# Phishing domains under .money

.money accounts for 138 of the 224,866 domains in the PhishDestroy database (0.06%), with 4 new ones in the last 30 days. The most impersonated brand under .money is Telegram. 97 were online at the last check and 16 have a confirmed takedown.

138Reported .money domains

0.06%Share of PhishDestroy reports

4Last 30 days

16Confirmed takedowns

## Detections per month

.money phishing domains detected per month: 125 from 2025-11 to 2026-10; peak 62.

## Brands and registrars

### Impersonated brands

- [Telegram](https://phishdestroy.io/brand/telegram/)14
- [Moonshot](https://phishdestroy.io/brand/moonshot/)6
- [MetaMask](https://phishdestroy.io/brand/metamask/)4
- [Hyperliquid](https://phishdestroy.io/brand/hyperliquid/)3
- [X.com](https://phishdestroy.io/brand/x-com/)2
- Buttcoin2
- [Bitcoin](https://phishdestroy.io/brand/bitcoin/)2
- [Celestia](https://phishdestroy.io/brand/celestia/)1

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)64
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)25
- Cloudflare13
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)5
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)5
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)4
- [Tucows Domains](https://phishdestroy.io/registrar/tucows/)3
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)3

## Latest .money phishing domains

The 30 most recently detected .money domains
Domain | First detected | Status at last check | Registrar | 
[backoffice.anodos.money](https://phishdestroy.io/domain/backoffice.anodos.money/) | 2026-10-11 | Online | GoDaddy.com | 
[mixer.money](https://phishdestroy.io/domain/mixer.money/) | 2026-10-09 | Online | NameCheap | 
[cleanusdt.money](https://phishdestroy.io/domain/cleanusdt.money/) | 2026-10-08 | Online | Regery.com | 
[kinetiq.money](https://phishdestroy.io/domain/kinetiq.money/) | 2026-10-07 | Offline | NICENIC | 
[variational.money](https://phishdestroy.io/domain/variational.money/) | 2026-09-13 | Online | Name.com | 
[early-bankrupt.money](https://phishdestroy.io/domain/early-bankrupt.money/) | 2026-09-12 | Offline | NICENIC | 
[cyberleek.money](https://phishdestroy.io/domain/cyberleek.money/) | 2026-09-09 | Online | Spaceship | 
[pons.money](https://phishdestroy.io/domain/pons.money/) | 2026-09-07 | Unknown | NICENIC | 
[cs2go.money](https://phishdestroy.io/domain/cs2go.money/) | 2026-08-28 | Online | Dynadot | 
[mixmy.money](https://phishdestroy.io/domain/mixmy.money/) | 2026-08-26 | Online | NICENIC | 
[mixep.money](https://phishdestroy.io/domain/mixep.money/) | 2026-08-26 | Offline | NameCheap | 
[nightowl.money](https://phishdestroy.io/domain/nightowl.money/) | 2026-08-22 | Online | NICENIC | 
[detect.money](https://phishdestroy.io/domain/detect.money/) | 2026-08-13 | Online | Porkbun | 
[app.xky.money](https://phishdestroy.io/domain/app.xky.money/) | 2026-08-05 | Online | NICENIC | 
[app.siy.money](https://phishdestroy.io/domain/app.siy.money/) | 2026-08-05 | Online | NICENIC | 
[app.skh.money](https://phishdestroy.io/domain/app.skh.money/) | 2026-08-05 | Online | NICENIC | 
[app.zky.money](https://phishdestroy.io/domain/app.zky.money/) | 2026-08-05 | Online | NICENIC | 
[app.dky.money](https://phishdestroy.io/domain/app.dky.money/) | 2026-08-05 | Online | NICENIC | 
[app.aky.money](https://phishdestroy.io/domain/app.aky.money/) | 2026-08-05 | Online | NICENIC | 
[app.skky.money](https://phishdestroy.io/domain/app.skky.money/) | 2026-08-05 | Online | NICENIC | 
[app.skym.money](https://phishdestroy.io/domain/app.skym.money/) | 2026-08-05 | Offline | NICENIC | 
[app.wky.money](https://phishdestroy.io/domain/app.wky.money/) | 2026-08-05 | Online | NICENIC | 
[rewards-neverland.money](https://phishdestroy.io/domain/rewards-neverland.money/) | 2026-08-04 | Online | NICENIC | 
[tageschau.money](https://phishdestroy.io/domain/tageschau.money/) | 2026-08-03 | Online | TLD Registrar Solutions | 
[wx.money](https://phishdestroy.io/domain/wx.money/) | 2026-07-27 | Online | NameCheap | 
[dividends.money](https://phishdestroy.io/domain/dividends.money/) | 2026-07-27 | Online | GoDaddy.com | 
[wm.money](https://phishdestroy.io/domain/wm.money/) | 2026-07-27 | Online | NameCheap | 
[avantis.money](https://phishdestroy.io/domain/avantis.money/) | 2026-07-12 | Unknown | NICENIC | 
[dreamcash.money](https://phishdestroy.io/domain/dreamcash.money/) | 2026-07-06 | Online | NICENIC | 
[vote-printr.money](https://phishdestroy.io/domain/vote-printr.money/) | 2026-06-19 | Unknown | NICENIC | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .money registrations; first .money report 2025-08-10.

Canonical: https://phishdestroy.io/tld/money/