# Phishing domains under .media .media accounts for 289 of the 224,866 domains in the PhishDestroy database (0.13%), with 10 new ones in the last 30 days. The most impersonated brand under .media is Coinbase. 19 were online at the last check and 207 have a confirmed takedown. 289Reported .media domains 0.13%Share of PhishDestroy reports 10Last 30 days 207Confirmed takedowns ## Detections per month .media phishing domains detected per month: 286 from 2025-11 to 2026-10; peak 131. ## Brands and registrars ### Impersonated brands - [Coinbase](https://phishdestroy.io/brand/coinbase/)52 - [MetaMask](https://phishdestroy.io/brand/metamask/)37 - [Ledger](https://phishdestroy.io/brand/ledger/)36 - [Kraken](https://phishdestroy.io/brand/kraken/)23 - [Rabby](https://phishdestroy.io/brand/rabby/)20 - [Phantom](https://phishdestroy.io/brand/phantom/)16 - [Trezor](https://phishdestroy.io/brand/trezor/)11 - [Trust Wallet](https://phishdestroy.io/brand/trust-wallet/)7 ### Registrars - CSC Corporate Domains256 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)12 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)6 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)3 - [Sav.com](https://phishdestroy.io/registrar/sav-com/)2 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)1 - Cloudflare1 - REGRU-RU1 ## Latest .media phishing domains The 30 most recently detected .media domains Domain | First detected | Status at last check | Registrar | [us-ledgger-live.framer.media](https://phishdestroy.io/domain/us-ledgger-live.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [go-live-ledggr.framer.media](https://phishdestroy.io/domain/go-live-ledggr.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [ledgorlogi.framer.media](https://phishdestroy.io/domain/ledgorlogi.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [leddgrlive.framer.media](https://phishdestroy.io/domain/leddgrlive.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [connect-helpen.framer.media](https://phishdestroy.io/domain/connect-helpen.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [livledgerlog.framer.media](https://phishdestroy.io/domain/livledgerlog.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [ldgerr-strt-supp.framer.media](https://phishdestroy.io/domain/ldgerr-strt-supp.framer.media/) | 2026-10-14 | Online | CSC Corporate Domains | [treezorsuites.framer.media](https://phishdestroy.io/domain/treezorsuites.framer.media/) | 2026-10-10 | Offline | CSC Corporate Domains | [trezurstrtio.framer.media](https://phishdestroy.io/domain/trezurstrtio.framer.media/) | 2026-10-10 | Offline | CSC Corporate Domains | [beccuelucu.media](https://phishdestroy.io/domain/beccuelucu.media/) | 2026-10-07 | Online | NameCheap | [tronlink.media](https://phishdestroy.io/domain/tronlink.media/) | 2026-09-19 | Online | GoDaddy.com | [gouv.media](https://phishdestroy.io/domain/gouv.media/) | 2026-09-06 | Online | Porkbun | [trustwallet.media](https://phishdestroy.io/domain/trustwallet.media/) | 2026-08-26 | Offline | PublicDomainRegistry.com | [stresser.media](https://phishdestroy.io/domain/stresser.media/) | 2026-08-14 | Online | Web Commerce Communications dba WebNic.c | [start-trezur.framer.media](https://phishdestroy.io/domain/start-trezur.framer.media/) | 2026-08-12 | Offline | CSC Corporate Domains | [trezor-io-start-app-download-install.framer.media](https://phishdestroy.io/domain/trezor-io-start-app-download-install.framer.media/) | 2026-07-27 | Offline | CSC Corporate Domains | [beewsunla.media](https://phishdestroy.io/domain/beewsunla.media/) | 2026-07-22 | Offline | NameCheap | [darknet-market.media](https://phishdestroy.io/domain/darknet-market.media/) | 2026-07-11 | Online | NICENIC | [sso-uphweld.framer.media](https://phishdestroy.io/domain/sso-uphweld.framer.media/) | 2026-07-01 | Offline | CSC Corporate Domains | [www-kraken.publication.media](https://phishdestroy.io/domain/www-kraken.publication.media/) | 2026-07-01 | Offline | Squarespace Domains II | [upgrader.media](https://phishdestroy.io/domain/upgrader.media/) | 2026-07-01 | Online | NICENIC | [startio-trejor-io.framer.media](https://phishdestroy.io/domain/startio-trejor-io.framer.media/) | 2026-06-26 | Offline | CSC Corporate Domains | [aave.media](https://phishdestroy.io/domain/aave.media/) | 2026-06-17 | Online | Sav.com | [logen-livledgre.framer.media](https://phishdestroy.io/domain/logen-livledgre.framer.media/) | 2026-06-15 | Offline | CSC Corporate Domains | [ledgr-live-strt.framer.media](https://phishdestroy.io/domain/ledgr-live-strt.framer.media/) | 2026-06-12 | Offline | CSC Corporate Domains | [sweeply.media](https://phishdestroy.io/domain/sweeply.media/) | 2026-06-01 | Offline | NameCheap | [ledgorlives.framer.media](https://phishdestroy.io/domain/ledgorlives.framer.media/) | 2026-05-31 | Taken down | CSC Corporate Domains | [ledggrliveslogi.framer.media](https://phishdestroy.io/domain/ledggrliveslogi.framer.media/) | 2026-05-30 | Offline | CSC Corporate Domains | [startiio.framer.media](https://phishdestroy.io/domain/startiio.framer.media/) | 2026-05-30 | Taken down | CSC Corporate Domains | [newconnect-ldgr-live.framer.media](https://phishdestroy.io/domain/newconnect-ldgr-live.framer.media/) | 2026-05-30 | Offline | CSC Corporate Domains | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .media registrations; first .media report 2025-09-07. Canonical: https://phishdestroy.io/tld/media/