# Phishing domains under .ke .ke accounts for 37 of the 224,866 domains in the PhishDestroy database (0.02%), with 3 new ones in the last 30 days. The most impersonated brand under .ke is Phantom. 24 were online at the last check and 6 have a confirmed takedown. 37Reported .ke domains 0.02%Share of PhishDestroy reports 3Last 30 days 6Confirmed takedowns ## Detections per month .ke phishing domains detected per month: 33 from 2025-11 to 2026-10; peak 10. ## Brands and registrars ### Impersonated brands - [Phantom](https://phishdestroy.io/brand/phantom/)3 - [Uphold](https://phishdestroy.io/brand/uphold/)2 - [Coinbase](https://phishdestroy.io/brand/coinbase/)2 - [MetaMask](https://phishdestroy.io/brand/metamask/)2 - [Amazon](https://phishdestroy.io/brand/amazon/)1 - [TikTok](https://phishdestroy.io/brand/tiktok/)1 - [Binance](https://phishdestroy.io/brand/binance/)1 - [Wordpress](https://phishdestroy.io/brand/wordpress/)1 ### Registrars - Afriregister9 - HostPinnacle Cloud8 - HOSTAFRICA EAC4 - Truehost AI3 - [GOOGLE (ASN: 15169)](https://phishdestroy.io/registrar/google/)2 - Truehost Cloud2 - Safaricom2 - KWE Holding1 ## Latest .ke phishing domains The 30 most recently detected .ke domains Domain | First detected | Status at last check | Registrar | [aivagroup.co.ke](https://phishdestroy.io/domain/aivagroup.co.ke/) | 2026-10-11 | Online | Truehost AI | [tausiapp.co.ke](https://phishdestroy.io/domain/tausiapp.co.ke/) | 2026-09-23 | Online | Safaricom | [mentorspace.co.ke](https://phishdestroy.io/domain/mentorspace.co.ke/) | 2026-09-23 | Offline | HostPinnacle Cloud | [metamask-k.blogspot.co.ke](https://phishdestroy.io/domain/metamask-k.blogspot.co.ke/) | 2026-08-14 | Online | Afriregister | [contact-metamask-support.blogspot.co.ke](https://phishdestroy.io/domain/contact-metamask-support.blogspot.co.ke/) | 2026-07-12 | Online | Afriregister | [revoltengineering.co.ke](https://phishdestroy.io/domain/revoltengineering.co.ke/) | 2026-06-30 | Online | Truehost AI | [docs-trezorlogin.blogspot.co.ke](https://phishdestroy.io/domain/docs-trezorlogin.blogspot.co.ke/) | 2026-06-29 | Online | Google Blogger | [ecocashloans.online.techjeisolutions.co.ke](https://phishdestroy.io/domain/ecocashloans.online.techjeisolutions.co.ke/) | 2026-06-19 | Offline | HostPinnacle Cloud | [onstudies.co.ke](https://phishdestroy.io/domain/onstudies.co.ke/) | 2026-05-22 | Offline | HostPinnacle Cloud | [jetx-download.co.ke](https://phishdestroy.io/domain/jetx-download.co.ke/) | 2026-03-31 | Online | AHERI BASIC INTERNET | [bestwallettoken.crescentnetworks.co.ke](https://phishdestroy.io/domain/bestwallettoken.crescentnetworks.co.ke/) | 2026-03-07 | Offline | Truehost AI | [celsiusdistribution.tellancollections.co.ke](https://phishdestroy.io/domain/celsiusdistribution.tellancollections.co.ke/) | 2026-02-26 | Offline | — | [celsiusdistribution.codeaxe.co.ke](https://phishdestroy.io/domain/celsiusdistribution.codeaxe.co.ke/) | 2026-02-26 | Offline | — | [celsius.network.codeaxe.co.ke](https://phishdestroy.io/domain/celsius.network.codeaxe.co.ke/) | 2026-02-26 | Offline | — | [upholddlogin.blogspot.co.ke](https://phishdestroy.io/domain/upholddlogin.blogspot.co.ke/) | 2026-02-19 | Online | Afriregister | [uphold-logn-account.blogspot.co.ke](https://phishdestroy.io/domain/uphold-logn-account.blogspot.co.ke/) | 2026-02-18 | Online | Afriregister | [phantomeextensionn.blogspot.co.ke](https://phishdestroy.io/domain/phantomeextensionn.blogspot.co.ke/) | 2026-02-14 | Online | Afriregister | [coiinbase-logiin.blogspot.co.ke](https://phishdestroy.io/domain/coiinbase-logiin.blogspot.co.ke/) | 2026-02-12 | Online | Afriregister | [card.1inch.smartseed.co.ke](https://phishdestroy.io/domain/card.1inch.smartseed.co.ke/) | 2026-02-06 | Taken down | HostPinnacle Cloud | [siyb.co.ke](https://phishdestroy.io/domain/siyb.co.ke/) | 2026-02-05 | Online | ECHOTEL KENYA | [usdtoksh.co.ke](https://phishdestroy.io/domain/usdtoksh.co.ke/) | 2026-02-03 | Online | HostPinnacle Cloud | [flashparcel.co.ke](https://phishdestroy.io/domain/flashparcel.co.ke/) | 2026-01-26 | Taken down | HOSTAFRICA EAC | [coinbase-pro-sign-ins.blogspot.co.ke](https://phishdestroy.io/domain/coinbase-pro-sign-ins.blogspot.co.ke/) | 2026-01-24 | Online | Afriregister | [mailcgi-plus.co.ke](https://phishdestroy.io/domain/mailcgi-plus.co.ke/) | 2026-01-05 | Taken down | HOSTAFRICA EAC | [sechehomes.co.ke](https://phishdestroy.io/domain/sechehomes.co.ke/) | 2026-01-05 | Offline | Truehost Cloud | [login-uphold-help.blogspot.co.ke](https://phishdestroy.io/domain/login-uphold-help.blogspot.co.ke/) | 2026-01-02 | Online | Afriregister | [haswellsolutions.co.ke](https://phishdestroy.io/domain/haswellsolutions.co.ke/) | 2025-12-23 | Offline | Safaricom | [impressengineering.co.ke](https://phishdestroy.io/domain/impressengineering.co.ke/) | 2025-12-21 | Online | HostPinnacle Cloud | [smileybins.co.ke](https://phishdestroy.io/domain/smileybins.co.ke/) | 2025-12-12 | Taken down | HostPinnacle Cloud | [youniacleaners.co.ke](https://phishdestroy.io/domain/youniacleaners.co.ke/) | 2025-12-08 | Taken down | HostPinnacle Cloud | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .ke registrations; first .ke report 2025-08-29. Canonical: https://phishdestroy.io/tld/ke/