain/trustinvestprime.co/) | 2026-10-06 | Online | Global Domain | 
[microsoftuk.co](https://phishdestroy.io/domain/microsoftuk.co/) | 2026-10-06 | Online | GoDaddy.com | 
[spend-card.co](https://phishdestroy.io/domain/spend-card.co/) | 2026-10-04 | Online | TLD Registrar Solutions | 
[sitesgoogle.co](https://phishdestroy.io/domain/sitesgoogle.co/) | 2026-10-04 | Offline | Dynadot | 
[slon2.co](https://phishdestroy.io/domain/slon2.co/) | 2026-10-03 | Online | PublicDomainRegistry.com | 
[arizona99.co](https://phishdestroy.io/domain/arizona99.co/) | 2026-10-03 | Offline | NameSilo | 
[nebulaclient.co](https://phishdestroy.io/domain/nebulaclient.co/) | 2026-09-29 | Online | Web Commerce Communications dba WebNic.c | 
[hk7.ocportal.co](https://phishdestroy.io/domain/hk7.ocportal.co/) | 2026-09-29 | Online | DYNADOT | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .co registrations; first .co report 2025-08-08.

Canonical: https://phishdestroy.io/tld/co/