# Phishing domains under .foundation .foundation accounts for 115 of the 224,866 domains in the PhishDestroy database (0.05%), with 0 new ones in the last 30 days. The most impersonated brand under .foundation is Foundation. 30 were online at the last check and 13 have a confirmed takedown. 115Reported .foundation domains 0.05%Share of PhishDestroy reports 0Last 30 days 13Confirmed takedowns ## Detections per month .foundation phishing domains detected per month: 81 from 2025-11 to 2026-10; peak 24. ## Brands and registrars ### Impersonated brands - [Foundation](https://phishdestroy.io/brand/foundation/)8 - [MetaMask](https://phishdestroy.io/brand/metamask/)4 - [Aave](https://phishdestroy.io/brand/aave/)4 - [Google](https://phishdestroy.io/brand/google/)4 - [Binance](https://phishdestroy.io/brand/binance/)3 - [Binance](https://phishdestroy.io/brand/binance/)2 - [MetaMask](https://phishdestroy.io/brand/metamask/)2 - [Monad](https://phishdestroy.io/brand/monad/)2 ### Registrars - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)32 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)22 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)12 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)10 - [NAMECHEAP](https://phishdestroy.io/registrar/namecheap/)5 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)4 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)3 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)3 ## Latest .foundation phishing domains The 30 most recently detected .foundation domains Domain | First detected | Status at last check | Registrar | [4972.bluefin.pr.app.bluefin.foundation](https://phishdestroy.io/domain/4972.bluefin.pr.app.bluefin.foundation/) | 2026-08-26 | Offline | NameCheap | [4913.bluefin.pr.app.bluefin.foundation](https://phishdestroy.io/domain/4913.bluefin.pr.app.bluefin.foundation/) | 2026-08-13 | Offline | NameCheap | [truswallet.foundation](https://phishdestroy.io/domain/truswallet.foundation/) | 2026-08-12 | Online | Spaceship | [4903.bluefin.pr.app.bluefin.foundation](https://phishdestroy.io/domain/4903.bluefin.pr.app.bluefin.foundation/) | 2026-08-10 | Offline | NameCheap | [4882.bluefin.pr.app.bluefin.foundation](https://phishdestroy.io/domain/4882.bluefin.pr.app.bluefin.foundation/) | 2026-08-07 | Offline | — | [4887.bluefin.pr.app.bluefin.foundation](https://phishdestroy.io/domain/4887.bluefin.pr.app.bluefin.foundation/) | 2026-08-07 | Offline | NAMECHEAP | [vote.metronome.foundation](https://phishdestroy.io/domain/vote.metronome.foundation/) | 2026-08-04 | Online | NICENIC | [4868.bluefin.pr.app.bluefin.foundation](https://phishdestroy.io/domain/4868.bluefin.pr.app.bluefin.foundation/) | 2026-08-03 | Offline | NameCheap | [docupdate.foundation](https://phishdestroy.io/domain/docupdate.foundation/) | 2026-07-01 | Online | NAMECHEAP | [xrpl-flare.foundation](https://phishdestroy.io/domain/xrpl-flare.foundation/) | 2026-06-25 | Offline | PublicDomainRegistry.com | [flarenetwork.foundation](https://phishdestroy.io/domain/flarenetwork.foundation/) | 2026-06-18 | Offline | OwnRegistrar | [fassets-flare.foundation](https://phishdestroy.io/domain/fassets-flare.foundation/) | 2026-06-15 | Online | PublicDomainRegistry.com | [distributions-flare.foundation](https://phishdestroy.io/domain/distributions-flare.foundation/) | 2026-06-15 | Online | PublicDomainRegistry.com | [treasurypool-firelight.foundation](https://phishdestroy.io/domain/treasurypool-firelight.foundation/) | 2026-05-12 | Offline | PublicDomainRegistry.com | [allocation-firelight.foundation](https://phishdestroy.io/domain/allocation-firelight.foundation/) | 2026-05-12 | Offline | PublicDomainRegistry.com | [phase2-flare.foundation](https://phishdestroy.io/domain/phase2-flare.foundation/) | 2026-05-11 | Offline | PublicDomainRegistry.com | [proposals-flare.foundation](https://phishdestroy.io/domain/proposals-flare.foundation/) | 2026-05-11 | Offline | PublicDomainRegistry.com | [event-venom.foundation](https://phishdestroy.io/domain/event-venom.foundation/) | 2026-05-07 | Offline | PublicDomainRegistry.com | [enter-moonwell.foundation](https://phishdestroy.io/domain/enter-moonwell.foundation/) | 2026-04-02 | Offline | PublicDomainRegistry.com | [votes-moonwell.foundation](https://phishdestroy.io/domain/votes-moonwell.foundation/) | 2026-03-31 | Offline | PublicDomainRegistry.com | [unitywallet.foundation](https://phishdestroy.io/domain/unitywallet.foundation/) | 2026-03-29 | Online | Tucows Domains | [backoffice.aurum.foundation](https://phishdestroy.io/domain/backoffice.aurum.foundation/) | 2026-03-28 | Online | NAMECHEAP | [nodes.web3.foundation](https://phishdestroy.io/domain/nodes.web3.foundation/) | 2026-03-28 | Online | Gandi | [xstox.foundation](https://phishdestroy.io/domain/xstox.foundation/) | 2026-03-25 | Offline | NAMECHEAP | [airdrop.fight.foundation](https://phishdestroy.io/domain/airdrop.fight.foundation/) | 2026-03-24 | Online | Gandi | [app.usd-ai.foundation](https://phishdestroy.io/domain/app.usd-ai.foundation/) | 2026-03-18 | Offline | NAMECHEAP | [opinione.foundation](https://phishdestroy.io/domain/opinione.foundation/) | 2026-03-07 | Offline | NameCheap | [esepresso.foundation](https://phishdestroy.io/domain/esepresso.foundation/) | 2026-03-02 | Unknown | NiceNIC | [farbric.foundation](https://phishdestroy.io/domain/farbric.foundation/) | 2026-02-27 | Offline | Porkbun | [prime.aiiora.foundation](https://phishdestroy.io/domain/prime.aiiora.foundation/) | 2026-02-26 | Offline | Web Commerce Communications | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .foundation registrations; first .foundation report 2025-07-13. Canonical: https://phishdestroy.io/tld/foundation/