Phishing domains under .ltd

.ltd accounts for 475 of the 224,866 domains in the PhishDestroy database (0.21%), with 168 new ones in the last 30 days. The most impersonated brand under .ltd is Ondo. 110 were online at the last check and 23 have a confirmed takedown.

475
Reported .ltd domains
0.21%
Share of PhishDestroy reports
168
Last 30 days
23
Confirmed takedowns

Detections per month

2025-11: 62025-12: 132026-01: 122026-02: 462026-03: 192026-04: 82026-05: 92026-06: 202026-07: 582026-08: 452026-09: 1832026-10: 8
.ltd phishing domains detected per month: 427 from 2025-11 to 2026-10; peak 183.

Brands and registrars

Impersonated brands

  1. Ondo94
  2. Google14
  3. MetaMask10
  4. Binance9
  5. Ledger7
  6. Coinbase6
  7. Binance5
  8. Coinbase5

Registrars

  1. NICENIC183
  2. Dynadot43
  3. PublicDomainRegistry.com34
  4. HOSTINGER operations24
  5. NameCheap24
  6. NiceNIC15
  7. NameSilo13
  8. Cloudflare12

Latest .ltd phishing domains

The 30 most recently detected .ltd domains
DomainFirst detectedStatus at last checkRegistrar
portal.alpinainvestlimited.ltd2026-10-19OnlineTucows Domains
tangemwallet.ltd2026-10-07OfflineNICENIC
crowningcapital.ltd2026-10-07OnlineNameCheap
egfin.ltd2026-10-06UnknownNICENIC
velnorabnk.ltd2026-10-06OnlineSav.com
globalfundsnexora.ltd2026-10-04OnlineSpaceship
apexcrownmanagement.ltd2026-10-03OnlineSpaceship
cornerstone-investments.ltd2026-10-03OnlineDynadot
crownspring-capitals.ltd2026-09-30OnlineDynadot
promotrustcard.ltd2026-09-29OnlinePublicDomainRegistry.com
pagos.evergreenfin.ltd2026-09-29OfflineNICENIC
pingtai.evergreenfin.ltd2026-09-29UnknownNICENIC
trace.evergreenfin.ltd2026-09-29UnknownNICENIC
store.evergreenfin.ltd2026-09-29UnknownNICENIC
partners.evergreenfin.ltd2026-09-29OfflineNICENIC
signin.evergreenfin.ltd2026-09-29UnknownNICENIC
servicios.evergreenfin.ltd2026-09-29UnknownNICENIC
org.evergreenfin.ltd2026-09-29UnknownNICENIC
ollama.evergreenfin.ltd2026-09-29UnknownNICENIC
mobile.evergreenfin.ltd2026-09-29UnknownNICENIC
meituan.evergreenfin.ltd2026-09-29UnknownNICENIC
federation.evergreenfin.ltd2026-09-29UnknownNICENIC
beta-login.evergreenfin.ltd2026-09-29UnknownNICENIC
manage.evergreenfin.ltd2026-09-29UnknownNICENIC
loginpage.evergreenfin.ltd2026-09-29UnknownNICENIC
kr.evergreenfin.ltd2026-09-29UnknownNICENIC
idpage.evergreenfin.ltd2026-09-29UnknownNICENIC
idcenter.evergreenfin.ltd2026-09-29UnknownNICENIC
facturacion.evergreenfin.ltd2026-09-29UnknownNICENIC
employees.evergreenfin.ltd2026-09-29OfflineNICENIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .ltd registrations; first .ltd report 2025-07-12.