Phishing domains under .host

.host accounts for 50 of the 224,866 domains in the PhishDestroy database (0.02%), with 2 new ones in the last 30 days. The most impersonated brand under .host is Wordpress. 13 were online at the last check and 9 have a confirmed takedown.

50
Reported .host domains
0.02%
Share of PhishDestroy reports
2
Last 30 days
9
Confirmed takedowns

Detections per month

2025-11: 82025-12: 62026-01: 42026-02: 52026-03: 22026-04: 12026-05: 22026-06: 22026-07: 62026-08: 22026-09: 22026-10: 1
.host phishing domains detected per month: 41 from 2025-11 to 2026-10; peak 8.

Brands and registrars

Impersonated brands

  1. Wordpress11
  2. Ledger2
  3. 1inch1
  4. DKB1
  5. Ledger1
  6. Jupiter1
  7. Phantom1
  8. Ethereum1

Registrars

  1. Tucows Domains9
  2. Cloudflare8
  3. eNom5
  4. NiceNIC3
  5. CLOUDACCESS-POOL (ASN: 54456)3
  6. Amazon Registrar3
  7. HOSTINGER operations2
  8. Softpro-cloud2 (ASN: 29024)2

Latest .host phishing domains

The 30 most recently detected .host domains
DomainFirst detectedStatus at last checkRegistrar
security-server-stat-a728.bolt.host2026-10-07OnlineCloudflare
tanuki.host2026-09-27OnlineGlobal Domain
tronlink.host2026-09-19OnlineGoDaddy.com
mellstroy.host2026-08-12OnlineNameSilo
syncnet.host2026-08-10OfflinePublicDomainRegistry.com
infos-reprommation.bolt.host2026-07-23OfflineCloudflare
402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host2026-07-17OfflineMarkMonitor
secure-chat.host2026-07-12OfflineGoDaddy.com
revisar-netf.bolt.host2026-07-07OfflineCloudflare
mr-bel-informations.bolt.host2026-07-07OfflineCloudflare
docupdate.host2026-07-01OnlineNAMECHEAP
hostingo.sviluppo.host2026-06-15OnlineTucows Domains
sharepoint3883-4388eral-a8qi.bolt.host2026-06-11OfflineCloudflare
icuwtzw.cloudaccess.host2026-05-20OfflineeNom
streamyard.host2026-05-05OnlineNAMECHEAP
nodebridge.host2026-04-15OfflineDynadot
dropload.host2026-03-13UnknownNiceNIC
coinbase-blogger-clo-nbza.bolt.host2026-03-06OnlineCloudflare
52bwws.easypanel.host2026-02-26Taken downNameCheap
web3-nodeprotocol.host2026-02-26Offline—
infoaccess.sviluppo.host2026-02-26OfflineTucows Domains
deomqvc9jyu3.trickle.host2026-02-26Taken downAmazon Registrar
sbbcffclient.sviluppo.host2026-02-20OfflineTucows Domains
e67vm91sgf17.trickle.host2026-01-06Taken downAmazon Registrar
io-en-us.host2026-01-06OfflineNameSilo
ledger-auth.cloudaccess.host2026-01-05OfflineeNom
phantom-wallet-dapp-1vyt.bolt.host2026-01-04Taken downCloudflare
ledger-portal-auth.cloudaccess.host2025-12-31OfflineeNom
cinzia.sviluppo.host2025-12-23OfflineTucows Domains
sheilla.sviluppo.host2025-12-20OfflineTucows Domains

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .host registrations; first .host report 2025-09-28.