Phishing domains under .sale

.sale accounts for 79 of the 224,866 domains in the PhishDestroy database (0.04%), with 1 new ones in the last 30 days. The most impersonated brand under .sale is Binance. 31 were online at the last check and 12 have a confirmed takedown.

79
Reported .sale domains
0.04%
Share of PhishDestroy reports
1
Last 30 days
12
Confirmed takedowns

Detections per month

2025-11: 32025-12: 32026-01: 42026-02: 222026-03: 112026-04: 32026-05: 12026-06: 72026-07: 42026-08: 52026-09: 22026-10: 1
.sale phishing domains detected per month: 66 from 2025-11 to 2026-10; peak 22.

Brands and registrars

Impersonated brands

  1. Binance5
  2. Raydium3
  3. Coinbase2
  4. Bitget2
  5. Microsoft1
  6. Solflare1
  7. Ethereum1
  8. Ethereum1

Registrars

  1. Global Domain16
  2. NICENIC15
  3. NiceNIC14
  4. NameSilo8
  5. Cloudflare5
  6. Tucows Domains3
  7. Dynadot3
  8. GNAME.COM2

Latest .sale phishing domains

The 30 most recently detected .sale domains
DomainFirst detectedStatus at last checkRegistrar
app-atleta.sale2026-10-19OnlineNICENIC
alon.sale2026-09-17OnlineGlobal Domain
alonmeme-pre.sale2026-09-07OnlineGlobal Domain
kaffeeoutlet.sale2026-08-30OfflineGlobal Domain
trust-wallet.sale2026-08-24OfflinePublicDomainRegistry.com
khm.sale2026-08-13OnlineGNAME.COM
sunway.sale2026-08-10OfflineGlobal Domain
alon-pre.sale2026-08-05OfflineGlobal Domain
couponfollow.sale2026-07-26OnlineNICENIC
ozak-ai.sale2026-07-26OnlineNICENIC
cshop.sale2026-07-13OnlineNICENIC
upgrader.sale2026-07-03OnlineNICENIC
getroyalspin.sale2026-06-29UnknownNICENIC
bonkcoin.sale2026-06-24OnlineGlobal Domain
truth.sale2026-06-19OnlineNICENIC
dannys-auto.sale2026-06-13OnlineNICENIC
fifaworldcup26.sale2026-06-12OfflineGlobal Domain
spcxmeme.sale2026-06-03Taken downGlobal Domain
fifa.sale2026-06-01OfflineGNAME.COM
amlbot.sale2026-05-13OfflineGlobal Domain
steroidwarehouse.sale2026-04-28OnlineTrustname.com
usdtflashsoftware.sale2026-04-07UnknownNICENIC
usdtflashsupplier.sale2026-04-07OfflineDynadot
fuel.sale2026-03-28OnlineGoDaddy.com
exovum.sale2026-03-28UnknownNICENIC
rvardun.sale2026-03-28OnlineNICENIC
kvadden.sale2026-03-28OnlineNICENIC
rovaren.sale2026-03-28OfflineNICENIC
kwarden.sale2026-03-28OfflineNICENIC
flashusdtsoftware.sale2026-03-25UnknownNICENIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .sale registrations; first .sale report 2025-08-11.