Phishing domains under .ph

.ph accounts for 39 of the 224,866 domains in the PhishDestroy database (0.02%), with 7 new ones in the last 30 days. The most impersonated brand under .ph is Bank of America. 36 were online at the last check and 5 have a confirmed takedown.

39
Reported .ph domains
0.02%
Share of PhishDestroy reports
7
Last 30 days
5
Confirmed takedowns

Detections per month

2025-11: 32025-12: 02026-01: 12026-02: 22026-03: 12026-04: 02026-05: 12026-06: 12026-07: 22026-08: 72026-09: 142026-10: 3
.ph phishing domains detected per month: 35 from 2025-11 to 2026-10; peak 14.

Brands and registrars

Impersonated brands

  1. Bank of America9
  2. Coinbase3
  3. Ankr1
  4. Jupiter1
  5. Zelle1
  6. Chase1
  7. Ethereum1
  8. PayPal1

Registrars

  1. Cloudflare2
  2. NFORCE_ENTERTAINMENT (ASN: 43350)1
  3. NET-172-93-103-96-29 (ASN: 23470)1
  4. NL-LEASEWEB-20120124 (ASN: 60781)1
  5. HGBLOCK-4 (ASN: 19871)1
  6. Dot.ph1

Latest .ph phishing domains

The 30 most recently detected .ph domains
DomainFirst detectedStatus at last checkRegistrar
spup.edu.ph2026-10-14Online—
juliesbakeshop.com.ph2026-10-10Online—
aeonluxe.com.ph2026-10-07Online—
xn--bspl-o34a.ph2026-09-25Online—
kraken-zerkalo-darknet.ph2026-09-25Online—
rasp-dynamic-bankofamerica.ph2026-09-24Online—
monogr.ph2026-09-23Online—
bankofamericapay.ph2026-09-12Online—
bankofamericaunlocked.ph2026-09-12Online—
bankofamericagirl.ph2026-09-10Online—
connect-bankofamerica.ph2026-09-09Online—
bankofamericaclaimsfraud.ph2026-09-09Online—
bankofamericastockquotes.ph2026-09-09Online—
xn--bspl-3gc.ph2026-09-08Online—
phrainbet.ph2026-09-08Online—
bankofamerica-com-update-login.ph2026-09-03Online—
bankofamericaemployee.ph2026-09-02Online—
bc-game.net.ph2026-08-28Online—
trezor.wallet.org.ph2026-08-25Online—
phpolymarket.ph2026-08-21Online—
ledger.wallet.org.ph2026-08-19Offline—
design42.ict.ph2026-08-17Offline—
bitfinex-login-online.com.ph2026-08-17Online—
instagram-client-business-service-support.ph2026-08-02Online—
sylfootwear.ph2026-07-27Online—
panalobet.ph2026-07-16Online—
stake.com.ph2026-06-09Online—
digi11.ict.ph2026-05-19Offline—
tronlink.ph2026-03-19Online—
dramacool.com.ph2026-02-26Taken down—

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .ph registrations; first .ph report 2025-09-01.