Phishing domains under .st

.st accounts for 74 of the 224,866 domains in the PhishDestroy database (0.03%), with 10 new ones in the last 30 days. The most impersonated brand under .st is MetaMask. 53 were online at the last check and 3 have a confirmed takedown.

74
Reported .st domains
0.03%
Share of PhishDestroy reports
10
Last 30 days
3
Confirmed takedowns

Detections per month

2025-11: 22025-12: 52026-01: 02026-02: 52026-03: 152026-04: 22026-05: 12026-06: 42026-07: 42026-08: 202026-09: 132026-10: 2
.st phishing domains detected per month: 73 from 2025-11 to 2026-10; peak 20.

Brands and registrars

Registrars

  1. ST Registry26
  2. StanCo and Istanco9
  3. NiceNIC4
  4. Dynadot4
  5. NordNIC3
  6. IncogNET3
  7. Gname3
  8. Sirdio3

Latest .st phishing domains

The 30 most recently detected .st domains
DomainFirst detectedStatus at last checkRegistrar
ruxup.st2026-10-12OnlineDynadot
68932.st2026-10-04OnlineDynadot
opsecmod.st2026-09-29OnlineST Registry
prestigeclient.st2026-09-29OnlineST Registry
odinclient.st2026-09-29OnlineST Registry
wagyuswap.st2026-09-29OnlineST Registry
prozone.st2026-09-28Online—
redotpay.st2026-09-25OnlineIncogNET
bs2best.st2026-09-25OnlineNETIM
pancakeswap.st2026-09-23OnlineST Registry
privatestress.st2026-09-22OnlineSirdio
mao-stress.st2026-09-12OnlineST Registry
cryptomixer.st2026-09-10OfflineDynadot
zopzstress.st2026-09-06Online—
slon12.st2026-09-03Offline—
trippi.st2026-08-31OnlineNordNIC
slon13.st2026-08-31Offline—
aml.st2026-08-24UnknownNiceNIC
rainbet.st2026-08-18OnlineDynadot
dreams-stresser.st2026-08-14OnlineStanCo and Istanco
staticstress.st2026-08-14OnlineSirdio
gorillastress.st2026-08-14OnlineSirdio
kimstress.st2026-08-13OnlineStanCo and Istanco
dstat.st2026-08-13OnlineST Registry
candystress.st2026-08-13OnlineStanCo and Istanco
government.st2026-08-11OnlineST Registry
slammed.st2026-08-11OnlineST Registry
stresse.st2026-08-11OnlineST Registry
overload.st2026-08-10OnlineST Registry
stresser.st2026-08-10OnlineNiceNIC

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .st registrations; first .st report 2025-10-22.