Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

194,040
Total Tracked
194,016
VT Detected
92,222
Last Seen Active
98,216
Unavailable at Last Check
24
VT Pending

Credential Phishing Kit High Threat

31 domains tracked
31
Total Domains
11
Still Alive
19
Taken Down
100%
Detection Rate
6.0
Avg VT Score
35.5%
Alive Rate
35.5% of domains still active 15 domains with VT ≥ 5
Tracking since Nov 2025 — latest: Mar 12, 2026
Credential Phishing 31 domains
Screenshot of change-noww.club
change-noww.club
20 VTUnknown
Screenshot of change-noww.club
change-noww.club
Screenshot of novvchange.biz
novvchange.biz
16 VTUnknownbinance
Screenshot of novvchange.biz
novvchange.biz
Screenshot of change-noww.click
change-noww.click
15 VTActive
Screenshot of change-noww.click
change-noww.click
Screenshot of app.theworkroom.fun
app.theworkroom.fun
13 VTUnknownaave
Screenshot of app.theworkroom.fun
app.theworkroom.fun
Screenshot of chargenow.bond
chargenow.bond
13 VTUnknownbinance
Screenshot of chargenow.bond
chargenow.bond
Screenshot of web.defaazz.com
web.defaazz.com
13 VTActive
Screenshot of web.defaazz.com
web.defaazz.com
Screenshot of web.allarsecur.com
web.allarsecur.com
11 VTActiveargent
Screenshot of web.allarsecur.com
web.allarsecur.com
Screenshot of ops.sterlingandroyce.com
ops.sterlingandroyce.com
8 VTUnknownargent
Screenshot of ops.sterlingandroyce.com
ops.sterlingandroyce.com
Screenshot of web.opendesk.fun
web.opendesk.fun
8 VTUnknownargent
Screenshot of web.opendesk.fun
web.opendesk.fun
Screenshot of monlimit.com
monlimit.com
6 VTUnknown1inch
Screenshot of monlimit.com
monlimit.com
Screenshot of bitmels.com
bitmels.com
5 VTUnknown1inch
Screenshot of bitmels.com
bitmels.com
Screenshot of felomex.com
felomex.com
5 VTActive1inch
Screenshot of felomex.com
felomex.com
Screenshot of trd.ai2-coins.com
trd.ai2-coins.com
5 VTUnknownargent
Screenshot of trd.ai2-coins.com
trd.ai2-coins.com
Screenshot of web.elysian-capital.com
web.elysian-capital.com
5 VTUnknownaave
Screenshot of web.elysian-capital.com
web.elysian-capital.com
Screenshot of web.networkcapital-partnersltd.com
web.networkcapital-partnersltd.com
5 VTUnknownaave
Screenshot of web.networkcapital-partnersltd.com
web.networkcapital-partnersltd.com
Screenshot of nocelax.com
nocelax.com
4 VTUnknown1inch
Screenshot of nocelax.com
nocelax.com
Screenshot of selanox.com
selanox.com
4 VTActive1inch
Screenshot of selanox.com
selanox.com
Screenshot of vsmars.com
vsmars.com
4 VTActive1inch
Screenshot of vsmars.com
vsmars.com
Screenshot of galomex.com
galomex.com
3 VTActive1inch
Screenshot of galomex.com
galomex.com
Screenshot of revocex.com
revocex.com
3 VTActive1inch
Screenshot of revocex.com
revocex.com
Screenshot of web.exniilo.com
web.exniilo.com
3 VTUnknownargent
Screenshot of web.exniilo.com
web.exniilo.com
Screenshot of web.kabfiiso.com
web.kabfiiso.com
3 VTActiveaave
Screenshot of web.kabfiiso.com
web.kabfiiso.com
Screenshot of alucem.com
alucem.com
2 VTUnknown1inch
Screenshot of alucem.com
alucem.com
Screenshot of cab.profiittmax.com
cab.profiittmax.com
2 VTUnknownargent
Screenshot of cab.profiittmax.com
cab.profiittmax.com
Screenshot of cepanex.com
cepanex.com
2 VTActive1inch
Screenshot of cepanex.com
cepanex.com
Screenshot of metaflexer.com
metaflexer.com
2 VTActive1inch
Screenshot of metaflexer.com
metaflexer.com
Screenshot of web.monex-market.com
web.monex-market.com
2 VTUnknownaave
Screenshot of web.monex-market.com
web.monex-market.com
Screenshot of web.td-cabinet.com
web.td-cabinet.com
2 VTUnknownargent
Screenshot of web.td-cabinet.com
web.td-cabinet.com
Screenshot of biworex.com
biworex.com
1 VTUnknown1inch
Screenshot of biworex.com
biworex.com
Screenshot of cfd.pro-interactiveltd.com
cfd.pro-interactiveltd.com
1 VTUnknownaave
Screenshot of cfd.pro-interactiveltd.com
cfd.pro-interactiveltd.com
Screenshot of ops.canada-tokentrd.com
ops.canada-tokentrd.com
1 VTUnknownaave
Screenshot of ops.canada-tokentrd.com
ops.canada-tokentrd.com

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,792 Cloudflare 21,458 Dynadot 10,785 PDR Ltd. d/b/a PublicDomainRe... 8,003 Namecheap 7,751 GoDaddy 6,637 Gname.com Pte. Ltd. 6,505 NameSilo 6,469 WebNIC 5,126 Global Domain Group 4,279 Tucows 4,202 Trustname.com 4,184 Wix Studio 4,093 Hostinger 3,381 Vercel 2,770 GitHub, Inc. 2,749 MarkMonitor 2,585 Dominet (HK) Limited 2,185 Spaceship, Inc. 2,124 OwnRegistrar, Inc. 2,010 Netlify 1,967 Hosting Concepts B.V. d/b/a R... 1,727 Cloudflare Pages 1,712 Name.com 1,658 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,481 Cosmotown 1,443 Key-Systems 1,405 REGRU-RU 1,383 Squarespace Domains II 1,285

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,666 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Showing 31 domains above

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,737 genericcrypto 7,730 across 6,799 Google 6,341 Coinbase 4,199 MetaMask 3,760 Trezor 3,413 Solana 3,027 Ethereum 2,949 genericcloudflare 2,919 Binance 2,582 Kraken 2,484 Facebook 2,238 cryptoscam 1,811 Cloudflare 1,577 Apple 1,542 x.com 1,439 base 1,427 Microsoft 1,315 Bet365 1,314

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,028 Seed Phrase Theft 19 Airdrop Scam 8,289 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust