Phishing domains under .finance

.finance accounts for 683 of the 224,866 domains in the PhishDestroy database (0.30%), with 30 new ones in the last 30 days. The most impersonated brand under .finance is MetaMask. 226 were online at the last check and 114 have a confirmed takedown.

683
Reported .finance domains
0.30%
Share of PhishDestroy reports
30
Last 30 days
114
Confirmed takedowns

Detections per month

2025-11: 562025-12: 322026-01: 272026-02: 1302026-03: 332026-04: 292026-05: 202026-06: 872026-07: 412026-08: 312026-09: 332026-10: 21
.finance phishing domains detected per month: 540 from 2025-11 to 2026-10; peak 130.

Brands and registrars

Impersonated brands

  1. MetaMask35
  2. Pendle20
  3. Aerodrome15
  4. Google14
  5. Aave12
  6. PancakeSwap11
  7. Revolut9
  8. Binance9

Registrars

  1. NICENIC186
  2. NiceNIC113
  3. Cloudflare92
  4. Dynadot48
  5. NameCheap21
  6. N/A20
  7. HOSTINGER operations20
  8. Tucows Domains18

Latest .finance phishing domains

The 30 most recently detected .finance domains
DomainFirst detectedStatus at last checkRegistrar
kumibot.finance2026-10-21OnlineNICENIC
vvelodrome.finance2026-10-20OnlineNICENIC
whspr.finance2026-10-20OnlineNICENIC
airhead.finance2026-10-20OfflineNameSilo
vlodrome.finance2026-10-19OnlineNICENIC
clearpoolpolicy.finance2026-10-13OfflineNICENIC
diverge.finance2026-10-10OnlineGoDaddy Online Services Cayman Islands
solincinerator.finance2026-10-09UnknownNICENIC
graniteassets.finance2026-10-09OnlineGNAME.COM
lifeyield.finance2026-10-09OnlineGoDaddy.com
wwwondo.finance2026-10-08OnlineWeb Commerce Communications dba WebNic.c
katrina.finance2026-10-07OnlineNICENIC
ellipalwallet.finance2026-10-07OfflineNICENIC
apps-doppler.finance2026-10-07OnlineNICENIC
tge-onre.finance2026-10-07OnlineNICENIC
hub-onre.finance2026-10-07OnlineNICENIC
defi-doppler.finance2026-10-07OnlineNICENIC
allocations-doppler.finance2026-10-07OnlineNICENIC
allocation-apyx.finance2026-10-07OnlineNICENIC
myxrp.finance2026-10-05OfflineNameCheap
syrup.maqle.finance2026-10-04OnlineGNAME.COM
bitnest.finance2026-09-29OnlineAmazon Registrar
secvalmu96bm09zr.entendre.finance2026-09-29OnlineCloudflare
probe-org-02ujrct5.entendre.finance2026-09-29OnlineCloudflare
securitytest-20260924-051618.entendre.finance2026-09-29OnlineCloudflare
en-zerion.finance2026-09-29OfflineNICENIC
saltswap.finance2026-09-23OnlineNameCheap
solvbtc.finance2026-09-22OnlineNICENIC
contracts-moonwell.finance2026-09-22OnlineNICENIC
aerodrones.finance2026-09-22OnlineNICENIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .finance registrations; first .finance report 2024-03-19.