Phishing domains under .locker

.locker accounts for 31 of the 224,866 domains in the PhishDestroy database (0.01%), with 0 new ones in the last 30 days. The most impersonated brand under .locker is Google. 4 were online at the last check and 0 have a confirmed takedown.

31
Reported .locker domains
0.01%
Share of PhishDestroy reports
0
Last 30 days
0
Confirmed takedowns

Detections per month

2025-11: 02025-12: 02026-01: 12026-02: 22026-03: 02026-04: 02026-05: 02026-06: 12026-07: 32026-08: 22026-09: 12026-10: 0
.locker phishing domains detected per month: 10 from 2025-11 to 2026-10; peak 3.

Brands and registrars

Impersonated brands

  1. Google18
  2. Coinbase2
  3. ZkSync1
  4. Investment Scam1
  5. Trezor1
  6. Uniswap1

Registrars

  1. Dynadot23
  2. Gname.com4
  3. Global Domain2
  4. GoDaddy1

Latest .locker phishing domains

The 30 most recently detected .locker domains
DomainFirst detectedStatus at last checkRegistrar
usearckit.locker2026-09-17OnlineGoDaddy
myfortnite.locker2026-08-24OnlineGname.com
trezor.locker2026-08-14OfflineGname.com
bose.locker2026-07-23OfflineGname.com
fortnitestats.locker2026-07-15OnlineGname.com
situerclasse.locker2026-07-13OnlineGlobal Domain
classe2027.locker2026-06-11OfflineGlobal Domain
40413.locker2026-02-26OfflineDynadot
19348.locker2026-02-26Offline—
nachricht-voice-tonline.kontakt-registration-update.locker2026-01-22OfflineDynadot
arb.airdrpsalert.locker2025-10-31OfflineDynadot
zeebu.airdrpsalert.locker2025-10-31OfflineDynadot
flow.airdrpsalert.locker2025-10-31OfflineDynadot
graph.airdrpsalert.locker2025-10-31OfflineDynadot
sym.airdrpsalert.locker2025-10-31OfflineDynadot
fuel.airdrpsalert.locker2025-10-31OfflineDynadot
ton.airdrpsalert.locker2025-10-30OfflineDynadot
recall.airdrpsalert.locker2025-10-30OfflineDynadot
zksync.airdrpsalert.locker2025-10-30OfflineDynadot
momentum.airdrpsalert.locker2025-10-30OfflineDynadot
sophon.airdrpsalert.locker2025-10-30OfflineDynadot
airdrpsalert.locker2025-10-30OfflineDynadot
op.airdrpsalert.locker2025-10-30OfflineDynadot
dot.airdrpsalert.locker2025-10-30OfflineDynadot
sca.airdrpsalert.locker2025-10-30OfflineDynadot
beefy.airdrpsalert.locker2025-10-30OfflineDynadot
plume.airdrpsalert.locker2025-10-30OfflineDynadot
spaceandtime.airdrpsalert.locker2025-10-30OfflineDynadot
fil.airdrpsalert.locker2025-10-29OfflineDynadot
webmail.assets-coinbase.locker2025-10-24OfflineDynadot

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .locker registrations; first .locker report 2025-10-24.