# Phishing domains under .services

.services accounts for 37 of the 224,866 domains in the PhishDestroy database (0.02%), with 1 new ones in the last 30 days. The most impersonated brand under .services is Coinbase. 19 were online at the last check and 1 have a confirmed takedown.

37Reported .services domains

0.02%Share of PhishDestroy reports

1Last 30 days

1Confirmed takedowns

## Detections per month

.services phishing domains detected per month: 32 from 2025-11 to 2026-10; peak 5.

## Brands and registrars

### Impersonated brands

- [Coinbase](https://phishdestroy.io/brand/coinbase/)2
- [MetaMask](https://phishdestroy.io/brand/metamask/)2
- [Microsoft](https://phishdestroy.io/brand/microsoft/)2
- [Google](https://phishdestroy.io/brand/google/)2
- [AMLBot](https://phishdestroy.io/brand/amlbot/)1
- [Blockchain.com](https://phishdestroy.io/brand/blockchain-com/)1
- [Aave](https://phishdestroy.io/brand/aave/)1
- [["solana"]](https://phishdestroy.io/brand/solana/)1

### Registrars

- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)12
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)3
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)2
- [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)2
- [eNom](https://phishdestroy.io/registrar/enom/)1
- Cloudflare1
- DIGITALOCEAN-167-71-0-0 (ASN: 14061)1
- [ENOM](https://phishdestroy.io/registrar/enom/)1

## Latest .services phishing domains

The 30 most recently detected .services domains
Domain | First detected | Status at last check | Registrar | 
[polska.services](https://phishdestroy.io/domain/polska.services/) | 2026-09-22 | Online | GoDaddy.com | 
[bulksms.services](https://phishdestroy.io/domain/bulksms.services/) | 2026-09-07 | Online | GoDaddy.com | 
[phantom-app.services](https://phishdestroy.io/domain/phantom-app.services/) | 2026-09-02 | Online | Dynadot | 
[btcmix.services](https://phishdestroy.io/domain/btcmix.services/) | 2026-08-29 | Online | Gandi | 
[dev.ronin-wallet-website.axieinfinity.services](https://phishdestroy.io/domain/dev.ronin-wallet-website.axieinfinity.services/) | 2026-07-28 | Online | Cloudflare | 
[cryptocointrade.services](https://phishdestroy.io/domain/cryptocointrade.services/) | 2026-07-27 | Offline | NameSilo | 
[pipelife.services](https://phishdestroy.io/domain/pipelife.services/) | 2026-07-27 | Online | IONOS SE | 
[mobile.quilter-ltd.services](https://phishdestroy.io/domain/mobile.quilter-ltd.services/) | 2026-07-02 | Online | Spaceship | 
[docupdate.services](https://phishdestroy.io/domain/docupdate.services/) | 2026-07-01 | Online | NameCheap | 
[premio.services](https://phishdestroy.io/domain/premio.services/) | 2026-06-13 | Offline | GoDaddy.com | 
[fifa-com.services](https://phishdestroy.io/domain/fifa-com.services/) | 2026-06-12 | Offline | GoDaddy.com | 
[rnicrosoft-support.human-resources.services](https://phishdestroy.io/domain/rnicrosoft-support.human-resources.services/) | 2026-06-10 | Online | Dynadot | 
[basesupport.services](https://phishdestroy.io/domain/basesupport.services/) | 2026-06-09 | Offline | Hostinger Operations | 
[verifyusdt.services](https://phishdestroy.io/domain/verifyusdt.services/) | 2026-05-30 | Online | GoDaddy.com | 
[ddos-for-hire.services](https://phishdestroy.io/domain/ddos-for-hire.services/) | 2026-05-01 | Unknown | NICENIC | 
[support.itdepartment.services](https://phishdestroy.io/domain/support.itdepartment.services/) | 2026-04-18 | Online | Dynadot | 
[pb-consult.services](https://phishdestroy.io/domain/pb-consult.services/) | 2026-04-10 | Online | GoDaddy.com | 
[qantaspoints.services](https://phishdestroy.io/domain/qantaspoints.services/) | 2026-04-10 | Offline | GoDaddy.com | 
[hyperliquid.services](https://phishdestroy.io/domain/hyperliquid.services/) | 2026-03-28 | Offline | Web Commerce Communications dba WebNic.c | 
[wacheck.services](https://phishdestroy.io/domain/wacheck.services/) | 2026-03-18 | Online | GoDaddy.com | 
[facedook.services](https://phishdestroy.io/domain/facedook.services/) | 2026-03-10 | Offline | — | 
[secure-link.services](https://phishdestroy.io/domain/secure-link.services/) | 2026-03-06 | Online | GoDaddy.com | 
[smtp-ip.services](https://phishdestroy.io/domain/smtp-ip.services/) | 2026-03-04 | Offline | Fastvps.ee | 
[multidataapi.services](https://phishdestroy.io/domain/multidataapi.services/) | 2026-02-26 | Offline | Global Domain | 
[tronpayment.services](https://phishdestroy.io/domain/tronpayment.services/) | 2026-02-26 | Offline | Regery.com | 
[defender.services](https://phishdestroy.io/domain/defender.services/) | 2026-02-14 | Offline | HOSTINGER operations | 
[approvedexperiences.services](https://phishdestroy.io/domain/approvedexperiences.services/) | 2026-02-11 | Online | GoDaddy.com | 
[login-microsoftonline.zentrale.services](https://phishdestroy.io/domain/login-microsoftonline.zentrale.services/) | 2026-01-23 | Offline | Key-Systems | 
[com-en-us.services](https://phishdestroy.io/domain/com-en-us.services/) | 2026-01-20 | Online | Dynadot | 
[sendusdt.services](https://phishdestroy.io/domain/sendusdt.services/) | 2026-01-02 | Online | GoDaddy.com | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .services registrations; first .services report 2025-08-07.

Canonical: https://phishdestroy.io/tld/services/