# Phishing domains under .tools

.tools accounts for 36 of the 224,866 domains in the PhishDestroy database (0.02%), with 2 new ones in the last 30 days. The most impersonated brand under .tools is Solana. 19 were online at the last check and 2 have a confirmed takedown.

36Reported .tools domains

0.02%Share of PhishDestroy reports

2Last 30 days

2Confirmed takedowns

## Detections per month

.tools phishing domains detected per month: 30 from 2025-11 to 2026-10; peak 9.

## Brands and registrars

### Impersonated brands

- [Solana](https://phishdestroy.io/brand/solana/)4
- [Google](https://phishdestroy.io/brand/google/)3
- [Ethereum](https://phishdestroy.io/brand/ethereum/)2
- [Telegram](https://phishdestroy.io/brand/telegram/)2
- [Ledger](https://phishdestroy.io/brand/ledger/)2
- [Telegram](https://phishdestroy.io/brand/telegram/)1
- [Csgo](https://phishdestroy.io/brand/csgo/)1
- [Phantom](https://phishdestroy.io/brand/phantom/)1

### Registrars

- Cloudflare5
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)3
- [Porkbun](https://phishdestroy.io/registrar/porkbun/)3
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)3
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)2
- [Gandi](https://phishdestroy.io/registrar/gandi-sas/)2
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2
- Hosting Ukraine1

## Latest .tools phishing domains

The 30 most recently detected .tools domains
Domain | First detected | Status at last check | Registrar | 
[nulltrace.tools](https://phishdestroy.io/domain/nulltrace.tools/) | 2026-10-09 | Online | Regery.com | 
[azure-sync.tools](https://phishdestroy.io/domain/azure-sync.tools/) | 2026-10-07 | Offline | GoDaddy.com | 
[zerodev.tools](https://phishdestroy.io/domain/zerodev.tools/) | 2026-08-28 | Online | Porkbun | 
[polysniper.tools](https://phishdestroy.io/domain/polysniper.tools/) | 2026-08-15 | Online | Global Domain | 
[klas.tools](https://phishdestroy.io/domain/klas.tools/) | 2026-07-27 | Online | Gandi | 
[raccoons.atlas.burrow.tools](https://phishdestroy.io/domain/raccoons.atlas.burrow.tools/) | 2026-07-23 | Online | Cloudflare | 
[facebook-marketplace-listings.myaddr.tools](https://phishdestroy.io/domain/facebook-marketplace-listings.myaddr.tools/) | 2026-07-21 | Offline | — | 
[cricfytvapk.tools](https://phishdestroy.io/domain/cricfytvapk.tools/) | 2026-07-06 | Online | Registrar.eu | 
[go.cevi.tools](https://phishdestroy.io/domain/go.cevi.tools/) | 2026-06-15 | Online | Key-Systems | 
[sava0.tools](https://phishdestroy.io/domain/sava0.tools/) | 2026-06-14 | Offline | NameCheap | 
[dmplug.tools](https://phishdestroy.io/domain/dmplug.tools/) | 2026-04-25 | Online | Dynadot | 
[ledgercheck.puppy.tools](https://phishdestroy.io/domain/ledgercheck.puppy.tools/) | 2026-04-21 | Online | Porkbun | 
[sneak.tools](https://phishdestroy.io/domain/sneak.tools/) | 2026-03-31 | Offline | GoDaddy.com | 
[solana-incinerator.tools](https://phishdestroy.io/domain/solana-incinerator.tools/) | 2026-03-28 | Offline | PublicDomainRegistry.com | 
[sol.incinerator.tools](https://phishdestroy.io/domain/sol.incinerator.tools/) | 2026-03-27 | Offline | PublicDomainRegistry.com | 
[bankless.tools](https://phishdestroy.io/domain/bankless.tools/) | 2026-02-26 | Offline | — | 
[trololo.tools](https://phishdestroy.io/domain/trololo.tools/) | 2026-02-26 | Online | NiceNIC | 
[amlguard.tools](https://phishdestroy.io/domain/amlguard.tools/) | 2026-02-26 | Offline | — | 
[amltracker.tools](https://phishdestroy.io/domain/amltracker.tools/) | 2026-02-26 | Offline | NameSilo | 
[pumpify.tools](https://phishdestroy.io/domain/pumpify.tools/) | 2026-02-26 | Offline | — | 
[checker.linea.tools](https://phishdestroy.io/domain/checker.linea.tools/) | 2026-02-26 | Offline | — | 
[pippin.tools](https://phishdestroy.io/domain/pippin.tools/) | 2026-02-26 | Offline | NiceNIC | 
[checkeigen.byz.tools](https://phishdestroy.io/domain/checkeigen.byz.tools/) | 2026-02-17 | Online | NETIM | 
[raydium.tools](https://phishdestroy.io/domain/raydium.tools/) | 2026-02-13 | Online | NiceNIC | 
[buytrx.tools](https://phishdestroy.io/domain/buytrx.tools/) | 2026-01-26 | Offline | Tucows Domains | 
[slerf.tools](https://phishdestroy.io/domain/slerf.tools/) | 2026-01-24 | Online | Cloudflare | 
[aaa.slerf.tools](https://phishdestroy.io/domain/aaa.slerf.tools/) | 2026-01-24 | Online | Cloudflare | 
[live.ledger.tools](https://phishdestroy.io/domain/live.ledger.tools/) | 2025-12-25 | Online | Gandi | 
[ares.tools](https://phishdestroy.io/domain/ares.tools/) | 2025-11-20 | Online | Porkbun | 
[aml-check.tools](https://phishdestroy.io/domain/aml-check.tools/) | 2025-11-18 | Offline | Cloudflare | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .tools registrations; first .tools report 2025-07-31.

Canonical: https://phishdestroy.io/tld/tools/