# Phishing domains under .net

.net accounts for 6,705 of the 224,866 domains in the PhishDestroy database (2.98%), with 450 new ones in the last 30 days. The most impersonated brand under .net is Binance. 3,191 were online at the last check and 683 have a confirmed takedown.

6,705Reported .net domains

2.98%Share of PhishDestroy reports

450Last 30 days

683Confirmed takedowns

## Detections per month

.net phishing domains detected per month: 6,144 from 2025-11 to 2026-10; peak 1,254.

## Brands and registrars

### Impersonated brands

- [Binance](https://phishdestroy.io/brand/binance/)205
- [Google](https://phishdestroy.io/brand/google/)153
- [Cloudflare](https://phishdestroy.io/brand/cloudflare/)149
- [MetaMask](https://phishdestroy.io/brand/metamask/)148
- [Moonshot](https://phishdestroy.io/brand/moonshot/)117
- [Ethereum](https://phishdestroy.io/brand/ethereum/)112
- [Kraken](https://phishdestroy.io/brand/kraken/)105
- [Solana](https://phishdestroy.io/brand/solana/)96

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)902
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)888
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)668
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)359
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)357
- [Trustname.com](https://phishdestroy.io/registrar/trustname/)329
- [Key-Systems](https://phishdestroy.io/registrar/key-systems/)257
- [Gname.com](https://phishdestroy.io/registrar/name-com/)254

## Latest .net phishing domains

The 30 most recently detected .net domains
Domain | First detected | Status at last check | Registrar | 
[millenniumstudio.net](https://phishdestroy.io/domain/millenniumstudio.net/) | 2026-10-22 | Online | NICENIC | 
[upload.thenxtsmp.net](https://phishdestroy.io/domain/upload.thenxtsmp.net/) | 2026-10-22 | Online | GoDaddy.com | 
[ethersscan.net](https://phishdestroy.io/domain/ethersscan.net/) | 2026-10-22 | Online | Squarespace Domains | 
[ngersah.net](https://phishdestroy.io/domain/ngersah.net/) | 2026-10-22 | Online | Dominet (HK) | 
[amex.domaintoworkwith.net](https://phishdestroy.io/domain/amex.domaintoworkwith.net/) | 2026-10-22 | Online | Gname.com | 
[apuestasconlicencia.net](https://phishdestroy.io/domain/apuestasconlicencia.net/) | 2026-10-22 | Online | NICENIC | 
[caveau.net](https://phishdestroy.io/domain/caveau.net/) | 2026-10-22 | Online | Global Domain | 
[avenventaur.net](https://phishdestroy.io/domain/avenventaur.net/) | 2026-10-22 | Online | Dynadot | 
[aynitrade.net](https://phishdestroy.io/domain/aynitrade.net/) | 2026-10-22 | Online | Dynadot | 
[awoirencia.net](https://phishdestroy.io/domain/awoirencia.net/) | 2026-10-22 | Online | Dynadot | 
[ayetelkursi.net](https://phishdestroy.io/domain/ayetelkursi.net/) | 2026-10-22 | Online | Squarespace Domains II | 
[axiskern.net](https://phishdestroy.io/domain/axiskern.net/) | 2026-10-22 | Online | Dynadot | 
[avenix-ai.net](https://phishdestroy.io/domain/avenix-ai.net/) | 2026-10-22 | Online | Dynadot | 
[autotradenexus.net](https://phishdestroy.io/domain/autotradenexus.net/) | 2026-10-22 | Online | Dynadot | 
[avatudmarkdex.net](https://phishdestroy.io/domain/avatudmarkdex.net/) | 2026-10-22 | Online | Dynadot | 
[autosurftraffic.net](https://phishdestroy.io/domain/autosurftraffic.net/) | 2026-10-22 | Online | GoDaddy.com | 
[auroravalimanza.net](https://phishdestroy.io/domain/auroravalimanza.net/) | 2026-10-22 | Online | Dynadot | 
[auronixpro.net](https://phishdestroy.io/domain/auronixpro.net/) | 2026-10-22 | Online | Dynadot | 
[aurolvafondenza.net](https://phishdestroy.io/domain/aurolvafondenza.net/) | 2026-10-22 | Online | Dynadot | 
[auriveocapital.net](https://phishdestroy.io/domain/auriveocapital.net/) | 2026-10-22 | Online | Dynadot | 
[aurextradeai.net](https://phishdestroy.io/domain/aurextradeai.net/) | 2026-10-22 | Online | Dynadot | 
[aurentixia.net](https://phishdestroy.io/domain/aurentixia.net/) | 2026-10-22 | Online | Dynadot | 
[automindmy.net](https://phishdestroy.io/domain/automindmy.net/) | 2026-10-22 | Online | Dynadot | 
[austranovaai.net](https://phishdestroy.io/domain/austranovaai.net/) | 2026-10-22 | Online | Dynadot | 
[australfondania.net](https://phishdestroy.io/domain/australfondania.net/) | 2026-10-22 | Online | Dynadot | 
[ausranaudekta.net](https://phishdestroy.io/domain/ausranaudekta.net/) | 2026-10-22 | Online | Dynadot | 
[ausdefencex.net](https://phishdestroy.io/domain/ausdefencex.net/) | 2026-10-22 | Online | Dynadot | 
[aurvaxcore82.net](https://phishdestroy.io/domain/aurvaxcore82.net/) | 2026-10-22 | Online | Dynadot | 
[aurorawealthai.net](https://phishdestroy.io/domain/aurorawealthai.net/) | 2026-10-22 | Online | Dynadot | 
[aurorarendivo.net](https://phishdestroy.io/domain/aurorarendivo.net/) | 2026-10-22 | Online | Dynadot | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .net registrations; first .net report 2024-03-20.

Canonical: https://phishdestroy.io/tld/net/