# Phishing domains under .sale

.sale accounts for 79 of the 224,866 domains in the PhishDestroy database (0.04%), with 1 new ones in the last 30 days. The most impersonated brand under .sale is Binance. 31 were online at the last check and 12 have a confirmed takedown.

79Reported .sale domains

0.04%Share of PhishDestroy reports

1Last 30 days

12Confirmed takedowns

## Detections per month

.sale phishing domains detected per month: 66 from 2025-11 to 2026-10; peak 22.

## Brands and registrars

### Impersonated brands

- [Binance](https://phishdestroy.io/brand/binance/)5
- [Raydium](https://phishdestroy.io/brand/raydium/)3
- [Coinbase](https://phishdestroy.io/brand/coinbase/)2
- [Bitget](https://phishdestroy.io/brand/bitget/)2
- [Microsoft](https://phishdestroy.io/brand/microsoft/)1
- [Solflare](https://phishdestroy.io/brand/solflare/)1
- [Ethereum](https://phishdestroy.io/brand/ethereum/)1
- [Ethereum](https://phishdestroy.io/brand/ethereum/)1

### Registrars

- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)16
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)15
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)14
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)8
- Cloudflare5
- [Tucows Domains](https://phishdestroy.io/registrar/tucows/)3
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)3
- [GNAME.COM](https://phishdestroy.io/registrar/name-com/)2

## Latest .sale phishing domains

The 30 most recently detected .sale domains
Domain | First detected | Status at last check | Registrar | 
[app-atleta.sale](https://phishdestroy.io/domain/app-atleta.sale/) | 2026-10-19 | Online | NICENIC | 
[alon.sale](https://phishdestroy.io/domain/alon.sale/) | 2026-09-17 | Online | Global Domain | 
[alonmeme-pre.sale](https://phishdestroy.io/domain/alonmeme-pre.sale/) | 2026-09-07 | Online | Global Domain | 
[kaffeeoutlet.sale](https://phishdestroy.io/domain/kaffeeoutlet.sale/) | 2026-08-30 | Offline | Global Domain | 
[trust-wallet.sale](https://phishdestroy.io/domain/trust-wallet.sale/) | 2026-08-24 | Offline | PublicDomainRegistry.com | 
[khm.sale](https://phishdestroy.io/domain/khm.sale/) | 2026-08-13 | Online | GNAME.COM | 
[sunway.sale](https://phishdestroy.io/domain/sunway.sale/) | 2026-08-10 | Offline | Global Domain | 
[alon-pre.sale](https://phishdestroy.io/domain/alon-pre.sale/) | 2026-08-05 | Offline | Global Domain | 
[couponfollow.sale](https://phishdestroy.io/domain/couponfollow.sale/) | 2026-07-26 | Online | NICENIC | 
[ozak-ai.sale](https://phishdestroy.io/domain/ozak-ai.sale/) | 2026-07-26 | Online | NICENIC | 
[cshop.sale](https://phishdestroy.io/domain/cshop.sale/) | 2026-07-13 | Online | NICENIC | 
[upgrader.sale](https://phishdestroy.io/domain/upgrader.sale/) | 2026-07-03 | Online | NICENIC | 
[getroyalspin.sale](https://phishdestroy.io/domain/getroyalspin.sale/) | 2026-06-29 | Unknown | NICENIC | 
[bonkcoin.sale](https://phishdestroy.io/domain/bonkcoin.sale/) | 2026-06-24 | Online | Global Domain | 
[truth.sale](https://phishdestroy.io/domain/truth.sale/) | 2026-06-19 | Online | NICENIC | 
[dannys-auto.sale](https://phishdestroy.io/domain/dannys-auto.sale/) | 2026-06-13 | Online | NICENIC | 
[fifaworldcup26.sale](https://phishdestroy.io/domain/fifaworldcup26.sale/) | 2026-06-12 | Offline | Global Domain | 
[spcxmeme.sale](https://phishdestroy.io/domain/spcxmeme.sale/) | 2026-06-03 | Taken down | Global Domain | 
[fifa.sale](https://phishdestroy.io/domain/fifa.sale/) | 2026-06-01 | Offline | GNAME.COM | 
[amlbot.sale](https://phishdestroy.io/domain/amlbot.sale/) | 2026-05-13 | Offline | Global Domain | 
[steroidwarehouse.sale](https://phishdestroy.io/domain/steroidwarehouse.sale/) | 2026-04-28 | Online | Trustname.com | 
[usdtflashsoftware.sale](https://phishdestroy.io/domain/usdtflashsoftware.sale/) | 2026-04-07 | Unknown | NICENIC | 
[usdtflashsupplier.sale](https://phishdestroy.io/domain/usdtflashsupplier.sale/) | 2026-04-07 | Offline | Dynadot | 
[fuel.sale](https://phishdestroy.io/domain/fuel.sale/) | 2026-03-28 | Online | GoDaddy.com | 
[exovum.sale](https://phishdestroy.io/domain/exovum.sale/) | 2026-03-28 | Unknown | NICENIC | 
[rvardun.sale](https://phishdestroy.io/domain/rvardun.sale/) | 2026-03-28 | Online | NICENIC | 
[kvadden.sale](https://phishdestroy.io/domain/kvadden.sale/) | 2026-03-28 | Online | NICENIC | 
[rovaren.sale](https://phishdestroy.io/domain/rovaren.sale/) | 2026-03-28 | Offline | NICENIC | 
[kwarden.sale](https://phishdestroy.io/domain/kwarden.sale/) | 2026-03-28 | Offline | NICENIC | 
[flashusdtsoftware.sale](https://phishdestroy.io/domain/flashusdtsoftware.sale/) | 2026-03-25 | Unknown | NICENIC | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .sale registrations; first .sale report 2025-08-11.

Canonical: https://phishdestroy.io/tld/sale/