# NameCheap, Inc. — PhishDestroy Threat Report
Source: https://phishdestroy.io/domain/?registrar=NameCheap%2C+Inc.
Generated: 2026-04-21T15:42:15+00:00

## Registrar profile
Brand: Namecheap
IANA ID: 1068
Country: US
Founded: 2000
Website: https://namecheap.com

## Threat statistics
- Flagged phishing domains in PhishDestroy DB: 4,676
- Still alive (not yet taken down): 611 (13.1%)
- Taken down: 3,927
- VirusTotal-detected: 4,408 (94.3% detection rate)
- Avg VT detections (non-zero): 6.1
- High-confidence threats (VT ≥ 5): 1,833
- First flagged: 2024-07-24 19:29:13
- Last flagged: 2026-04-21 16:01:59
- Total domains under registrar (NetAPI): 23,759,053
- PhishDestroy share of registrar portfolio: 0.02%

## Sample flagged domains (top 50 by VT detections)
- 964-iq-conttact.ubpages.com  [VT:24, status:dead]  → https://phishdestroy.io/domain/964-iq-conttact.ubpages.com/
- accountrestore.live  [VT:23, status:dead]  → https://phishdestroy.io/domain/accountrestore.live/
- scootwinner.com  [VT:23, status:dead]  → https://phishdestroy.io/domain/scootwinner.com/
- usherkomugisha.com  [VT:23, status:dead]  → https://phishdestroy.io/domain/usherkomugisha.com/
- 0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev  [VT:22, status:dead]  → https://phishdestroy.io/domain/0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev/
- facebook-feed7r6h.rollout.site  [VT:22, status:dead]  → https://phishdestroy.io/domain/facebook-feed7r6h.rollout.site/
- instagram-ios-appg39b.rollout.site  [VT:22, status:dead]  → https://phishdestroy.io/domain/instagram-ios-appg39b.rollout.site/
- konf1rmasi-hadi4h10jut4.help1.site  [VT:22, status:dead]  → https://phishdestroy.io/domain/konf1rmasi-hadi4h10jut4.help1.site/
- login-web3-coinbase.wstd.io  [VT:22, status:dead]  → https://phishdestroy.io/domain/login-web3-coinbase.wstd.io/
- bellsouth-att-sign-in-904158.webflow.io  [VT:21, status:dead]  → https://phishdestroy.io/domain/bellsouth-att-sign-in-904158.webflow.io/
- bingejobs.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/bingejobs.com/
- dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev  [VT:21, status:dead]  → https://phishdestroy.io/domain/dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev/
- geldchantix-trade.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/geldchantix-trade.com/
- help1.site  [VT:21, status:dead]  → https://phishdestroy.io/domain/help1.site/
- mailbox00.pythonanywhere.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/mailbox00.pythonanywhere.com/
- metamasklogini.webflow.io  [VT:21, status:dead]  → https://phishdestroy.io/domain/metamasklogini.webflow.io/
- phamtom.online  [VT:21, status:alive]  → https://phishdestroy.io/domain/phamtom.online/
- robloxt.cv  [VT:21, status:dead]  → https://phishdestroy.io/domain/robloxt.cv/
- syriatel.gamefy.io.proxy.openvpn-ssh.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/syriatel.gamefy.io.proxy.openvpn-ssh.com/
- vremyas.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/vremyas.com/
- yourtinyurl.live  [VT:21, status:dead]  → https://phishdestroy.io/domain/yourtinyurl.live/
- 156.67.218.149.sslip.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/156.67.218.149.sslip.io/
- alert.casino6868.xyz  [VT:20, status:dead]  → https://phishdestroy.io/domain/alert.casino6868.xyz/
- attlink.keepo.bio  [VT:20, status:dead]  → https://phishdestroy.io/domain/attlink.keepo.bio/
- bahisflix4.site  [VT:20, status:suspended]  → https://phishdestroy.io/domain/bahisflix4.site/
- bellsouth-att-sign-in-850e6d.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/bellsouth-att-sign-in-850e6d.webflow.io/
- bet.ply365.net  [VT:20, status:alive]  → https://phishdestroy.io/domain/bet.ply365.net/
- bitmartxlogink.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/bitmartxlogink.webflow.io/
- boltonlittleleague.org  [VT:20, status:dead]  → https://phishdestroy.io/domain/boltonlittleleague.org/
- ca--netcoins-logi--cnd.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/ca--netcoins-logi--cnd.webflow.io/
- contact-iraq-964.ubpages.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/contact-iraq-964.ubpages.com/
- danaaa-paylaateerr.brodhi.me  [VT:20, status:dead]  → https://phishdestroy.io/domain/danaaa-paylaateerr.brodhi.me/
- direct-login-update.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/direct-login-update.webflow.io/
- flaredropx.live  [VT:20, status:dead]  → https://phishdestroy.io/domain/flaredropx.live/
- iman110.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/iman110.com/
- kucoinloginc.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/kucoinloginc.webflow.io/
- lloyd-nonexcitative-ping.ngrok-free.dev  [VT:20, status:dead]  → https://phishdestroy.io/domain/lloyd-nonexcitative-ping.ngrok-free.dev/
- lostmoneyforum.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/lostmoneyforum.com/
- m-app--start-trezor.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/m-app--start-trezor.webflow.io/
- meta-mask-template.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/meta-mask-template.webflow.io/
- metamesklgi.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/metamesklgi.webflow.io/
- metiiimask-extensio.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/metiiimask-extensio.webflow.io/
- mut-tamask-wellat.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/mut-tamask-wellat.webflow.io/
- mx648.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/mx648.com/
- netflixfw54.rollout.site  [VT:20, status:dead]  → https://phishdestroy.io/domain/netflixfw54.rollout.site/
- qocuinlogingle.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/qocuinlogingle.webflow.io/
- ravenstoneconstruction.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/ravenstoneconstruction.com/
- robinhoodlogin.start.page  [VT:20, status:dead]  → https://phishdestroy.io/domain/robinhoodlogin.start.page/
- robuxruleonline.vip  [VT:20, status:dead]  → https://phishdestroy.io/domain/robuxruleonline.vip/
- salmon-deena-43.tiiny.site  [VT:20, status:dead]  → https://phishdestroy.io/domain/salmon-deena-43.tiiny.site/

## Links
- Full interactive hub: https://phishdestroy.io/domain/?registrar=NameCheap%2C+Inc.
- Site-wide LLM feed: https://phishdestroy.io/llms.txt
- Report abuse / appeals: https://phishdestroy.io/appeals/