Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

189,930
Total Tracked
189,929
VT Detected
83,555
Last Seen Active
108,216
Unavailable at Last Check
1
VT Pending

Credential Phishing Kit Active Threat

31 domains tracked
31
Total Domains
8
Still Alive
22
Taken Down
100%
Detection Rate
5.7
Avg VT Score
25.8%
Alive Rate
25.8% of domains still active 14 domains with VT ≥ 5
Tracking since Nov 2025 — latest: Mar 12, 2026
Credential Phishing 31 domains
Screenshot of change-noww.club
change-noww.club
20 VTUnknown
Screenshot of change-noww.club
change-noww.club
Screenshot of change-noww.click
change-noww.click
18 VTActive
Screenshot of change-noww.click
change-noww.click
Screenshot of novvchange.biz
novvchange.biz
16 VTUnknownbinance
Screenshot of novvchange.biz
novvchange.biz
Screenshot of app.theworkroom.fun
app.theworkroom.fun
13 VTUnknownaave
Screenshot of app.theworkroom.fun
app.theworkroom.fun
Screenshot of chargenow.bond
chargenow.bond
13 VTUnknownbinance
Screenshot of chargenow.bond
chargenow.bond
Screenshot of web.defaazz.com
web.defaazz.com
13 VTActive
Screenshot of web.defaazz.com
web.defaazz.com
Screenshot of ops.sterlingandroyce.com
ops.sterlingandroyce.com
8 VTUnknownargent
Screenshot of ops.sterlingandroyce.com
ops.sterlingandroyce.com
Screenshot of web.opendesk.fun
web.opendesk.fun
8 VTUnknownargent
Screenshot of web.opendesk.fun
web.opendesk.fun
Screenshot of monlimit.com
monlimit.com
6 VTUnknown1inch
Screenshot of monlimit.com
monlimit.com
Screenshot of bitmels.com
bitmels.com
5 VTUnknown1inch
Screenshot of bitmels.com
bitmels.com
Screenshot of felomex.com
felomex.com
5 VTActive1inch
Screenshot of felomex.com
felomex.com
Screenshot of trd.ai2-coins.com
trd.ai2-coins.com
5 VTUnknownargent
Screenshot of trd.ai2-coins.com
trd.ai2-coins.com
Screenshot of web.elysian-capital.com
web.elysian-capital.com
5 VTUnknownaave
Screenshot of web.elysian-capital.com
web.elysian-capital.com
Screenshot of web.networkcapital-partnersltd.com
web.networkcapital-partnersltd.com
5 VTUnknownaave
Screenshot of web.networkcapital-partnersltd.com
web.networkcapital-partnersltd.com
Screenshot of nocelax.com
nocelax.com
4 VTUnknown1inch
Screenshot of nocelax.com
nocelax.com
Screenshot of selanox.com
selanox.com
4 VTActive1inch
Screenshot of selanox.com
selanox.com
Screenshot of galomex.com
galomex.com
3 VTActive1inch
Screenshot of galomex.com
galomex.com
Screenshot of revocex.com
revocex.com
3 VTActive1inch
Screenshot of revocex.com
revocex.com
Screenshot of web.exniilo.com
web.exniilo.com
3 VTUnknownargent
Screenshot of web.exniilo.com
web.exniilo.com
Screenshot of web.kabfiiso.com
web.kabfiiso.com
3 VTActiveaave
Screenshot of web.kabfiiso.com
web.kabfiiso.com
Screenshot of alucem.com
alucem.com
2 VTUnknown1inch
Screenshot of alucem.com
alucem.com
Screenshot of cab.profiittmax.com
cab.profiittmax.com
2 VTUnknownargent
Screenshot of cab.profiittmax.com
cab.profiittmax.com
Screenshot of cepanex.com
cepanex.com
2 VTActive1inch
Screenshot of cepanex.com
cepanex.com
Screenshot of vsmars.com
vsmars.com
2 VTUnknown1inch
Screenshot of vsmars.com
vsmars.com
Screenshot of web.allarsecur.com
web.allarsecur.com
2 VTUnknownargent
Screenshot of web.allarsecur.com
web.allarsecur.com
Screenshot of web.monex-market.com
web.monex-market.com
2 VTUnknownaave
Screenshot of web.monex-market.com
web.monex-market.com
Screenshot of web.td-cabinet.com
web.td-cabinet.com
2 VTUnknownargent
Screenshot of web.td-cabinet.com
web.td-cabinet.com
Screenshot of biworex.com
biworex.com
1 VTUnknown1inch
Screenshot of biworex.com
biworex.com
Screenshot of cfd.pro-interactiveltd.com
cfd.pro-interactiveltd.com
1 VTUnknownaave
Screenshot of cfd.pro-interactiveltd.com
cfd.pro-interactiveltd.com
Screenshot of metaflexer.com
metaflexer.com
1 VTUnknown1inch
Screenshot of metaflexer.com
metaflexer.com
Screenshot of ops.canada-tokentrd.com
ops.canada-tokentrd.com
1 VTUnknownaave
Screenshot of ops.canada-tokentrd.com
ops.canada-tokentrd.com

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,347 Cloudflare 21,394 Dynadot 10,525 GoDaddy 9,528 PDR Ltd. d/b/a PublicDomainRe... 7,935 Namecheap 7,475 Gname.com Pte. Ltd. 6,451 NameSilo 6,327 WebNIC 5,105 Global Domain Group 4,197 Tucows 4,139 Trustname.com 3,910 Hostinger 3,296 GitHub, Inc. 2,620 MarkMonitor 2,579 Vercel 2,533 Dominet (HK) Limited 2,159 Spaceship, Inc. 2,058 OwnRegistrar, Inc. 1,950 Netlify 1,701 Hosting Concepts B.V. d/b/a R... 1,663 Name.com 1,627 CSC Corporate Domains, Inc. 1,598 Cloudflare Pages 1,550 MAT BAO CORPORATION 1,478 Key-Systems 1,390 REGRU-RU 1,382 Cosmotown 1,351 Squarespace Domains II 1,231 Ultahost, Inc. 1,114

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,648 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Showing 31 domains above

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,691 genericcrypto 7,677 across 6,799 Google 6,305 Coinbase 4,167 MetaMask 3,500 Trezor 3,368 Solana 2,980 Ethereum 2,933 genericcloudflare 2,918 Binance 2,568 Kraken 2,457 Facebook 2,210 cryptoscam 1,758 Apple 1,512 Cloudflare 1,449 x.com 1,439 base 1,424 Bet365 1,301 Microsoft 1,280

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,011 Seed Phrase Theft 17 Airdrop Scam 8,188 Investment Scam 322

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust