# Phishing domains under .es

.es accounts for 141 of the 224,866 domains in the PhishDestroy database (0.06%), with 11 new ones in the last 30 days. The most impersonated brand under .es is Roblox. 109 were online at the last check and 15 have a confirmed takedown.

141Reported .es domains

0.06%Share of PhishDestroy reports

11Last 30 days

15Confirmed takedowns

## Detections per month

.es phishing domains detected per month: 132 from 2025-11 to 2026-10; peak 26.

## Brands and registrars

### Impersonated brands

- [Roblox](https://phishdestroy.io/brand/roblox/)8
- [Coinbase](https://phishdestroy.io/brand/coinbase/)7
- [Google](https://phishdestroy.io/brand/google/)7
- [MetaMask](https://phishdestroy.io/brand/metamask/)5
- [Ledger](https://phishdestroy.io/brand/ledger/)3
- [Phantom](https://phishdestroy.io/brand/phantom/)3
- [Ethereum](https://phishdestroy.io/brand/ethereum/)3
- [Santander](https://phishdestroy.io/brand/santander/)2

### Registrars

- Cloudflare10
- [Google](https://phishdestroy.io/registrar/google/)4
- [GOOGLE (ASN: 15169)](https://phishdestroy.io/registrar/google/)2
- N/A1
- ES-RAIOLANETWORKS-20220125 (ASN: 56958)1
- BNL-77 (ASN: 399629)1
- ES-OVH (ASN: 16276)1
- [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)1

## Latest .es phishing domains

The 30 most recently detected .es domains
Domain | First detected | Status at last check | Registrar | 
[documents-online.es](https://phishdestroy.io/domain/documents-online.es/) | 2026-10-21 | Online | — | 
[swiss.mubarcanarias.es](https://phishdestroy.io/domain/swiss.mubarcanarias.es/) | 2026-10-17 | Online | — | 
[coinbasefleetagent.fudace.es](https://phishdestroy.io/domain/coinbasefleetagent.fudace.es/) | 2026-10-16 | Online | — | 
[santander-newbusiness.es](https://phishdestroy.io/domain/santander-newbusiness.es/) | 2026-10-13 | Online | — | 
[securescloud.es](https://phishdestroy.io/domain/securescloud.es/) | 2026-10-11 | Offline | — | 
[netflix-casino-es.es](https://phishdestroy.io/domain/netflix-casino-es.es/) | 2026-10-06 | Online | — | 
[wallet-defender.es](https://phishdestroy.io/domain/wallet-defender.es/) | 2026-10-02 | Online | — | 
[pelkruvilanz.es](https://phishdestroy.io/domain/pelkruvilanz.es/) | 2026-09-28 | Online | — | 
[skelvurizont.es](https://phishdestroy.io/domain/skelvurizont.es/) | 2026-09-27 | Online | — | 
[stabile70kinjer.es](https://phishdestroy.io/domain/stabile70kinjer.es/) | 2026-09-27 | Offline | — | 
[rain-bet.com.es](https://phishdestroy.io/domain/rain-bet.com.es/) | 2026-09-27 | Online | — | 
[parik24.es](https://phishdestroy.io/domain/parik24.es/) | 2026-09-18 | Online | — | 
[us02webzoom.es](https://phishdestroy.io/domain/us02webzoom.es/) | 2026-09-17 | Offline | — | 
[belladonamercerie.es](https://phishdestroy.io/domain/belladonamercerie.es/) | 2026-09-12 | Online | — | 
[cccambox.es](https://phishdestroy.io/domain/cccambox.es/) | 2026-09-11 | Online | — | 
[bombolone.es](https://phishdestroy.io/domain/bombolone.es/) | 2026-09-11 | Online | — | 
[rubburizee.es](https://phishdestroy.io/domain/rubburizee.es/) | 2026-09-08 | Offline | — | 
[rainbet-enlinea.es](https://phishdestroy.io/domain/rainbet-enlinea.es/) | 2026-09-08 | Online | — | 
[finaznauto.es](https://phishdestroy.io/domain/finaznauto.es/) | 2026-09-04 | Online | — | 
[simat-de-la-valldigna.rrhh.opensea.com.es](https://phishdestroy.io/domain/simat-de-la-valldigna.rrhh.opensea.com.es/) | 2026-09-01 | Online | — | 
[orca.homelababrera.es](https://phishdestroy.io/domain/orca.homelababrera.es/) | 2026-08-31 | Offline | — | 
[es-financieraelcorteingles.es](https://phishdestroy.io/domain/es-financieraelcorteingles.es/) | 2026-08-27 | Offline | — | 
[mvkpop.es](https://phishdestroy.io/domain/mvkpop.es/) | 2026-08-26 | Online | — | 
[inkscape.es](https://phishdestroy.io/domain/inkscape.es/) | 2026-08-25 | Online | — | 
[framarmaquinaria.es](https://phishdestroy.io/domain/framarmaquinaria.es/) | 2026-08-22 | Offline | — | 
[casinorainbet.es](https://phishdestroy.io/domain/casinorainbet.es/) | 2026-08-22 | Online | — | 
[rainbet-spain.es](https://phishdestroy.io/domain/rainbet-spain.es/) | 2026-08-21 | Online | — | 
[rainbetonline.es](https://phishdestroy.io/domain/rainbetonline.es/) | 2026-08-21 | Online | — | 
[trezor.com.es](https://phishdestroy.io/domain/trezor.com.es/) | 2026-08-18 | Online | — | 
[zen-capital.es](https://phishdestroy.io/domain/zen-capital.es/) | 2026-08-18 | Online | — | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .es registrations; first .es report 2025-08-08.

Canonical: https://phishdestroy.io/tld/es/