Phishing domains under .group

.group accounts for 35 of the 224,866 domains in the PhishDestroy database (0.02%), with 0 new ones in the last 30 days. The most impersonated brand under .group is Ledger. 17 were online at the last check and 5 have a confirmed takedown.

35
Reported .group domains
0.02%
Share of PhishDestroy reports
0
Last 30 days
5
Confirmed takedowns

Detections per month

2025-11: 22025-12: 42026-01: 12026-02: 112026-03: 32026-04: 02026-05: 02026-06: 22026-07: 32026-08: 42026-09: 12026-10: 0
.group phishing domains detected per month: 31 from 2025-11 to 2026-10; peak 11.

Brands and registrars

Impersonated brands

  1. Ledger2
  2. AMLBot1
  3. Solflare1
  4. TikTok1
  5. Ethereum1
  6. Csgo1
  7. Google1
  8. Polymarket1

Registrars

  1. NiceNIC11
  2. Cloudflare4
  3. GoDaddy.com2
  4. Registrar of Domain Names REG.RU2
  5. Sav.com2
  6. NICENIC2
  7. Trustname.com2
  8. N/A1

Latest .group phishing domains

The 30 most recently detected .group domains
DomainFirst detectedStatus at last checkRegistrar
amlverifier.group2026-09-15OnlineGlobal Domain
resuelvetusmovidas.group2026-08-31OnlineRegister SPA
freighttank.group2026-08-10OnlineTrustname.com
paknext.group2026-08-10OnlineTrustname.com
ultlmate.group2026-08-10OfflineNameSilo
open-osint.group2026-07-31UnknownNICENIC
fpmarket.group2026-07-30OfflineUltahost
kolesa.group2026-07-24OnlineRegistrar of Domain Names REG.RU
xamaninvest.group2026-06-28OfflineNICENIC
cryptoex.group2026-06-15OnlineHiChina (www.net.cn)
cryptopass.maxwill.group2026-03-24OnlinePublicDomainRegistry.com
rbfcuus.group2026-03-11OnlineSav.com
coinledger.group2026-03-04UnknownNiceNIC
quantiva.group2026-02-28OnlineRegistrar.eu
io-en-us.group2026-02-26OnlineDynadot
accessportal.group2026-02-25UnknownNiceNIC
xaman.group2026-02-22OnlineNiceNIC
luna-market.group2026-02-18OnlineNiceNIC
lacoursconstruction.group2026-02-15UnknownNiceNIC
ledgerrecovery.group2026-02-15UnknownNiceNIC
altadefinizionegratis.group2026-02-13OnlineNiceNIC
hit24.group2026-02-13UnknownNiceNIC
aster-dex.group2026-02-13OfflineNiceNIC
approvedexperiencestraveller.group2026-02-11OnlineGoDaddy.com
changelly.group2026-01-27OfflineRegery.com
standx.group2025-12-16Taken downNiceNIC
jupiterswap.group2025-12-15UnknownNiceNIC
polymarkets.group2025-12-06Taken downSav.com
airdropalert.group2025-12-04OnlineCloudflare
amlcheck.group2025-11-06OnlineCloudflare

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .group registrations; first .group report 2025-08-27.