Phishing domains under .io

.io accounts for 9,126 of the 224,866 domains in the PhishDestroy database (4.06%), with 42 new ones in the last 30 days. The most impersonated brand under .io is Netflix. 2,845 were online at the last check and 2,046 have a confirmed takedown.

9,126
Reported .io domains
4.06%
Share of PhishDestroy reports
42
Last 30 days
2,046
Confirmed takedowns

Detections per month

2025-11: 6432025-12: 6032026-01: 1072026-02: 11572026-03: 10392026-04: 9002026-05: 4662026-06: 13522026-07: 9762026-08: 8112026-09: 5942026-10: 22
.io phishing domains detected per month: 8,670 from 2025-11 to 2026-10; peak 1,352.

Brands and registrars

Impersonated brands

  1. Netflix656
  2. MetaMask494
  3. Amazon476
  4. Google337
  5. Trezor327
  6. KuCoin323
  7. Ledger303
  8. Coinbase179

Registrars

  1. GitHub2,909
  2. Webflow1,047
  3. MarkMonitor1,033
  4. NameCheap531
  5. 1API449
  6. Cloudflare407
  7. Cloudflare313
  8. GoDaddy.com301

Latest .io phishing domains

The 30 most recently detected .io domains
DomainFirst detectedStatus at last checkRegistrar
trezorinspect.io2026-10-20OnlineNETIM
trezorsafety.io2026-10-20OnlineNETIM
trezorcheckup.io2026-10-20OnlineNETIM
ccreator.io2026-10-19OfflineGoDaddy.com
solanatools.io2026-10-19OnlinePorkbun
io-bridge.io2026-10-19OnlineMegazone , dba HOSTING.KR
arguspad.io2026-10-16Online—
etherscens.io2026-10-15OnlineCloudflare
eventexpress.io2026-10-12OnlineGoDaddy.com
dexmines.io2026-10-12OnlineNICENIC
827262-trezor.io2026-10-11OnlineNICENIC
reach-trezor.io2026-10-11OnlineOwnRegistrar
fxrprotocol.io2026-10-11OnlineDynadot
gramx.io2026-10-09OnlineNAMECHEAP
uniswaps-apps.io2026-10-08OnlineTLD Registrar Solutions
hyperliquid-exchanges.io2026-10-08OnlineTLD Registrar Solutions
ledger-live-applications.io2026-10-08OnlineTLD Registrar Solutions
earntask.io2026-10-07OnlineNAMECHEAP
genesis-raydium.io2026-10-06OnlineNICENIC
metamaskteam.io2026-10-04OnlineENOM
lendprotocol.io2026-10-03OnlineEranet
bittensor-dapp.io2026-10-03OnlineName.com
legder.desktop-wallet.io2026-09-28OnlineTLD Registrar Solutions
surgehq.io2026-09-28OnlineNAMECHEAP
comfy-ui.io2026-09-28OnlineSpaceship
playgym.io2026-09-28OnlineGoDaddy.com
defiart.io2026-09-27UnknownNICENIC
gigabooster.io2026-09-27OnlineDonDominio (SCIP)
portal.incentiv.io2026-09-27OnlineGoDaddy.com
bittumbler.io2026-09-26OnlineNICENIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .io registrations; first .io report 2024-03-20.