# Phishing domains under .info

.info accounts for 2,522 of the 224,866 domains in the PhishDestroy database (1.12%), with 121 new ones in the last 30 days. The most impersonated brand under .info is Google. 953 were online at the last check and 255 have a confirmed takedown.

2,522Reported .info domains

1.12%Share of PhishDestroy reports

121Last 30 days

255Confirmed takedowns

## Detections per month

.info phishing domains detected per month: 2,289 from 2025-11 to 2026-10; peak 518.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)116
- [MetaMask](https://phishdestroy.io/brand/metamask/)71
- [Binance](https://phishdestroy.io/brand/binance/)53
- [Kraken](https://phishdestroy.io/brand/kraken/)43
- [Trust Wallet](https://phishdestroy.io/brand/trust-wallet/)31
- [Solana](https://phishdestroy.io/brand/solana/)29
- [SushiSwap](https://phishdestroy.io/brand/sushiswap/)29
- [Ledger](https://phishdestroy.io/brand/ledger/)23

### Registrars

- [NICENIC](https://phishdestroy.io/registrar/nicenic/)444
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)327
- Cloudflare212
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)188
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)162
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)159
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)113
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)93

## Latest .info phishing domains

The 30 most recently detected .info domains
Domain | First detected | Status at last check | Registrar | 
[xamvault.info](https://phishdestroy.io/domain/xamvault.info/) | 2026-10-22 | Online | NICENIC | 
[1wm.info](https://phishdestroy.io/domain/1wm.info/) | 2026-10-22 | Online | NICENIC | 
[getbze.info](https://phishdestroy.io/domain/getbze.info/) | 2026-10-22 | Online | NICENIC | 
[strategyvault.info](https://phishdestroy.io/domain/strategyvault.info/) | 2026-10-22 | Online | NICENIC | 
[fkmvault.info](https://phishdestroy.io/domain/fkmvault.info/) | 2026-10-22 | Online | NICENIC | 
[prostovcash.info](https://phishdestroy.io/domain/prostovcash.info/) | 2026-10-22 | Online | NICENIC | 
[nordchange.info](https://phishdestroy.io/domain/nordchange.info/) | 2026-10-22 | Online | NICENIC | 
[tspim.info](https://phishdestroy.io/domain/tspim.info/) | 2026-10-22 | Online | Ultahost | 
[phmacentral.info](https://phishdestroy.io/domain/phmacentral.info/) | 2026-10-21 | Online | Wild West Domains | 
[aml-checkbot.info](https://phishdestroy.io/domain/aml-checkbot.info/) | 2026-10-21 | Offline | PublicDomainRegistry.com | 
[ambergrovyt.info](https://phishdestroy.io/domain/ambergrovyt.info/) | 2026-10-21 | Online | NameCheap | 
[norva.info](https://phishdestroy.io/domain/norva.info/) | 2026-10-21 | Offline | PublicDomainRegistry.com | 
[xamcore.info](https://phishdestroy.io/domain/xamcore.info/) | 2026-10-20 | Online | NICENIC | 
[cafexvault.info](https://phishdestroy.io/domain/cafexvault.info/) | 2026-10-20 | Online | NICENIC | 
[aine.sjhub.info](https://phishdestroy.io/domain/aine.sjhub.info/) | 2026-10-20 | Online | NameSilo | 
[finanzchef24quantom.info](https://phishdestroy.io/domain/finanzchef24quantom.info/) | 2026-10-20 | Online | NICENIC | 
[fuzzyvault.info](https://phishdestroy.io/domain/fuzzyvault.info/) | 2026-10-20 | Online | NICENIC | 
[xspectarvault.info](https://phishdestroy.io/domain/xspectarvault.info/) | 2026-10-20 | Online | NICENIC | 
[el-meu-compte.info](https://phishdestroy.io/domain/el-meu-compte.info/) | 2026-10-20 | Online | NICENIC | 
[zoneflip.info](https://phishdestroy.io/domain/zoneflip.info/) | 2026-10-20 | Online | NICENIC | 
[adsparkagency.info](https://phishdestroy.io/domain/adsparkagency.info/) | 2026-10-20 | Online | NameCheap | 
[traderstrustprofits.info](https://phishdestroy.io/domain/traderstrustprofits.info/) | 2026-10-20 | Online | OwnRegistrar | 
[finance-community.info](https://phishdestroy.io/domain/finance-community.info/) | 2026-10-19 | Online | Global Domain | 
[xamstack.info](https://phishdestroy.io/domain/xamstack.info/) | 2026-10-19 | Online | NICENIC | 
[decentralizedweb-ten.info](https://phishdestroy.io/domain/decentralizedweb-ten.info/) | 2026-10-19 | Online | NICENIC | 
[xamhub.info](https://phishdestroy.io/domain/xamhub.info/) | 2026-10-19 | Online | NICENIC | 
[mafeeial.info](https://phishdestroy.io/domain/mafeeial.info/) | 2026-10-19 | Offline | NameSilo | 
[microsoftteam.info](https://phishdestroy.io/domain/microsoftteam.info/) | 2026-10-18 | Offline | Dynadot | 
[netflixcredit.sweepstakealert.info](https://phishdestroy.io/domain/netflixcredit.sweepstakealert.info/) | 2026-10-17 | Online | IONOS SE | 
[pikashow.info](https://phishdestroy.io/domain/pikashow.info/) | 2026-10-17 | Online | Edomains | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .info registrations; first .info report 2024-03-19.

Canonical: https://phishdestroy.io/tld/info/