# Phishing domains under .host .host accounts for 50 of the 224,866 domains in the PhishDestroy database (0.02%), with 2 new ones in the last 30 days. The most impersonated brand under .host is Wordpress. 13 were online at the last check and 9 have a confirmed takedown. 50Reported .host domains 0.02%Share of PhishDestroy reports 2Last 30 days 9Confirmed takedowns ## Detections per month .host phishing domains detected per month: 41 from 2025-11 to 2026-10; peak 8. ## Brands and registrars ### Impersonated brands - [Wordpress](https://phishdestroy.io/brand/wordpress/)11 - [Ledger](https://phishdestroy.io/brand/ledger/)2 - [1inch](https://phishdestroy.io/brand/1inch/)1 - [DKB](https://phishdestroy.io/brand/dkb/)1 - [Ledger](https://phishdestroy.io/brand/ledger/)1 - [Jupiter](https://phishdestroy.io/brand/jupiter/)1 - [Phantom](https://phishdestroy.io/brand/phantom/)1 - [Ethereum](https://phishdestroy.io/brand/ethereum/)1 ### Registrars - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)9 - Cloudflare8 - [eNom](https://phishdestroy.io/registrar/enom/)5 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)3 - CLOUDACCESS-POOL (ASN: 54456)3 - [Amazon Registrar](https://phishdestroy.io/registrar/amazon-registrar/)3 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)2 - Softpro-cloud2 (ASN: 29024)2 ## Latest .host phishing domains The 30 most recently detected .host domains Domain | First detected | Status at last check | Registrar | [security-server-stat-a728.bolt.host](https://phishdestroy.io/domain/security-server-stat-a728.bolt.host/) | 2026-10-07 | Online | Cloudflare | [tanuki.host](https://phishdestroy.io/domain/tanuki.host/) | 2026-09-27 | Online | Global Domain | [tronlink.host](https://phishdestroy.io/domain/tronlink.host/) | 2026-09-19 | Online | GoDaddy.com | [mellstroy.host](https://phishdestroy.io/domain/mellstroy.host/) | 2026-08-12 | Online | NameSilo | [syncnet.host](https://phishdestroy.io/domain/syncnet.host/) | 2026-08-10 | Offline | PublicDomainRegistry.com | [infos-reprommation.bolt.host](https://phishdestroy.io/domain/infos-reprommation.bolt.host/) | 2026-07-23 | Offline | Cloudflare | [402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host](https://phishdestroy.io/domain/402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host/) | 2026-07-17 | Offline | MarkMonitor | [secure-chat.host](https://phishdestroy.io/domain/secure-chat.host/) | 2026-07-12 | Offline | GoDaddy.com | [revisar-netf.bolt.host](https://phishdestroy.io/domain/revisar-netf.bolt.host/) | 2026-07-07 | Offline | Cloudflare | [mr-bel-informations.bolt.host](https://phishdestroy.io/domain/mr-bel-informations.bolt.host/) | 2026-07-07 | Offline | Cloudflare | [docupdate.host](https://phishdestroy.io/domain/docupdate.host/) | 2026-07-01 | Online | NAMECHEAP | [hostingo.sviluppo.host](https://phishdestroy.io/domain/hostingo.sviluppo.host/) | 2026-06-15 | Online | Tucows Domains | [sharepoint3883-4388eral-a8qi.bolt.host](https://phishdestroy.io/domain/sharepoint3883-4388eral-a8qi.bolt.host/) | 2026-06-11 | Offline | Cloudflare | [icuwtzw.cloudaccess.host](https://phishdestroy.io/domain/icuwtzw.cloudaccess.host/) | 2026-05-20 | Offline | eNom | [streamyard.host](https://phishdestroy.io/domain/streamyard.host/) | 2026-05-05 | Online | NAMECHEAP | [nodebridge.host](https://phishdestroy.io/domain/nodebridge.host/) | 2026-04-15 | Offline | Dynadot | [dropload.host](https://phishdestroy.io/domain/dropload.host/) | 2026-03-13 | Unknown | NiceNIC | [coinbase-blogger-clo-nbza.bolt.host](https://phishdestroy.io/domain/coinbase-blogger-clo-nbza.bolt.host/) | 2026-03-06 | Online | Cloudflare | [52bwws.easypanel.host](https://phishdestroy.io/domain/52bwws.easypanel.host/) | 2026-02-26 | Taken down | NameCheap | [web3-nodeprotocol.host](https://phishdestroy.io/domain/web3-nodeprotocol.host/) | 2026-02-26 | Offline | — | [infoaccess.sviluppo.host](https://phishdestroy.io/domain/infoaccess.sviluppo.host/) | 2026-02-26 | Offline | Tucows Domains | [deomqvc9jyu3.trickle.host](https://phishdestroy.io/domain/deomqvc9jyu3.trickle.host/) | 2026-02-26 | Taken down | Amazon Registrar | [sbbcffclient.sviluppo.host](https://phishdestroy.io/domain/sbbcffclient.sviluppo.host/) | 2026-02-20 | Offline | Tucows Domains | [e67vm91sgf17.trickle.host](https://phishdestroy.io/domain/e67vm91sgf17.trickle.host/) | 2026-01-06 | Taken down | Amazon Registrar | [io-en-us.host](https://phishdestroy.io/domain/io-en-us.host/) | 2026-01-06 | Offline | NameSilo | [ledger-auth.cloudaccess.host](https://phishdestroy.io/domain/ledger-auth.cloudaccess.host/) | 2026-01-05 | Offline | eNom | [phantom-wallet-dapp-1vyt.bolt.host](https://phishdestroy.io/domain/phantom-wallet-dapp-1vyt.bolt.host/) | 2026-01-04 | Taken down | Cloudflare | [ledger-portal-auth.cloudaccess.host](https://phishdestroy.io/domain/ledger-portal-auth.cloudaccess.host/) | 2025-12-31 | Offline | eNom | [cinzia.sviluppo.host](https://phishdestroy.io/domain/cinzia.sviluppo.host/) | 2025-12-23 | Offline | Tucows Domains | [sheilla.sviluppo.host](https://phishdestroy.io/domain/sheilla.sviluppo.host/) | 2025-12-20 | Offline | Tucows Domains | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .host registrations; first .host report 2025-09-28. Canonical: https://phishdestroy.io/tld/host/