# Phishing domains under .si

.si accounts for 28 of the 224,866 domains in the PhishDestroy database (0.01%), with 3 new ones in the last 30 days. The most impersonated brand under .si is Uphold. 19 were online at the last check and 3 have a confirmed takedown.

28Reported .si domains

0.01%Share of PhishDestroy reports

3Last 30 days

3Confirmed takedowns

## Detections per month

.si phishing domains detected per month: 28 from 2025-11 to 2026-10; peak 6.

## Brands and registrars

### Impersonated brands

- [Uphold](https://phishdestroy.io/brand/uphold/)2
- [Coinbase](https://phishdestroy.io/brand/coinbase/)2
- [Google](https://phishdestroy.io/brand/google/)2
- [Phantom](https://phishdestroy.io/brand/phantom/)2
- [WhatsApp](https://phishdestroy.io/brand/whatsapp/)1
- [Aave](https://phishdestroy.io/brand/aave/)1
- [Solana](https://phishdestroy.io/brand/solana/)1
- [Atomic Wallet](https://phishdestroy.io/brand/atomic-wallet/)1

### Registrars

- [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)7
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)5
- KABI d.o.o3
- [NETIM](https://phishdestroy.io/registrar/netim/)3
- Openprovider2
- A1 Slovenija, d. d1
- Webtasy, d.o.o1
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)1

## Latest .si phishing domains

The 28 most recently detected .si domains
Domain | First detected | Status at last check | Registrar | 
[ponsvalley.si](https://phishdestroy.io/domain/ponsvalley.si/) | 2026-10-07 | Online | Dynadot | 
[artificialsuperintelligencealliance.si](https://phishdestroy.io/domain/artificialsuperintelligencealliance.si/) | 2026-10-07 | Online | NETIM | 
[falconfinance.si](https://phishdestroy.io/domain/falconfinance.si/) | 2026-10-07 | Online | NETIM | 
[rainbet-slovenija.si](https://phishdestroy.io/domain/rainbet-slovenija.si/) | 2026-09-17 | Online | Dynadot | 
[rainbetofficial.si](https://phishdestroy.io/domain/rainbetofficial.si/) | 2026-09-08 | Online | Dynadot | 
[trezoio-started.blogspot.si](https://phishdestroy.io/domain/trezoio-started.blogspot.si/) | 2026-09-01 | Online | MarkMonitor | 
[rainbetslovenija.si](https://phishdestroy.io/domain/rainbetslovenija.si/) | 2026-08-20 | Online | Dynadot | 
[rainbetsplash.si](https://phishdestroy.io/domain/rainbetsplash.si/) | 2026-07-23 | Online | Openprovider | 
[rainbetcasino.si](https://phishdestroy.io/domain/rainbetcasino.si/) | 2026-07-23 | Offline | Openprovider | 
[97ee6.blogspot.si](https://phishdestroy.io/domain/97ee6.blogspot.si/) | 2026-07-21 | Online | Markmonitor | 
[rainbet.si](https://phishdestroy.io/domain/rainbet.si/) | 2026-07-16 | Offline | Dynadot | 
[gateway.beamers.si](https://phishdestroy.io/domain/gateway.beamers.si/) | 2026-07-16 | Online | INWX | 
[termoting.si](https://phishdestroy.io/domain/termoting.si/) | 2026-06-11 | Online | T-2 d.o.o | 
[opensea.si](https://phishdestroy.io/domain/opensea.si/) | 2026-06-01 | Online | Editor d.o.o | 
[atomicwallet.si](https://phishdestroy.io/domain/atomicwallet.si/) | 2026-02-26 | Offline | Netim SARL | 
[yieldscan.si](https://phishdestroy.io/domain/yieldscan.si/) | 2026-02-26 | Offline | NETIM | 
[phantomeextensionn.blogspot.si](https://phishdestroy.io/domain/phantomeextensionn.blogspot.si/) | 2026-02-14 | Online | MarkMonitor | 
[unlswap-v3.si](https://phishdestroy.io/domain/unlswap-v3.si/) | 2026-02-10 | Offline | Dynadot | 
[phantom-wallett.blogspot.si](https://phishdestroy.io/domain/phantom-wallett.blogspot.si/) | 2026-01-31 | Offline | MarkMonitor | 
[uphold-wallet-io.blogspot.si](https://phishdestroy.io/domain/uphold-wallet-io.blogspot.si/) | 2026-01-24 | Online | MarkMonitor | 
[en-uphold-login-app.blogspot.si](https://phishdestroy.io/domain/en-uphold-login-app.blogspot.si/) | 2026-01-02 | Online | MarkMonitor | 
[packa.si](https://phishdestroy.io/domain/packa.si/) | 2025-12-14 | Taken down | Webtasy, d.o.o | 
[portal.tosama-doo.si](https://phishdestroy.io/domain/portal.tosama-doo.si/) | 2025-12-12 | Offline | KABI d.o.o | 
[modra-zavarovanlica.si](https://phishdestroy.io/domain/modra-zavarovanlica.si/) | 2025-12-12 | Offline | KABI d.o.o | 
[mail.natveh.si](https://phishdestroy.io/domain/mail.natveh.si/) | 2025-12-12 | Taken down | KABI d.o.o | 
[login-coinbase-pro.blogspot.si](https://phishdestroy.io/domain/login-coinbase-pro.blogspot.si/) | 2025-12-10 | Online | MarkMonitor | 
[uphold-loogin.blogspot.si](https://phishdestroy.io/domain/uphold-loogin.blogspot.si/) | 2025-12-01 | Online | MarkMonitor | 
[pay.mojdpd.si](https://phishdestroy.io/domain/pay.mojdpd.si/) | 2025-11-15 | Taken down | A1 Slovenija, d. d | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .si registrations; first .si report 2025-11-15.

Canonical: https://phishdestroy.io/tld/si/