Phishing domains under .live

.live accounts for 5,071 of the 224,866 domains in the PhishDestroy database (2.26%), with 193 new ones in the last 30 days. The most impersonated brand under .live is Google. 1,785 were online at the last check and 552 have a confirmed takedown.

5,071
Reported .live domains
2.26%
Share of PhishDestroy reports
193
Last 30 days
552
Confirmed takedowns

Detections per month

2025-11: 1632025-12: 1782026-01: 2002026-02: 10832026-03: 3702026-04: 2332026-05: 2522026-06: 7042026-07: 5052026-08: 2902026-09: 2822026-10: 139
.live phishing domains detected per month: 4,399 from 2025-11 to 2026-10; peak 1,083.

Brands and registrars

Impersonated brands

  1. Google141
  2. Ledger111
  3. Solana101
  4. MetaMask95
  5. Revolut78
  6. Binance51
  7. Bitcoin50
  8. Ethereum48

Registrars

  1. NICENIC1,317
  2. NiceNIC749
  3. PublicDomainRegistry.com355
  4. Dynadot307
  5. Cloudflare273
  6. Global Domain257
  7. Web Commerce Communications251
  8. NameCheap178

Latest .live phishing domains

The 30 most recently detected .live domains
DomainFirst detectedStatus at last checkRegistrar
obmenoff.live2026-10-22OnlineNICENIC
autozagorski.live2026-10-22OnlineDynadot
us06cloud.live2026-10-21OnlineNameCheap
antalyamodernsanat.live2026-10-21OnlineDynadot
anpserwis.live2026-10-21OnlineDynadot
all-city.live2026-10-20OnlineDynadot
alberomeble.live2026-10-20OnlineDynadot
albergonyers.live2026-10-20OnlineDynadot
e-expertsurevest.live2026-10-20OnlineOwnRegistrar
agnieszkaklimkowska.live2026-10-20OnlineDynadot
agishevphoto.live2026-10-20OnlineDynadot
app.xstocksfidashboard.live2026-10-20OfflineNICENIC
aquafunded.live2026-10-20OnlineNICENIC
getbze.live2026-10-20OnlineNICENIC
copyoptionsmaster.live2026-10-19OnlineOwnRegistrar
assurancewealthfx.live2026-10-19OnlineSav.com
appxvaultxstock.live2026-10-19OnlineNICENIC
proposal-neetcoin.live2026-10-19OnlineNICENIC
sharex-network.live2026-10-19OnlineNICENIC
proposal-treadfi.live2026-10-18OnlineNICENIC
dapp.ocaccess.live2026-10-17OnlineDynadot
globalstocksrenewedcentre.live2026-10-17OnlineDynadot
primefxstrategies.live2026-10-16OnlineDynadot
plurrisvest.live2026-10-16OnlineDynadot
cyberleeksol.live2026-10-15OnlineNICENIC
voptionaset.live2026-10-14OnlineSpaceship
web3autotrades.live2026-10-14OnlineSav.com
celestium.live2026-10-14OfflineHOSTINGER operations
pawnsapp.live2026-10-13OfflineNICENIC
xrpl.live2026-10-13OnlineNICENIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .live registrations; first .live report 2024-03-31.