Phishing domains under .media

.media accounts for 289 of the 224,866 domains in the PhishDestroy database (0.13%), with 10 new ones in the last 30 days. The most impersonated brand under .media is Coinbase. 19 were online at the last check and 207 have a confirmed takedown.

289
Reported .media domains
0.13%
Share of PhishDestroy reports
10
Last 30 days
207
Confirmed takedowns

Detections per month

2025-11: 112025-12: 1312026-01: 102026-02: 702026-03: 132026-04: 72026-05: 182026-06: 52026-07: 62026-08: 32026-09: 22026-10: 10
.media phishing domains detected per month: 286 from 2025-11 to 2026-10; peak 131.

Brands and registrars

Impersonated brands

  1. Coinbase52
  2. MetaMask37
  3. Ledger36
  4. Kraken23
  5. Rabby20
  6. Phantom16
  7. Trezor11
  8. Trust Wallet7

Registrars

  1. CSC Corporate Domains256
  2. NiceNIC12
  3. NameCheap6
  4. NICENIC3
  5. Sav.com2
  6. Global Domain1
  7. Cloudflare1
  8. REGRU-RU1

Latest .media phishing domains

The 30 most recently detected .media domains
DomainFirst detectedStatus at last checkRegistrar
us-ledgger-live.framer.media2026-10-14OnlineCSC Corporate Domains
go-live-ledggr.framer.media2026-10-14OnlineCSC Corporate Domains
ledgorlogi.framer.media2026-10-14OnlineCSC Corporate Domains
leddgrlive.framer.media2026-10-14OnlineCSC Corporate Domains
connect-helpen.framer.media2026-10-14OnlineCSC Corporate Domains
livledgerlog.framer.media2026-10-14OnlineCSC Corporate Domains
ldgerr-strt-supp.framer.media2026-10-14OnlineCSC Corporate Domains
treezorsuites.framer.media2026-10-10OfflineCSC Corporate Domains
trezurstrtio.framer.media2026-10-10OfflineCSC Corporate Domains
beccuelucu.media2026-10-07OnlineNameCheap
tronlink.media2026-09-19OnlineGoDaddy.com
gouv.media2026-09-06OnlinePorkbun
trustwallet.media2026-08-26OfflinePublicDomainRegistry.com
stresser.media2026-08-14OnlineWeb Commerce Communications dba WebNic.c
start-trezur.framer.media2026-08-12OfflineCSC Corporate Domains
trezor-io-start-app-download-install.framer.media2026-07-27OfflineCSC Corporate Domains
beewsunla.media2026-07-22OfflineNameCheap
darknet-market.media2026-07-11OnlineNICENIC
sso-uphweld.framer.media2026-07-01OfflineCSC Corporate Domains
www-kraken.publication.media2026-07-01OfflineSquarespace Domains II
upgrader.media2026-07-01OnlineNICENIC
startio-trejor-io.framer.media2026-06-26OfflineCSC Corporate Domains
aave.media2026-06-17OnlineSav.com
logen-livledgre.framer.media2026-06-15OfflineCSC Corporate Domains
ledgr-live-strt.framer.media2026-06-12OfflineCSC Corporate Domains
sweeply.media2026-06-01OfflineNameCheap
ledgorlives.framer.media2026-05-31Taken downCSC Corporate Domains
ledggrliveslogi.framer.media2026-05-30OfflineCSC Corporate Domains
startiio.framer.media2026-05-30Taken downCSC Corporate Domains
newconnect-ldgr-live.framer.media2026-05-30OfflineCSC Corporate Domains

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .media registrations; first .media report 2025-09-07.