Phishing domains under .onl

.onl accounts for 76 of the 224,866 domains in the PhishDestroy database (0.03%), with 1 new ones in the last 30 days. The most impersonated brand under .onl is SushiSwap. 28 were online at the last check and 7 have a confirmed takedown.

76
Reported .onl domains
0.03%
Share of PhishDestroy reports
1
Last 30 days
7
Confirmed takedowns

Detections per month

2025-11: 52025-12: 162026-01: 62026-02: 102026-03: 32026-04: 42026-05: 02026-06: 22026-07: 12026-08: 22026-09: 42026-10: 1
.onl phishing domains detected per month: 54 from 2025-11 to 2026-10; peak 16.

Brands and registrars

Impersonated brands

  1. SushiSwap21
  2. Google20
  3. Fake Staking2
  4. Coinbase1
  5. Raydium1
  6. Bank of america1
  7. Ethereum1
  8. Instagram1

Registrars

  1. Dynadot42
  2. Dynadot12
  3. NameSilo5
  4. Porkbun3
  5. Gname.com2
  6. Cloudflare1
  7. Amazon Registrar1
  8. NameCheap1

Latest .onl phishing domains

The 30 most recently detected .onl domains
DomainFirst detectedStatus at last checkRegistrar
hvvl.onl2026-10-01OnlineDynadot
yunk-frerink.alc.onl2026-09-17OnlinePorkbun
cityprimetrustpay.onl2026-09-11OnlineDynadot
fpb.onl2026-09-11OnlineDynadot
cityprimetrustpay.onl.qylo.onl2026-09-11OfflineDYNADOT
marsmarket.onl2026-08-31OnlineDynadot
unijoin.onl2026-08-28OnlineDynadot
naga99.onl2026-07-03OnlineDynadot
tr.madridbet-gir.onl2026-06-23OfflineDynadot
darkmattermarket.onl2026-06-15OnlineDynadot
airdropsalert.onl2026-04-22OnlineDynadot
tokenpocket.onl2026-04-15Taken downDynadot
s.safebank.onl2026-04-05OfflineMarkMonitor
minecraftapk.onl2026-04-03OnlineNameCheap
solanapay.onl2026-03-28OnlineDynadot
testturing.tur.onl2026-03-07OnlineAmazon Registrar
bypayco-be.onl2026-03-06OnlineNameSilo
zyncoin.sushi.onl2026-02-26Offline—
dogelon.sushi.onl2026-02-26Offline—
nearprotocol.sushi.onl2026-02-26Offline—
jweb-baseiinetmx.onl2026-02-26Offline—
stakingsrewards.onl2026-02-26OfflineDynadot
wweb-baseiinetmx.onl2026-02-26Offline—
vitadao.sushi.onl2026-02-26Offline—
aml.onl2026-02-26Offline—
tornadocash.onl2026-02-26OfflinePorkbun
lbank.onl2026-02-24OfflineGname.com
doge.sushi-cc.onl2026-01-25OfflineDynadot
astr.stakingsrewards.onl2026-01-20OfflineDynadot
airdropalerts.onl2026-01-04OfflineDynadot

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .onl registrations; first .onl report 2025-08-11.