# Phishing domains under .st

.st accounts for 74 of the 224,866 domains in the PhishDestroy database (0.03%), with 10 new ones in the last 30 days. The most impersonated brand under .st is MetaMask. 53 were online at the last check and 3 have a confirmed takedown.

74Reported .st domains

0.03%Share of PhishDestroy reports

10Last 30 days

3Confirmed takedowns

## Detections per month

.st phishing domains detected per month: 73 from 2025-11 to 2026-10; peak 20.

## Brands and registrars

### Impersonated brands

- [MetaMask](https://phishdestroy.io/brand/metamask/)4
- [Google](https://phishdestroy.io/brand/google/)3
- [Roblox](https://phishdestroy.io/brand/roblox/)3
- [Minecraft](https://phishdestroy.io/brand/minecraft/)3
- [Revolut](https://phishdestroy.io/brand/revolut/)2
- [Roblox](https://phishdestroy.io/brand/roblox/)2
- [Amazon](https://phishdestroy.io/brand/amazon/)2
- [Coinbase](https://phishdestroy.io/brand/coinbase/)2

### Registrars

- ST Registry26
- StanCo and Istanco9
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)4
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)4
- NordNIC3
- IncogNET3
- [Gname](https://phishdestroy.io/registrar/gname/)3
- Sirdio3

## Latest .st phishing domains

The 30 most recently detected .st domains
Domain | First detected | Status at last check | Registrar | 
[ruxup.st](https://phishdestroy.io/domain/ruxup.st/) | 2026-10-12 | Online | Dynadot | 
[68932.st](https://phishdestroy.io/domain/68932.st/) | 2026-10-04 | Online | Dynadot | 
[opsecmod.st](https://phishdestroy.io/domain/opsecmod.st/) | 2026-09-29 | Online | ST Registry | 
[prestigeclient.st](https://phishdestroy.io/domain/prestigeclient.st/) | 2026-09-29 | Online | ST Registry | 
[odinclient.st](https://phishdestroy.io/domain/odinclient.st/) | 2026-09-29 | Online | ST Registry | 
[wagyuswap.st](https://phishdestroy.io/domain/wagyuswap.st/) | 2026-09-29 | Online | ST Registry | 
[prozone.st](https://phishdestroy.io/domain/prozone.st/) | 2026-09-28 | Online | — | 
[redotpay.st](https://phishdestroy.io/domain/redotpay.st/) | 2026-09-25 | Online | IncogNET | 
[bs2best.st](https://phishdestroy.io/domain/bs2best.st/) | 2026-09-25 | Online | NETIM | 
[pancakeswap.st](https://phishdestroy.io/domain/pancakeswap.st/) | 2026-09-23 | Online | ST Registry | 
[privatestress.st](https://phishdestroy.io/domain/privatestress.st/) | 2026-09-22 | Online | Sirdio | 
[mao-stress.st](https://phishdestroy.io/domain/mao-stress.st/) | 2026-09-12 | Online | ST Registry | 
[cryptomixer.st](https://phishdestroy.io/domain/cryptomixer.st/) | 2026-09-10 | Offline | Dynadot | 
[zopzstress.st](https://phishdestroy.io/domain/zopzstress.st/) | 2026-09-06 | Online | — | 
[slon12.st](https://phishdestroy.io/domain/slon12.st/) | 2026-09-03 | Offline | — | 
[trippi.st](https://phishdestroy.io/domain/trippi.st/) | 2026-08-31 | Online | NordNIC | 
[slon13.st](https://phishdestroy.io/domain/slon13.st/) | 2026-08-31 | Offline | — | 
[aml.st](https://phishdestroy.io/domain/aml.st/) | 2026-08-24 | Unknown | NiceNIC | 
[rainbet.st](https://phishdestroy.io/domain/rainbet.st/) | 2026-08-18 | Online | Dynadot | 
[dreams-stresser.st](https://phishdestroy.io/domain/dreams-stresser.st/) | 2026-08-14 | Online | StanCo and Istanco | 
[staticstress.st](https://phishdestroy.io/domain/staticstress.st/) | 2026-08-14 | Online | Sirdio | 
[gorillastress.st](https://phishdestroy.io/domain/gorillastress.st/) | 2026-08-14 | Online | Sirdio | 
[kimstress.st](https://phishdestroy.io/domain/kimstress.st/) | 2026-08-13 | Online | StanCo and Istanco | 
[dstat.st](https://phishdestroy.io/domain/dstat.st/) | 2026-08-13 | Online | ST Registry | 
[candystress.st](https://phishdestroy.io/domain/candystress.st/) | 2026-08-13 | Online | StanCo and Istanco | 
[government.st](https://phishdestroy.io/domain/government.st/) | 2026-08-11 | Online | ST Registry | 
[slammed.st](https://phishdestroy.io/domain/slammed.st/) | 2026-08-11 | Online | ST Registry | 
[stresse.st](https://phishdestroy.io/domain/stresse.st/) | 2026-08-11 | Online | ST Registry | 
[overload.st](https://phishdestroy.io/domain/overload.st/) | 2026-08-10 | Online | ST Registry | 
[stresser.st](https://phishdestroy.io/domain/stresser.st/) | 2026-08-10 | Online | NiceNIC | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .st registrations; first .st report 2025-10-22.

Canonical: https://phishdestroy.io/tld/st/