Phishing domains under .one

.one accounts for 464 of the 224,866 domains in the PhishDestroy database (0.21%), with 15 new ones in the last 30 days. The most impersonated brand under .one is Google. 174 were online at the last check and 46 have a confirmed takedown.

464
Reported .one domains
0.21%
Share of PhishDestroy reports
15
Last 30 days
46
Confirmed takedowns

Detections per month

2025-11: 92025-12: 92026-01: 222026-02: 992026-03: 542026-04: 342026-05: 392026-06: 512026-07: 492026-08: 482026-09: 62026-10: 15
.one phishing domains detected per month: 435 from 2025-11 to 2026-10; peak 99.

Brands and registrars

Impersonated brands

  1. Google19
  2. Fidelity13
  3. Solana10
  4. SushiSwap10
  5. Epicgames9
  6. MEXC8
  7. Epic Games7
  8. Coinbase6

Registrars

  1. Gname.com94
  2. NameSilo86
  3. Dynadot75
  4. Dynadot67
  5. Global Domain33
  6. DYNADOT15
  7. NameCheap12
  8. Spaceship11

Latest .one phishing domains

The 30 most recently detected .one domains
DomainFirst detectedStatus at last checkRegistrar
multiplicity.one2026-10-21OfflinePublicDomainRegistry.com
claim.strknetwbtc.one2026-10-20OnlineNameSilo
musor.one2026-10-20OnlineDynadot
musordrop.one2026-10-20OnlineNameSilo
docs-google.one2026-10-19OnlinePorkbun
wgkkx.one2026-10-11OnlineGname.com
gov-zjgy.one2026-10-11OnlineDynadot
gov-rkiw.one2026-10-11OnlineDynadot
gov-qbjo.one2026-10-11OnlineDynadot
gov-dfkg.one2026-10-11OnlineDynadot
gov-asnx.one2026-10-11OnlineDynadot
dezentracore.one2026-10-09OnlineGname.com
ellevesta.one2026-10-09OnlineGname.com
worldid.one2026-10-04OnlineGname.com
graniteassets.one2026-10-01OnlineGname.com
winrar.one2026-09-19OnlineName.com
ddjys.one2026-09-15OnlineGname.com
trezor-clear-signing.platform-security-logins.one2026-09-14OfflineGname.com
ponsfamily.one2026-09-11OnlineDynadot
aniakruk.sidestep.one2026-09-09OnlineGname.com
ksauruvisit.one2026-09-01OfflineNameSilo
fortison.one2026-08-31OnlineDynadot
fortinfo.one2026-08-31OfflineDynadot
guildcast.one2026-08-31OfflineNameSilo
screenconnect-evite.one2026-08-31OfflineNameSilo
11party4us.one2026-08-31OfflineNameSilo
fnskins.one2026-08-30OfflineGname.com
fortscan.one2026-08-30OnlineDynadot
fortdex.one2026-08-30OfflineDynadot
fnchecker.one2026-08-30OfflineDynadot

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .one registrations; first .one report 2025-08-29.