# Phishing domains under .gd .gd accounts for 34 of the 224,866 domains in the PhishDestroy database (0.02%), with 1 new ones in the last 30 days. The most impersonated brand under .gd is Ledger. 17 were online at the last check and 7 have a confirmed takedown. 34Reported .gd domains 0.02%Share of PhishDestroy reports 1Last 30 days 7Confirmed takedowns ## Detections per month .gd phishing domains detected per month: 33 from 2025-11 to 2026-10; peak 8. ## Brands and registrars ### Impersonated brands - [Ledger](https://phishdestroy.io/brand/ledger/)3 - [Jupiter](https://phishdestroy.io/brand/jupiter/)2 - [Telegram](https://phishdestroy.io/brand/telegram/)2 - [Netflix](https://phishdestroy.io/brand/netflix/)1 - [Outlook](https://phishdestroy.io/brand/outlook/)1 - [Instagram](https://phishdestroy.io/brand/instagram/)1 - [Trezor](https://phishdestroy.io/brand/trezor/)1 - [Microsoft](https://phishdestroy.io/brand/microsoft/)1 ### Registrars - Key Systems12 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)8 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)5 - [Key-Systems](https://phishdestroy.io/registrar/key-systems/)2 - Immaterialism1 - InternetX1 - Ascio Technologies Danmark - filial af A1 - [Gname.com](https://phishdestroy.io/registrar/name-com/)1 ## Latest .gd phishing domains The 30 most recently detected .gd domains Domain | First detected | Status at last check | Registrar | [xaman.gd](https://phishdestroy.io/domain/xaman.gd/) | 2026-09-22 | Online | NICENIC | [www-itausegurancas.rf.gd](https://phishdestroy.io/domain/www-itausegurancas.rf.gd/) | 2026-08-09 | Online | Key-Systems | [myxgeorgia.ge.gd](https://phishdestroy.io/domain/myxgeorgia.ge.gd/) | 2026-07-30 | Online | DYNADOT | [app-tornadocash.rf.gd](https://phishdestroy.io/domain/app-tornadocash.rf.gd/) | 2026-07-15 | Online | Key-Systems | [voltix.gd](https://phishdestroy.io/domain/voltix.gd/) | 2026-06-29 | Online | NICENIC | [pqc-ledger.gd](https://phishdestroy.io/domain/pqc-ledger.gd/) | 2026-05-17 | Online | NICENIC | [doom.gd](https://phishdestroy.io/domain/doom.gd/) | 2026-04-26 | Unknown | NICENIC | [royanta.gd](https://phishdestroy.io/domain/royanta.gd/) | 2026-04-07 | Unknown | NICENIC | [bankman.gd](https://phishdestroy.io/domain/bankman.gd/) | 2026-03-30 | Offline | 1API | [casewin.gd](https://phishdestroy.io/domain/casewin.gd/) | 2026-03-05 | Unknown | NiceNIC | [jup-ag.gd](https://phishdestroy.io/domain/jup-ag.gd/) | 2026-03-04 | Unknown | NiceNIC | [changenow.gd](https://phishdestroy.io/domain/changenow.gd/) | 2026-03-04 | Unknown | NiceNIC | [gadewin.gd](https://phishdestroy.io/domain/gadewin.gd/) | 2026-02-28 | Unknown | NiceNIC | [wapp-corrector.rf.gd](https://phishdestroy.io/domain/wapp-corrector.rf.gd/) | 2026-02-26 | Online | Key Systems | [gerd-aslamprivacyhold.work.gd](https://phishdestroy.io/domain/gerd-aslamprivacyhold.work.gd/) | 2026-02-26 | Offline | — | [storageboost.work.gd](https://phishdestroy.io/domain/storageboost.work.gd/) | 2026-02-24 | Offline | Key Systems | [breakingbad.gd](https://phishdestroy.io/domain/breakingbad.gd/) | 2026-02-06 | Unknown | NiceNIC | [index-votex.rf.gd](https://phishdestroy.io/domain/index-votex.rf.gd/) | 2026-02-02 | Taken down | Key Systems | [tron.gd](https://phishdestroy.io/domain/tron.gd/) | 2026-01-07 | Offline | Gname.com | [meandawg.rf.gd](https://phishdestroy.io/domain/meandawg.rf.gd/) | 2025-12-16 | Online | Key Systems | [ethereum.gd](https://phishdestroy.io/domain/ethereum.gd/) | 2025-12-14 | Online | Key Systems | [peeldsb-rnicrosoft-login.work.gd](https://phishdestroy.io/domain/peeldsb-rnicrosoft-login.work.gd/) | 2025-12-12 | Taken down | Key Systems | [rectifywallet.page.gd](https://phishdestroy.io/domain/rectifywallet.page.gd/) | 2025-12-10 | Online | Key Systems | [click-now-appeal.page.gd](https://phishdestroy.io/domain/click-now-appeal.page.gd/) | 2025-12-05 | Taken down | Key Systems | [trezor.gd](https://phishdestroy.io/domain/trezor.gd/) | 2025-12-01 | Offline | NiceNIC | [ledggdr.gd](https://phishdestroy.io/domain/ledggdr.gd/) | 2025-11-27 | Offline | NiceNIC | [surl.gd](https://phishdestroy.io/domain/surl.gd/) | 2025-11-24 | Taken down | Ascio Technologies Danmark - filial af A | [instagramss.rf.gd](https://phishdestroy.io/domain/instagramss.rf.gd/) | 2025-11-24 | Online | Key Systems | [bnp-paribas-france.fr.gd](https://phishdestroy.io/domain/bnp-paribas-france.fr.gd/) | 2025-11-22 | Taken down | InternetX | [ledger.gd](https://phishdestroy.io/domain/ledger.gd/) | 2025-11-18 | Offline | NiceNIC | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .gd registrations; first .gd report 2025-09-23. Canonical: https://phishdestroy.io/tld/gd/