Phishing domains under .zone

.zone accounts for 79 of the 224,866 domains in the PhishDestroy database (0.04%), with 0 new ones in the last 30 days. The most impersonated brand under .zone is Trust Wallet. 23 were online at the last check and 22 have a confirmed takedown.

79
Reported .zone domains
0.04%
Share of PhishDestroy reports
0
Last 30 days
22
Confirmed takedowns

Detections per month

2025-11: 132025-12: 72026-01: 12026-02: 262026-03: 62026-04: 02026-05: 02026-06: 12026-07: 32026-08: 42026-09: 02026-10: 0
.zone phishing domains detected per month: 61 from 2025-11 to 2026-10; peak 26.

Brands and registrars

Impersonated brands

  1. Trust Wallet3
  2. Cloudflare3
  3. Css2
  4. Binance1
  5. Aave1
  6. Arbitrum1
  7. Monad1
  8. WalletConnect1

Registrars

  1. PublicDomainRegistry.com20
  2. Cloudflare13
  3. GoDaddy.com11
  4. NiceNIC11
  5. Dynadot7
  6. BG-NETWORK (ASN: 51659)4
  7. Dynadot2
  8. N/A1

Latest .zone phishing domains

The 30 most recently detected .zone domains
DomainFirst detectedStatus at last checkRegistrar
discord.phi.zone2026-08-31OfflineDNSPod
firelight.zone2026-08-18OnlineGoDaddy.com
stresse.zone2026-08-11OnlineNameCheap
xn--ctus-5va.zone2026-08-03OfflineDynadot
mmssynchrodonneesfr.t.mydomain.zone2026-07-27Offline—
myservcieklarnaacco.mydomain.zone2026-07-22OnlineGoDaddy.com
supports.t.mydomain.zone2026-07-19OnlineGoDaddy.com
s1179676.ha009.t.mydomain.zone2026-06-15OfflineGoDaddy.com
aqwxdeartf56.t.mydomain.zone2026-03-19OfflineBaxetgroup
asterdexs.zone2026-03-17OfflinePublicDomainRegistry.com
asedsxwcad.t.mydomain.zone2026-03-17OfflineGoDaddy.com
proposal-osmosis.zone2026-03-11OfflinePublicDomainRegistry.com
amendes-antai-gouv-infractions.s1124277.ha025.t.mydomain.zone2026-03-06OfflineGoDaddy.com
app-osmois.zone2026-03-04OnlineNiceNIC
app.meteora.zone2026-02-26Taken downPublicDomainRegistry.com
app-cetuss.zone2026-02-26Taken downDynadot
linea.builld.zone2026-02-26Offline—
claim.monads.zone2026-02-26OfflinePublicDomainRegistry.com
velvetdrop.zone2026-02-26Offline—
keplr.zone2026-02-26UnknownNiceNIC
claim.lombard.zone2026-02-26Offline—
staking.succinct.zone2026-02-26OfflinePublicDomainRegistry.com
apps-celus.zone2026-02-26Taken downDynadot
hardwares.zone2026-02-26OnlineNiceNIC
checker.whales.zone2026-02-26Offline—
app.xn--ceus-16a.zone2026-02-26Offline—
claim.succinct.zone2026-02-26OfflinePublicDomainRegistry.com
meteorag.zone2026-02-26Taken downPublicDomainRegistry.com
jups.zone2026-02-26Taken downPublicDomainRegistry.com
openloop.zone2026-02-26OfflinePublicDomainRegistry.com

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .zone registrations; first .zone report 2025-08-08.