Phishing domains under .net

.net accounts for 6,705 of the 224,866 domains in the PhishDestroy database (2.98%), with 450 new ones in the last 30 days. The most impersonated brand under .net is Binance. 3,191 were online at the last check and 683 have a confirmed takedown.

6,705
Reported .net domains
2.98%
Share of PhishDestroy reports
450
Last 30 days
683
Confirmed takedowns

Detections per month

2025-11: 3102025-12: 2922026-01: 5602026-02: 12542026-03: 6292026-04: 3552026-05: 1252026-06: 7272026-07: 5752026-08: 5412026-09: 4002026-10: 376
.net phishing domains detected per month: 6,144 from 2025-11 to 2026-10; peak 1,254.

Brands and registrars

Impersonated brands

  1. Binance205
  2. Google153
  3. Cloudflare149
  4. MetaMask148
  5. Moonshot117
  6. Ethereum112
  7. Kraken105
  8. Solana96

Registrars

  1. NiceNIC902
  2. PublicDomainRegistry.com888
  3. NICENIC668
  4. Dynadot359
  5. NameCheap357
  6. Trustname.com329
  7. Key-Systems257
  8. Gname.com254

Latest .net phishing domains

The 30 most recently detected .net domains
DomainFirst detectedStatus at last checkRegistrar
millenniumstudio.net2026-10-22OnlineNICENIC
upload.thenxtsmp.net2026-10-22OnlineGoDaddy.com
ethersscan.net2026-10-22OnlineSquarespace Domains
ngersah.net2026-10-22OnlineDominet (HK)
amex.domaintoworkwith.net2026-10-22OnlineGname.com
apuestasconlicencia.net2026-10-22OnlineNICENIC
caveau.net2026-10-22OnlineGlobal Domain
avenventaur.net2026-10-22OnlineDynadot
aynitrade.net2026-10-22OnlineDynadot
awoirencia.net2026-10-22OnlineDynadot
ayetelkursi.net2026-10-22OnlineSquarespace Domains II
axiskern.net2026-10-22OnlineDynadot
avenix-ai.net2026-10-22OnlineDynadot
autotradenexus.net2026-10-22OnlineDynadot
avatudmarkdex.net2026-10-22OnlineDynadot
autosurftraffic.net2026-10-22OnlineGoDaddy.com
auroravalimanza.net2026-10-22OnlineDynadot
auronixpro.net2026-10-22OnlineDynadot
aurolvafondenza.net2026-10-22OnlineDynadot
auriveocapital.net2026-10-22OnlineDynadot
aurextradeai.net2026-10-22OnlineDynadot
aurentixia.net2026-10-22OnlineDynadot
automindmy.net2026-10-22OnlineDynadot
austranovaai.net2026-10-22OnlineDynadot
australfondania.net2026-10-22OnlineDynadot
ausranaudekta.net2026-10-22OnlineDynadot
ausdefencex.net2026-10-22OnlineDynadot
aurvaxcore82.net2026-10-22OnlineDynadot
aurorawealthai.net2026-10-22OnlineDynadot
aurorarendivo.net2026-10-22OnlineDynadot

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .net registrations; first .net report 2024-03-20.