Phishing domains under .es

.es accounts for 141 of the 224,866 domains in the PhishDestroy database (0.06%), with 11 new ones in the last 30 days. The most impersonated brand under .es is Roblox. 109 were online at the last check and 15 have a confirmed takedown.

141
Reported .es domains
0.06%
Share of PhishDestroy reports
11
Last 30 days
15
Confirmed takedowns

Detections per month

2025-11: 112025-12: 162026-01: 42026-02: 142026-03: 92026-04: 12026-05: 12026-06: 112026-07: 262026-08: 192026-09: 132026-10: 7
.es phishing domains detected per month: 132 from 2025-11 to 2026-10; peak 26.

Brands and registrars

Impersonated brands

  1. Roblox8
  2. Coinbase7
  3. Google7
  4. MetaMask5
  5. Ledger3
  6. Phantom3
  7. Ethereum3
  8. Santander2

Registrars

  1. Cloudflare10
  2. Google4
  3. GOOGLE (ASN: 15169)2
  4. N/A1
  5. ES-RAIOLANETWORKS-20220125 (ASN: 56958)1
  6. BNL-77 (ASN: 399629)1
  7. ES-OVH (ASN: 16276)1
  8. HOSTINGER operations1

Latest .es phishing domains

The 30 most recently detected .es domains
DomainFirst detectedStatus at last checkRegistrar
documents-online.es2026-10-21Online—
swiss.mubarcanarias.es2026-10-17Online—
coinbasefleetagent.fudace.es2026-10-16Online—
santander-newbusiness.es2026-10-13Online—
securescloud.es2026-10-11Offline—
netflix-casino-es.es2026-10-06Online—
wallet-defender.es2026-10-02Online—
pelkruvilanz.es2026-09-28Online—
skelvurizont.es2026-09-27Online—
stabile70kinjer.es2026-09-27Offline—
rain-bet.com.es2026-09-27Online—
parik24.es2026-09-18Online—
us02webzoom.es2026-09-17Offline—
belladonamercerie.es2026-09-12Online—
cccambox.es2026-09-11Online—
bombolone.es2026-09-11Online—
rubburizee.es2026-09-08Offline—
rainbet-enlinea.es2026-09-08Online—
finaznauto.es2026-09-04Online—
simat-de-la-valldigna.rrhh.opensea.com.es2026-09-01Online—
orca.homelababrera.es2026-08-31Offline—
es-financieraelcorteingles.es2026-08-27Offline—
mvkpop.es2026-08-26Online—
inkscape.es2026-08-25Online—
framarmaquinaria.es2026-08-22Offline—
casinorainbet.es2026-08-22Online—
rainbet-spain.es2026-08-21Online—
rainbetonline.es2026-08-21Online—
trezor.com.es2026-08-18Online—
zen-capital.es2026-08-18Online—

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .es registrations; first .es report 2025-08-08.