# Phishing domains under .zone

.zone accounts for 79 of the 224,866 domains in the PhishDestroy database (0.04%), with 0 new ones in the last 30 days. The most impersonated brand under .zone is Trust Wallet. 23 were online at the last check and 22 have a confirmed takedown.

79Reported .zone domains

0.04%Share of PhishDestroy reports

0Last 30 days

22Confirmed takedowns

## Detections per month

.zone phishing domains detected per month: 61 from 2025-11 to 2026-10; peak 26.

## Brands and registrars

### Impersonated brands

- [Trust Wallet](https://phishdestroy.io/brand/trust-wallet/)3
- [Cloudflare](https://phishdestroy.io/brand/cloudflare/)3
- [Css](https://phishdestroy.io/brand/css/)2
- [Binance](https://phishdestroy.io/brand/binance/)1
- [Aave](https://phishdestroy.io/brand/aave/)1
- [Arbitrum](https://phishdestroy.io/brand/arbitrum/)1
- [Monad](https://phishdestroy.io/brand/monad/)1
- [WalletConnect](https://phishdestroy.io/brand/walletconnect/)1

### Registrars

- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)20
- Cloudflare13
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)11
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)11
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)7
- BG-NETWORK (ASN: 51659)4
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)2
- N/A1

## Latest .zone phishing domains

The 30 most recently detected .zone domains
Domain | First detected | Status at last check | Registrar | 
[discord.phi.zone](https://phishdestroy.io/domain/discord.phi.zone/) | 2026-08-31 | Offline | DNSPod | 
[firelight.zone](https://phishdestroy.io/domain/firelight.zone/) | 2026-08-18 | Online | GoDaddy.com | 
[stresse.zone](https://phishdestroy.io/domain/stresse.zone/) | 2026-08-11 | Online | NameCheap | 
[xn--ctus-5va.zone](https://phishdestroy.io/domain/xn--ctus-5va.zone/) | 2026-08-03 | Offline | Dynadot | 
[mmssynchrodonneesfr.t.mydomain.zone](https://phishdestroy.io/domain/mmssynchrodonneesfr.t.mydomain.zone/) | 2026-07-27 | Offline | — | 
[myservcieklarnaacco.mydomain.zone](https://phishdestroy.io/domain/myservcieklarnaacco.mydomain.zone/) | 2026-07-22 | Online | GoDaddy.com | 
[supports.t.mydomain.zone](https://phishdestroy.io/domain/supports.t.mydomain.zone/) | 2026-07-19 | Online | GoDaddy.com | 
[s1179676.ha009.t.mydomain.zone](https://phishdestroy.io/domain/s1179676.ha009.t.mydomain.zone/) | 2026-06-15 | Offline | GoDaddy.com | 
[aqwxdeartf56.t.mydomain.zone](https://phishdestroy.io/domain/aqwxdeartf56.t.mydomain.zone/) | 2026-03-19 | Offline | Baxetgroup | 
[asterdexs.zone](https://phishdestroy.io/domain/asterdexs.zone/) | 2026-03-17 | Offline | PublicDomainRegistry.com | 
[asedsxwcad.t.mydomain.zone](https://phishdestroy.io/domain/asedsxwcad.t.mydomain.zone/) | 2026-03-17 | Offline | GoDaddy.com | 
[proposal-osmosis.zone](https://phishdestroy.io/domain/proposal-osmosis.zone/) | 2026-03-11 | Offline | PublicDomainRegistry.com | 
[amendes-antai-gouv-infractions.s1124277.ha025.t.mydomain.zone](https://phishdestroy.io/domain/amendes-antai-gouv-infractions.s1124277.ha025.t.mydomain.zone/) | 2026-03-06 | Offline | GoDaddy.com | 
[app-osmois.zone](https://phishdestroy.io/domain/app-osmois.zone/) | 2026-03-04 | Online | NiceNIC | 
[app.meteora.zone](https://phishdestroy.io/domain/app.meteora.zone/) | 2026-02-26 | Taken down | PublicDomainRegistry.com | 
[app-cetuss.zone](https://phishdestroy.io/domain/app-cetuss.zone/) | 2026-02-26 | Taken down | Dynadot | 
[linea.builld.zone](https://phishdestroy.io/domain/linea.builld.zone/) | 2026-02-26 | Offline | — | 
[claim.monads.zone](https://phishdestroy.io/domain/claim.monads.zone/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[velvetdrop.zone](https://phishdestroy.io/domain/velvetdrop.zone/) | 2026-02-26 | Offline | — | 
[keplr.zone](https://phishdestroy.io/domain/keplr.zone/) | 2026-02-26 | Unknown | NiceNIC | 
[claim.lombard.zone](https://phishdestroy.io/domain/claim.lombard.zone/) | 2026-02-26 | Offline | — | 
[staking.succinct.zone](https://phishdestroy.io/domain/staking.succinct.zone/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[apps-celus.zone](https://phishdestroy.io/domain/apps-celus.zone/) | 2026-02-26 | Taken down | Dynadot | 
[hardwares.zone](https://phishdestroy.io/domain/hardwares.zone/) | 2026-02-26 | Online | NiceNIC | 
[checker.whales.zone](https://phishdestroy.io/domain/checker.whales.zone/) | 2026-02-26 | Offline | — | 
[app.xn--ceus-16a.zone](https://phishdestroy.io/domain/app.xn--ceus-16a.zone/) | 2026-02-26 | Offline | — | 
[claim.succinct.zone](https://phishdestroy.io/domain/claim.succinct.zone/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[meteorag.zone](https://phishdestroy.io/domain/meteorag.zone/) | 2026-02-26 | Taken down | PublicDomainRegistry.com | 
[jups.zone](https://phishdestroy.io/domain/jups.zone/) | 2026-02-26 | Taken down | PublicDomainRegistry.com | 
[openloop.zone](https://phishdestroy.io/domain/openloop.zone/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .zone registrations; first .zone report 2025-08-08.

Canonical: https://phishdestroy.io/tld/zone/