Phishing domains under .tools

.tools accounts for 36 of the 224,866 domains in the PhishDestroy database (0.02%), with 2 new ones in the last 30 days. The most impersonated brand under .tools is Solana. 19 were online at the last check and 2 have a confirmed takedown.

36
Reported .tools domains
0.02%
Share of PhishDestroy reports
2
Last 30 days
2
Confirmed takedowns

Detections per month

2025-11: 22025-12: 12026-01: 32026-02: 92026-03: 32026-04: 22026-05: 02026-06: 22026-07: 42026-08: 22026-09: 02026-10: 2
.tools phishing domains detected per month: 30 from 2025-11 to 2026-10; peak 9.

Brands and registrars

Impersonated brands

  1. Solana4
  2. Google3
  3. Ethereum2
  4. Telegram2
  5. Ledger2
  6. Telegram1
  7. Csgo1
  8. Phantom1

Registrars

  1. Cloudflare5
  2. PublicDomainRegistry.com3
  3. Porkbun3
  4. NiceNIC3
  5. NameCheap2
  6. Gandi2
  7. GoDaddy.com2
  8. Hosting Ukraine1

Latest .tools phishing domains

The 30 most recently detected .tools domains
DomainFirst detectedStatus at last checkRegistrar
nulltrace.tools2026-10-09OnlineRegery.com
azure-sync.tools2026-10-07OfflineGoDaddy.com
zerodev.tools2026-08-28OnlinePorkbun
polysniper.tools2026-08-15OnlineGlobal Domain
klas.tools2026-07-27OnlineGandi
raccoons.atlas.burrow.tools2026-07-23OnlineCloudflare
facebook-marketplace-listings.myaddr.tools2026-07-21Offline—
cricfytvapk.tools2026-07-06OnlineRegistrar.eu
go.cevi.tools2026-06-15OnlineKey-Systems
sava0.tools2026-06-14OfflineNameCheap
dmplug.tools2026-04-25OnlineDynadot
ledgercheck.puppy.tools2026-04-21OnlinePorkbun
sneak.tools2026-03-31OfflineGoDaddy.com
solana-incinerator.tools2026-03-28OfflinePublicDomainRegistry.com
sol.incinerator.tools2026-03-27OfflinePublicDomainRegistry.com
bankless.tools2026-02-26Offline—
trololo.tools2026-02-26OnlineNiceNIC
amlguard.tools2026-02-26Offline—
amltracker.tools2026-02-26OfflineNameSilo
pumpify.tools2026-02-26Offline—
checker.linea.tools2026-02-26Offline—
pippin.tools2026-02-26OfflineNiceNIC
checkeigen.byz.tools2026-02-17OnlineNETIM
raydium.tools2026-02-13OnlineNiceNIC
buytrx.tools2026-01-26OfflineTucows Domains
slerf.tools2026-01-24OnlineCloudflare
aaa.slerf.tools2026-01-24OnlineCloudflare
live.ledger.tools2025-12-25OnlineGandi
ares.tools2025-11-20OnlinePorkbun
aml-check.tools2025-11-18OfflineCloudflare

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .tools registrations; first .tools report 2025-07-31.