# NameCheap, Inc. — PhishDestroy Threat Report
Source: https://phishdestroy.io/domain/?registrar=NameCheap%2C+Inc.
Generated: 2026-10-11T11:43:12+00:00

## Registrar profile
Brand: Namecheap
IANA ID: 1068
Country: US
Founded: 2000
Website: https://namecheap.com

## Threat statistics
- Flagged phishing domains in PhishDestroy DB: 9,023
- Last seen active: 4,574 (50.7%)
- Unavailable at latest stored check: 4,446
- VirusTotal-detected: 8,892 (98.5% detection rate)
- Avg VT detections (non-zero): 7.8
- High-confidence threats (VT ≥ 5): 5,431
- First flagged: 2024-07-24 19:29:13
- Last flagged: 2026-10-11 10:31:20

## Sample flagged domains (top 50 by VT detections)
- mediasync.cv  [VT:24, status:dead]  → https://phishdestroy.io/domain/mediasync.cv/
- 9y2awj2l.wsamoeesth.wefronetma4ms.ink  [VT:23, status:dead]  → https://phishdestroy.io/domain/9y2awj2l.wsamoeesth.wefronetma4ms.ink/
- scootwinner.com  [VT:23, status:dead]  → https://phishdestroy.io/domain/scootwinner.com/
- wsamoeesth.wefronetma4ms.ink  [VT:23, status:dead]  → https://phishdestroy.io/domain/wsamoeesth.wefronetma4ms.ink/
- zimbrastat.com  [VT:23, status:alive]  → https://phishdestroy.io/domain/zimbrastat.com/
- arvax.xyz  [VT:22, status:alive]  → https://phishdestroy.io/domain/arvax.xyz/
- blockex.world  [VT:22, status:dead]  → https://phishdestroy.io/domain/blockex.world/
- facebook.hosweb.online  [VT:22, status:alive]  → https://phishdestroy.io/domain/facebook.hosweb.online/
- konf1rmasi-hadi4h10jut4.help1.site  [VT:22, status:dead]  → https://phishdestroy.io/domain/konf1rmasi-hadi4h10jut4.help1.site/
- oceancertsurveyors.com  [VT:22, status:dead]  → https://phishdestroy.io/domain/oceancertsurveyors.com/
- 6ps7dukt.wsamoeesth.wefronetma4ms.ink  [VT:21, status:dead]  → https://phishdestroy.io/domain/6ps7dukt.wsamoeesth.wefronetma4ms.ink/
- app.renfrolan.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/app.renfrolan.com/
- aviatronika.online  [VT:21, status:dead]  → https://phishdestroy.io/domain/aviatronika.online/
- avivtech.org  [VT:21, status:alive]  → https://phishdestroy.io/domain/avivtech.org/
- bellsouth-att-sign-in-904158.webflow.io  [VT:21, status:dead]  → https://phishdestroy.io/domain/bellsouth-att-sign-in-904158.webflow.io/
- bingejobs.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/bingejobs.com/
- dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev  [VT:21, status:alive]  → https://phishdestroy.io/domain/dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev/
- geldchantix-trade.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/geldchantix-trade.com/
- help1.site  [VT:21, status:dead]  → https://phishdestroy.io/domain/help1.site/
- metamasklogini.webflow.io  [VT:21, status:dead]  → https://phishdestroy.io/domain/metamasklogini.webflow.io/
- onetoken.ink  [VT:21, status:alive]  → https://phishdestroy.io/domain/onetoken.ink/
- phamtom.online  [VT:21, status:dead]  → https://phishdestroy.io/domain/phamtom.online/
- robloxt.cv  [VT:21, status:dead]  → https://phishdestroy.io/domain/robloxt.cv/
- syriatel.gamefy.io.proxy.openvpn-ssh.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/syriatel.gamefy.io.proxy.openvpn-ssh.com/
- trixauvex.org  [VT:21, status:dead]  → https://phishdestroy.io/domain/trixauvex.org/
- yourtinyurl.live  [VT:21, status:dead]  → https://phishdestroy.io/domain/yourtinyurl.live/
- 156.67.218.149.sslip.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/156.67.218.149.sslip.io/
- alert.casino6868.xyz  [VT:20, status:dead]  → https://phishdestroy.io/domain/alert.casino6868.xyz/
- amazon-clone-f73c.panda.new  [VT:20, status:alive]  → https://phishdestroy.io/domain/amazon-clone-f73c.panda.new/
- bellsouth-att-sign-in-850e6d.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/bellsouth-att-sign-in-850e6d.webflow.io/
- bet.ply365.net  [VT:20, status:dead]  → https://phishdestroy.io/domain/bet.ply365.net/
- bitmartxlogink.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/bitmartxlogink.webflow.io/
- danaaa-paylaateerr.brodhi.me  [VT:20, status:dead]  → https://phishdestroy.io/domain/danaaa-paylaateerr.brodhi.me/
- defactovoting.io  [VT:20, status:alive]  → https://phishdestroy.io/domain/defactovoting.io/
- direct-login-update.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/direct-login-update.webflow.io/
- domatisc.ink  [VT:20, status:dead]  → https://phishdestroy.io/domain/domatisc.ink/
- fundmyprop.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/fundmyprop.com/
- grked.online  [VT:20, status:alive]  → https://phishdestroy.io/domain/grked.online/
- kucoin-login-authh.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/kucoin-login-authh.webflow.io/
- kucoinloginc.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/kucoinloginc.webflow.io/
- lostmoneyforum.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/lostmoneyforum.com/
- lvl99.store  [VT:20, status:alive]  → https://phishdestroy.io/domain/lvl99.store/
- m-app--start-trezor.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/m-app--start-trezor.webflow.io/
- m.biblesignals.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/m.biblesignals.com/
- metamesklgi.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/metamesklgi.webflow.io/
- metiiimask-extensio.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/metiiimask-extensio.webflow.io/
- mut-tamask-wellat.webflow.io  [VT:20, status:dead]  → https://phishdestroy.io/domain/mut-tamask-wellat.webflow.io/
- mxlclinfo.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/mxlclinfo.com/
- ndrt.ink  [VT:20, status:alive]  → https://phishdestroy.io/domain/ndrt.ink/
- rblox.me  [VT:20, status:dead]  → https://phishdestroy.io/domain/rblox.me/

## Links
- Full interactive hub: https://phishdestroy.io/domain/?registrar=NameCheap%2C+Inc.
- Site-wide LLM feed: https://phishdestroy.io/llms.txt
- Report abuse / appeals: https://phishdestroy.io/appeals/