Phishing Fiesta: .es Domains Skyrocket in Cybercrime Popularity!
Cybersecurity experts report a 19x surge in malicious campaigns from .es domains, now the third most common after .com and .ru. While most campaigns aim for credential phishing, the rise of dodgy .es websites might have us all saying “¡Ay caramba!” as we dodge fake Microsoft portals.

Hot Take:
¡Ay caramba! Who knew Spain’s .es domain would become the new phishing hotspot? It’s like the cybercriminals booked a last-minute flight to Ibiza and decided to set up shop there. Let’s hope they get sunburned on the way!
Key Points:
- The .es domain has seen a 19x increase in malicious campaigns, making it the third most common TLD for phishing.
- 99% of these campaigns focus on credential phishing, using fake Microsoft portals.
- Most phishing pages are hosted on Cloudflare with CAPTCHA security features.
- .es domains can be randomly generated, making them easier to spot for typosquatting.
- European ccTLDs like .es usually have stricter registration requirements.
Already a member? Log in here