Phishing domains under .services

.services accounts for 37 of the 224,866 domains in the PhishDestroy database (0.02%), with 1 new ones in the last 30 days. The most impersonated brand under .services is Coinbase. 19 were online at the last check and 1 have a confirmed takedown.

37
Reported .services domains
0.02%
Share of PhishDestroy reports
1
Last 30 days
1
Confirmed takedowns

Detections per month

2025-11: 02025-12: 22026-01: 32026-02: 42026-03: 52026-04: 32026-05: 22026-06: 42026-07: 52026-08: 12026-09: 32026-10: 0
.services phishing domains detected per month: 32 from 2025-11 to 2026-10; peak 5.

Brands and registrars

Impersonated brands

  1. Coinbase2
  2. MetaMask2
  3. Microsoft2
  4. Google2
  5. AMLBot1
  6. Blockchain.com1
  7. Aave1
  8. ["solana"]1

Registrars

  1. GoDaddy.com12
  2. Dynadot3
  3. NameCheap2
  4. HOSTINGER operations2
  5. eNom1
  6. Cloudflare1
  7. DIGITALOCEAN-167-71-0-0 (ASN: 14061)1
  8. ENOM1

Latest .services phishing domains

The 30 most recently detected .services domains
DomainFirst detectedStatus at last checkRegistrar
polska.services2026-09-22OnlineGoDaddy.com
bulksms.services2026-09-07OnlineGoDaddy.com
phantom-app.services2026-09-02OnlineDynadot
btcmix.services2026-08-29OnlineGandi
dev.ronin-wallet-website.axieinfinity.services2026-07-28OnlineCloudflare
cryptocointrade.services2026-07-27OfflineNameSilo
pipelife.services2026-07-27OnlineIONOS SE
mobile.quilter-ltd.services2026-07-02OnlineSpaceship
docupdate.services2026-07-01OnlineNameCheap
premio.services2026-06-13OfflineGoDaddy.com
fifa-com.services2026-06-12OfflineGoDaddy.com
rnicrosoft-support.human-resources.services2026-06-10OnlineDynadot
basesupport.services2026-06-09OfflineHostinger Operations
verifyusdt.services2026-05-30OnlineGoDaddy.com
ddos-for-hire.services2026-05-01UnknownNICENIC
support.itdepartment.services2026-04-18OnlineDynadot
pb-consult.services2026-04-10OnlineGoDaddy.com
qantaspoints.services2026-04-10OfflineGoDaddy.com
hyperliquid.services2026-03-28OfflineWeb Commerce Communications dba WebNic.c
wacheck.services2026-03-18OnlineGoDaddy.com
facedook.services2026-03-10Offline—
secure-link.services2026-03-06OnlineGoDaddy.com
smtp-ip.services2026-03-04OfflineFastvps.ee
multidataapi.services2026-02-26OfflineGlobal Domain
tronpayment.services2026-02-26OfflineRegery.com
defender.services2026-02-14OfflineHOSTINGER operations
approvedexperiences.services2026-02-11OnlineGoDaddy.com
login-microsoftonline.zentrale.services2026-01-23OfflineKey-Systems
com-en-us.services2026-01-20OnlineDynadot
sendusdt.services2026-01-02OnlineGoDaddy.com

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .services registrations; first .services report 2025-08-07.