# Phishing domains under .one

.one accounts for 464 of the 224,866 domains in the PhishDestroy database (0.21%), with 15 new ones in the last 30 days. The most impersonated brand under .one is Google. 174 were online at the last check and 46 have a confirmed takedown.

464Reported .one domains

0.21%Share of PhishDestroy reports

15Last 30 days

46Confirmed takedowns

## Detections per month

.one phishing domains detected per month: 435 from 2025-11 to 2026-10; peak 99.

## Brands and registrars

### Impersonated brands

- [Google](https://phishdestroy.io/brand/google/)19
- [Fidelity](https://phishdestroy.io/brand/fidelity/)13
- [Solana](https://phishdestroy.io/brand/solana/)10
- [SushiSwap](https://phishdestroy.io/brand/sushiswap/)10
- [Epicgames](https://phishdestroy.io/brand/epicgames/)9
- [MEXC](https://phishdestroy.io/brand/mexc/)8
- Epic Games7
- [Coinbase](https://phishdestroy.io/brand/coinbase/)6

### Registrars

- [Gname.com](https://phishdestroy.io/registrar/name-com/)94
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)86
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)75
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)67
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)33
- [DYNADOT](https://phishdestroy.io/registrar/dynadot/)15
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)12
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)11

## Latest .one phishing domains

The 30 most recently detected .one domains
Domain | First detected | Status at last check | Registrar | 
[multiplicity.one](https://phishdestroy.io/domain/multiplicity.one/) | 2026-10-21 | Offline | PublicDomainRegistry.com | 
[claim.strknetwbtc.one](https://phishdestroy.io/domain/claim.strknetwbtc.one/) | 2026-10-20 | Online | NameSilo | 
[musor.one](https://phishdestroy.io/domain/musor.one/) | 2026-10-20 | Online | Dynadot | 
[musordrop.one](https://phishdestroy.io/domain/musordrop.one/) | 2026-10-20 | Online | NameSilo | 
[docs-google.one](https://phishdestroy.io/domain/docs-google.one/) | 2026-10-19 | Online | Porkbun | 
[wgkkx.one](https://phishdestroy.io/domain/wgkkx.one/) | 2026-10-11 | Online | Gname.com | 
[gov-zjgy.one](https://phishdestroy.io/domain/gov-zjgy.one/) | 2026-10-11 | Online | Dynadot | 
[gov-rkiw.one](https://phishdestroy.io/domain/gov-rkiw.one/) | 2026-10-11 | Online | Dynadot | 
[gov-qbjo.one](https://phishdestroy.io/domain/gov-qbjo.one/) | 2026-10-11 | Online | Dynadot | 
[gov-dfkg.one](https://phishdestroy.io/domain/gov-dfkg.one/) | 2026-10-11 | Online | Dynadot | 
[gov-asnx.one](https://phishdestroy.io/domain/gov-asnx.one/) | 2026-10-11 | Online | Dynadot | 
[dezentracore.one](https://phishdestroy.io/domain/dezentracore.one/) | 2026-10-09 | Online | Gname.com | 
[ellevesta.one](https://phishdestroy.io/domain/ellevesta.one/) | 2026-10-09 | Online | Gname.com | 
[worldid.one](https://phishdestroy.io/domain/worldid.one/) | 2026-10-04 | Online | Gname.com | 
[graniteassets.one](https://phishdestroy.io/domain/graniteassets.one/) | 2026-10-01 | Online | Gname.com | 
[winrar.one](https://phishdestroy.io/domain/winrar.one/) | 2026-09-19 | Online | Name.com | 
[ddjys.one](https://phishdestroy.io/domain/ddjys.one/) | 2026-09-15 | Online | Gname.com | 
[trezor-clear-signing.platform-security-logins.one](https://phishdestroy.io/domain/trezor-clear-signing.platform-security-logins.one/) | 2026-09-14 | Offline | Gname.com | 
[ponsfamily.one](https://phishdestroy.io/domain/ponsfamily.one/) | 2026-09-11 | Online | Dynadot | 
[aniakruk.sidestep.one](https://phishdestroy.io/domain/aniakruk.sidestep.one/) | 2026-09-09 | Online | Gname.com | 
[ksauruvisit.one](https://phishdestroy.io/domain/ksauruvisit.one/) | 2026-09-01 | Offline | NameSilo | 
[fortison.one](https://phishdestroy.io/domain/fortison.one/) | 2026-08-31 | Online | Dynadot | 
[fortinfo.one](https://phishdestroy.io/domain/fortinfo.one/) | 2026-08-31 | Offline | Dynadot | 
[guildcast.one](https://phishdestroy.io/domain/guildcast.one/) | 2026-08-31 | Offline | NameSilo | 
[screenconnect-evite.one](https://phishdestroy.io/domain/screenconnect-evite.one/) | 2026-08-31 | Offline | NameSilo | 
[11party4us.one](https://phishdestroy.io/domain/11party4us.one/) | 2026-08-31 | Offline | NameSilo | 
[fnskins.one](https://phishdestroy.io/domain/fnskins.one/) | 2026-08-30 | Offline | Gname.com | 
[fortscan.one](https://phishdestroy.io/domain/fortscan.one/) | 2026-08-30 | Online | Dynadot | 
[fortdex.one](https://phishdestroy.io/domain/fortdex.one/) | 2026-08-30 | Offline | Dynadot | 
[fnchecker.one](https://phishdestroy.io/domain/fnchecker.one/) | 2026-08-30 | Offline | Dynadot | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .one registrations; first .one report 2025-08-29.

Canonical: https://phishdestroy.io/tld/one/