# Phishing domains under .financial .financial accounts for 39 of the 224,866 domains in the PhishDestroy database (0.02%), with 0 new ones in the last 30 days. The most impersonated brand under .financial is Coinbase. 3 were online at the last check and 2 have a confirmed takedown. 39Reported .financial domains 0.02%Share of PhishDestroy reports 0Last 30 days 2Confirmed takedowns ## Detections per month .financial phishing domains detected per month: 14 from 2025-11 to 2026-10; peak 8. ## Brands and registrars ### Impersonated brands - [Coinbase](https://phishdestroy.io/brand/coinbase/)3 - [PancakeSwap](https://phishdestroy.io/brand/pancakeswap/)2 - [Uniswap](https://phishdestroy.io/brand/uniswap/)2 - [MetaMask](https://phishdestroy.io/brand/metamask/)2 - [Aerodrome](https://phishdestroy.io/brand/aerodrome/)2 - [Google](https://phishdestroy.io/brand/google/)1 - [Ether.fi](https://phishdestroy.io/brand/ether-fi/)1 - [BNB Chain](https://phishdestroy.io/brand/bnb-chain/)1 ### Registrars - N/A12 - Cloudflare6 - Regery.com5 - MD-ALEXHOST-20191107 (ASN: 200019)3 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)2 - [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)2 - arin1 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)1 ## Latest .financial phishing domains The 30 most recently detected .financial domains Domain | First detected | Status at last check | Registrar | [kta.financial](https://phishdestroy.io/domain/kta.financial/) | 2026-08-26 | Online | GNAME.COM | [amlcheck.financial](https://phishdestroy.io/domain/amlcheck.financial/) | 2026-06-29 | Offline | HOSTINGER operations | [steakhouse.financial](https://phishdestroy.io/domain/steakhouse.financial/) | 2026-03-30 | Online | OVH | [app.unlswap.financial](https://phishdestroy.io/domain/app.unlswap.financial/) | 2026-02-26 | Offline | — | [e.ther.financial](https://phishdestroy.io/domain/e.ther.financial/) | 2026-02-26 | Offline | — | [ther.financial](https://phishdestroy.io/domain/ther.financial/) | 2026-02-26 | Offline | — | [kitterswap.financial](https://phishdestroy.io/domain/kitterswap.financial/) | 2026-02-26 | Taken down | Registrar.eu | [etherex.financial](https://phishdestroy.io/domain/etherex.financial/) | 2026-02-26 | Offline | Dynadot | [claim-worldliberty.financial](https://phishdestroy.io/domain/claim-worldliberty.financial/) | 2026-02-26 | Offline | — | [elgen.layar.financial](https://phishdestroy.io/domain/elgen.layar.financial/) | 2026-02-26 | Offline | Registrar.eu | [xaman.financial](https://phishdestroy.io/domain/xaman.financial/) | 2026-02-17 | Online | NiceNIC | [telegram.financial](https://phishdestroy.io/domain/telegram.financial/) | 2026-01-24 | Offline | HOSTINGER operations | [solstice.financial](https://phishdestroy.io/domain/solstice.financial/) | 2025-11-30 | Offline | Cloudflare | [app-aerodrame.financial](https://phishdestroy.io/domain/app-aerodrame.financial/) | 2025-11-10 | Taken down | Cloudflare | [mail.coinbase.support.financial](https://phishdestroy.io/domain/mail.coinbase.support.financial/) | 2025-10-23 | Offline | MD-ALEXHOST-20191107 (ASN: 200019) | [autodiscover.coinbase.support.financial](https://phishdestroy.io/domain/autodiscover.coinbase.support.financial/) | 2025-10-23 | Offline | MD-ALEXHOST-20191107 (ASN: 200019) | [autoconfig.coinbase.support.financial](https://phishdestroy.io/domain/autoconfig.coinbase.support.financial/) | 2025-10-23 | Offline | MD-ALEXHOST-20191107 (ASN: 200019) | [zoo.pnckswp.financial](https://phishdestroy.io/domain/zoo.pnckswp.financial/) | 2025-10-05 | Offline | Cloudflare | [aeredrome.financial](https://phishdestroy.io/domain/aeredrome.financial/) | 2025-09-26 | Offline | Cloudflare | [pancake.pancakrswap.financial](https://phishdestroy.io/domain/pancake.pancakrswap.financial/) | 2025-09-24 | Offline | Cloudflare | [app.aenodroma.financial](https://phishdestroy.io/domain/app.aenodroma.financial/) | 2025-09-20 | Offline | arin | [ludo.uncswap.financial](https://phishdestroy.io/domain/ludo.uncswap.financial/) | 2025-09-19 | Offline | Cloudflare | [trade.hyperllquid.financial](https://phishdestroy.io/domain/trade.hyperllquid.financial/) | 2025-09-18 | Offline | N/A | [w.unieswap.financial](https://phishdestroy.io/domain/w.unieswap.financial/) | 2025-09-18 | Offline | N/A | [unlswap.financial](https://phishdestroy.io/domain/unlswap.financial/) | 2025-09-17 | Offline | Regery.com | [s.olv.financial](https://phishdestroy.io/domain/s.olv.financial/) | 2025-09-17 | Offline | N/A | [olv.financial](https://phishdestroy.io/domain/olv.financial/) | 2025-09-17 | Offline | Regery.com | [pancak.esvap.financial](https://phishdestroy.io/domain/pancak.esvap.financial/) | 2025-09-17 | Offline | N/A | [market.aavs.financial](https://phishdestroy.io/domain/market.aavs.financial/) | 2025-09-17 | Offline | N/A | [esvap.financial](https://phishdestroy.io/domain/esvap.financial/) | 2025-09-17 | Offline | Regery.com | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .financial registrations; first .financial report 2025-09-13. Canonical: https://phishdestroy.io/tld/financial/