Phishing domains under .fund

.fund accounts for 25 of the 224,866 domains in the PhishDestroy database (0.01%), with 4 new ones in the last 30 days. The most impersonated brand under .fund is Ledger. 9 were online at the last check and 4 have a confirmed takedown.

25
Reported .fund domains
0.01%
Share of PhishDestroy reports
4
Last 30 days
4
Confirmed takedowns

Detections per month

2025-11: 22025-12: 02026-01: 02026-02: 32026-03: 62026-04: 12026-05: 02026-06: 22026-07: 02026-08: 02026-09: 22026-10: 2
.fund phishing domains detected per month: 18 from 2025-11 to 2026-10; peak 6.

Brands and registrars

Impersonated brands

  1. Ledger2
  2. Aave1
  3. Pump.fun1
  4. MetaMask1
  5. Foundation1
  6. Roblox1
  7. Polygon1
  8. Ethereum1

Registrars

  1. NICENIC4
  2. NiceNIC3
  3. Name.com3
  4. NameSilo3
  5. NameCheap3
  6. N/A1
  7. Cloudflare1
  8. REGRU-RU1

Latest .fund phishing domains

The 25 most recently detected .fund domains
DomainFirst detectedStatus at last checkRegistrar
mirae.fund2026-10-20OnlineNameCheap
graniteassets.fund2026-10-09OnlineGNAME.COM
ta.fund2026-09-23OfflineName.com
amlscan.fund2026-09-22OnlineRegery.com
space-x.fund2026-06-14OnlineName.com
fifa.fund2026-06-01OfflineHiChina (www.net.cn)
vellum.fund2026-04-28Taken downTrustname.com
xaman.fund2026-03-28OfflineNICENIC
overlay.fund2026-03-28UnknownNICENIC
iscans.fund2026-03-24OfflineNameCheap
quantumsafe.fund2026-03-23UnknownNICENIC
keeta.fund2026-03-09OfflineGname.com
shade3.fund2026-03-04OfflineNameCheap
aztec.fund2026-02-26UnknownNICENIC
matrica.fund2026-02-17Offline—
bux.fund2026-02-13UnknownNiceNIC
sunofhope.fund2025-11-22Taken downREGRU-RU
polymarket.fund2025-11-03OfflineCloudflare
sale.megaeth.fund2025-10-29UnknownNiceNIC
maga-hat.fund2025-09-20OfflineNameSilo
pengu.pudgypenguins.fund2025-09-16OfflineN/A
claim.openledger.fund2025-09-12OnlineNameSilo
openledger.fund2025-09-10OnlineNameSilo
pump.fund2025-08-09Taken downName.com
hyperfoundation.fund2025-08-08Taken downNiceNIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .fund registrations; first .fund report 2025-08-08.