# Phishing domains under .cx .cx accounts for 49 of the 224,866 domains in the PhishDestroy database (0.02%), with 1 new ones in the last 30 days. The most impersonated brand under .cx is Binance. 16 were online at the last check and 6 have a confirmed takedown. 49Reported .cx domains 0.02%Share of PhishDestroy reports 1Last 30 days 6Confirmed takedowns ## Detections per month .cx phishing domains detected per month: 40 from 2025-11 to 2026-10; peak 14. ## Brands and registrars ### Impersonated brands - [Binance](https://phishdestroy.io/brand/binance/)3 - [Binance](https://phishdestroy.io/brand/binance/)3 - [Linea](https://phishdestroy.io/brand/linea/)2 - [Telegram](https://phishdestroy.io/brand/telegram/)2 - [Cloudflare](https://phishdestroy.io/brand/cloudflare/)2 - [Google](https://phishdestroy.io/brand/google/)2 - [dYdX](https://phishdestroy.io/brand/dydx/)1 - [Aave](https://phishdestroy.io/brand/aave/)1 ### Registrars - CentralNic46 - IANA-99991 ## Latest .cx phishing domains The 30 most recently detected .cx domains Domain | First detected | Status at last check | Registrar | [olks.cx](https://phishdestroy.io/domain/olks.cx/) | 2026-10-19 | Online | CentralNic | [docupdate.cx](https://phishdestroy.io/domain/docupdate.cx/) | 2026-09-16 | Online | CentralNic | [laso.cx](https://phishdestroy.io/domain/laso.cx/) | 2026-09-11 | Online | CentralNic | [flavourstop.cx](https://phishdestroy.io/domain/flavourstop.cx/) | 2026-09-02 | Online | CentralNic | [crypto24.cx](https://phishdestroy.io/domain/crypto24.cx/) | 2026-08-31 | Online | CentralNic | [dublikat.cx](https://phishdestroy.io/domain/dublikat.cx/) | 2026-08-06 | Online | CentralNic | [comedy-777.cx](https://phishdestroy.io/domain/comedy-777.cx/) | 2026-08-04 | Offline | CentralNic | [comedy-7777.cx](https://phishdestroy.io/domain/comedy-7777.cx/) | 2026-08-04 | Offline | CentralNic | [amazon-ae-relay.apps.prov.cx](https://phishdestroy.io/domain/amazon-ae-relay.apps.prov.cx/) | 2026-07-27 | Online | CentralNic | [satoshi.cx](https://phishdestroy.io/domain/satoshi.cx/) | 2026-07-27 | Offline | CentralNic | [p-trustwallet-cards-fdea5de5.prov.cx](https://phishdestroy.io/domain/p-trustwallet-cards-fdea5de5.prov.cx/) | 2026-07-16 | Offline | CentralNic | [tetherfasset.cx](https://phishdestroy.io/domain/tetherfasset.cx/) | 2026-07-13 | Offline | CentralNic | [bitly.cx](https://phishdestroy.io/domain/bitly.cx/) | 2026-07-08 | Online | CentralNic | [dexscreener.cx](https://phishdestroy.io/domain/dexscreener.cx/) | 2026-06-15 | Online | CentralNic | [superswap.cx](https://phishdestroy.io/domain/superswap.cx/) | 2026-06-10 | Online | IANA-9999 | [trzm.cx](https://phishdestroy.io/domain/trzm.cx/) | 2026-05-15 | Offline | CentralNic | [trx-energy.cx](https://phishdestroy.io/domain/trx-energy.cx/) | 2026-05-07 | Offline | CentralNic | [ppv.cx](https://phishdestroy.io/domain/ppv.cx/) | 2026-04-20 | Offline | CentralNic | [trustcards.cx](https://phishdestroy.io/domain/trustcards.cx/) | 2026-04-19 | Offline | CentralNic | [amlpro.cx](https://phishdestroy.io/domain/amlpro.cx/) | 2026-03-24 | Online | CentralNic | [coinblock.cx](https://phishdestroy.io/domain/coinblock.cx/) | 2026-03-22 | Offline | CentralNic | [pochta.cx](https://phishdestroy.io/domain/pochta.cx/) | 2026-03-04 | Offline | CentralNic | [sushi.cx](https://phishdestroy.io/domain/sushi.cx/) | 2026-03-01 | Online | CentralNic | [bitswap.cx](https://phishdestroy.io/domain/bitswap.cx/) | 2026-02-26 | Taken down | CentralNic | [binance-crypto.cx](https://phishdestroy.io/domain/binance-crypto.cx/) | 2026-02-26 | Offline | CentralNic | [dapps.cx](https://phishdestroy.io/domain/dapps.cx/) | 2026-02-26 | Taken down | CentralNic | [redstone.cx](https://phishdestroy.io/domain/redstone.cx/) | 2026-02-26 | Offline | CentralNic | [sunswap.cx](https://phishdestroy.io/domain/sunswap.cx/) | 2026-02-26 | Taken down | CentralNic | [login.blokchain.cx](https://phishdestroy.io/domain/login.blokchain.cx/) | 2026-02-26 | Offline | CentralNic | [trustbase.cx](https://phishdestroy.io/domain/trustbase.cx/) | 2026-02-26 | Offline | — | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .cx registrations; first .cx report 2025-08-09. Canonical: https://phishdestroy.io/tld/cx/