Phishing domains under .xyz

.xyz accounts for 10,450 of the 224,866 domains in the PhishDestroy database (4.65%), with 677 new ones in the last 30 days. The most impersonated brand under .xyz is MetaMask. 2,183 were online at the last check and 539 have a confirmed takedown.

10,450
Reported .xyz domains
4.65%
Share of PhishDestroy reports
677
Last 30 days
539
Confirmed takedowns

Detections per month

2025-11: 6342025-12: 4812026-01: 4282026-02: 24492026-03: 10132026-04: 3862026-05: 2252026-06: 10702026-07: 6612026-08: 5722026-09: 3722026-10: 536
.xyz phishing domains detected per month: 8,827 from 2025-11 to 2026-10; peak 2,449.

Brands and registrars

Impersonated brands

  1. MetaMask563
  2. Bet365510
  3. Google271
  4. Solana271
  5. SushiSwap163
  6. Hyperliquid162
  7. Coinbase161
  8. Binance160

Registrars

  1. NiceNIC1,974
  2. NICENIC1,675
  3. PublicDomainRegistry.com1,019
  4. Dynadot660
  5. Gname.com586
  6. NameSilo544
  7. OwnRegistrar455
  8. NameCheap259

Latest .xyz phishing domains

The 30 most recently detected .xyz domains
DomainFirst detectedStatus at last checkRegistrar
kazimer777.xyz2026-10-22UnknownSpaceship
stonlklfun.xyz2026-10-22OnlineNICENIC
paprertradae.xyz2026-10-22OnlineNICENIC
trontrace.xyz2026-10-22OnlineNICENIC
australiaxclmemainnet.xyz2026-10-22OnlineDynadot
mydpd.jdevr.xyz2026-10-22UnknownNameSilo
reward-kinetiqfnd.xyz2026-10-21UnknownNICENIC
fables-proposals.xyz2026-10-21UnknownNICENIC
fables-proposal.xyz2026-10-21UnknownNICENIC
taskerx.800876.xyz2026-10-21OfflineName.com
rewards-fables.xyz2026-10-21UnknownNICENIC
mishmaxoen.xyz2026-10-21OnlineEranet
fables-votings.xyz2026-10-21UnknownNICENIC
fables-votes.xyz2026-10-21UnknownNICENIC
votings-fables.xyz2026-10-21UnknownNICENIC
hyperliquid-en.xyz2026-10-21OnlinePublicDomainRegistry.com
strkshield.xyz2026-10-21OnlinePorkbun
sitemvgu4nlkkybe.xyz2026-10-20OnlineEranet
whitelist-accrosapi.xyz2026-10-20OfflineNICENIC
streamoors.xyz2026-10-20OnlineNICENIC
veililt.xyz2026-10-20OnlineNICENIC
migrate-superseed.xyz2026-10-20UnknownNICENIC
nigat99.xyz2026-10-20UnknownNICENIC
freua.xyz2026-10-20UnknownNICENIC
collectrcrypt.xyz2026-10-20OnlineNICENIC
cardlboardtradle.xyz2026-10-20UnknownNICENIC
stoneventure2.xyz2026-10-20OnlineNICENIC
governances-aero.xyz2026-10-20OnlineNICENIC
evm-access.xyz2026-10-20UnknownNICENIC
monlock.xyz2026-10-20OnlineNameCheap

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .xyz registrations; first .xyz report 2024-03-19.