Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

195,453
Total Tracked
195,453
VT Detected
88,431
Last Seen Active
97,900
Unavailable at Last Check
0
VT Pending

Recovery Scam Kit High Threat

97 domains tracked
Sites targeting previous scam victims, claiming to recover lost crypto for a fee. Double-victimizes users who already lost funds.
97
Total Domains
61
Still Alive
31
Taken Down
99%
Detection Rate
6.2
Avg VT Score
62.9%
Alive Rate
62.9% of domains still active 52 domains with VT ≥ 5
Tracking since Sep 2025 — latest: Jul 14, 2026
Recovery Scam 97 domains
Screenshot of test43593543598.lol
test43593543598.lol
21 VTUnknowncoinbase
Screenshot of test43593543598.lol
test43593543598.lol
trezor-help.support
21 VTActiveTrezor
scorpioncc.space
18 VTUnknown
Screenshot of phantomsecure.net
phantomsecure.net
17 VTUnknownSolana Drainerphantom
Screenshot of phantomsecure.net
phantomsecure.net
Screenshot of metamask.io-backupdevice.com
metamask.io-backupdevice.com
16 VTUnknownMetaMask
Screenshot of metamask.io-backupdevice.com
metamask.io-backupdevice.com
Screenshot of restoredappstoolkit.xyz
restoredappstoolkit.xyz
16 VTUnknownAngel Drainer
Screenshot of restoredappstoolkit.xyz
restoredappstoolkit.xyz
Screenshot of zypha.xyz
zypha.xyz
16 VTUnknownSolana Drainer1inch
Screenshot of zypha.xyz
zypha.xyz
Screenshot of emktlw.com.br
emktlw.com.br
15 VTActive
Screenshot of emktlw.com.br
emktlw.com.br
Screenshot of meeting3745.live
meeting3745.live
15 VTActiveCalendly
Screenshot of meeting3745.live
meeting3745.live
Screenshot of recover-ledger.site
recover-ledger.site
15 VTUnknownLedger
Screenshot of recover-ledger.site
recover-ledger.site
Screenshot of notification-nftxupgrad.botmada.live
notification-nftxupgrad.botmada.live
14 VTActivenetflix
Screenshot of notification-nftxupgrad.botmada.live
notification-nftxupgrad.botmada.live
Screenshot of recovery-wizards.com
recovery-wizards.com
14 VTActive
Screenshot of recovery-wizards.com
recovery-wizards.com
Screenshot of cryptorecoverysystem.com
cryptorecoverysystem.com
13 VTActiveSolana Drainer
Screenshot of cryptorecoverysystem.com
cryptorecoverysystem.com
Screenshot of getting-started-ledgr-easily.pages.dev
getting-started-ledgr-easily.pages.dev
13 VTActiveLedger
Screenshot of getting-started-ledgr-easily.pages.dev
getting-started-ledgr-easily.pages.dev
ledgercryptoservice.com
13 VTActiveLedger
Screenshot of phantom-wallet-support.blogspot.com
phantom-wallet-support.blogspot.com
11 VTUnknownPhantom
Screenshot of phantom-wallet-support.blogspot.com
phantom-wallet-support.blogspot.com
Screenshot of safepal-extension.cc
safepal-extension.cc
11 VTUnknownSafePal
Screenshot of safepal-extension.cc
safepal-extension.cc
Screenshot of trustvaultpro.com
trustvaultpro.com
11 VTUnknownacross
Screenshot of trustvaultpro.com
trustvaultpro.com
Screenshot of ledgr-comstart-eu.pages.dev
ledgr-comstart-eu.pages.dev
10 VTActiveLedger
Screenshot of ledgr-comstart-eu.pages.dev
ledgr-comstart-eu.pages.dev
Screenshot of ledgrre-com.pages.dev
ledgrre-com.pages.dev
10 VTActiveLedger
Screenshot of ledgrre-com.pages.dev
ledgrre-com.pages.dev
Screenshot of secure-wallet.online.trezor-wallet.io
secure-wallet.online.trezor-wallet.io
10 VTUnknownacross
Screenshot of secure-wallet.online.trezor-wallet.io
secure-wallet.online.trezor-wallet.io
Screenshot of restoredapptools.xyz
restoredapptools.xyz
8 VTUnknownAngel Drainer
Screenshot of restoredapptools.xyz
restoredapptools.xyz
Screenshot of mmwalletsecurity.gt.tc
mmwalletsecurity.gt.tc
7 VTActiveMetaMask
Screenshot of mmwalletsecurity.gt.tc
mmwalletsecurity.gt.tc
Screenshot of recoveryassaetmgmt.icu
recoveryassaetmgmt.icu
7 VTUnknownblockchain
Screenshot of recoveryassaetmgmt.icu
recoveryassaetmgmt.icu
Screenshot of wallet-recovery-service.com
wallet-recovery-service.com
7 VTActivebinance
Screenshot of wallet-recovery-service.com
wallet-recovery-service.com
Screenshot of cryptowalletrecoveryexperts.com
cryptowalletrecoveryexperts.com
6 VTActive
Screenshot of cryptowalletrecoveryexperts.com
cryptowalletrecoveryexperts.com
Screenshot of dogecoin-recovery.com
dogecoin-recovery.com
6 VTActive
Screenshot of dogecoin-recovery.com
dogecoin-recovery.com
Screenshot of markethelp.co.uk
markethelp.co.uk
6 VTActiveGoogle
Screenshot of markethelp.co.uk
markethelp.co.uk
Screenshot of meteorag.click
meteorag.click
6 VTActive["google"]
Screenshot of meteorag.click
meteorag.click
Screenshot of phanthom.net
phanthom.net
6 VTUnknownPhantom
Screenshot of phanthom.net
phanthom.net
Screenshot of safepal-recovery-wallet.cc
safepal-recovery-wallet.cc
6 VTUnknownSafePal
Screenshot of safepal-recovery-wallet.cc
safepal-recovery-wallet.cc
Screenshot of veriftron.com
veriftron.com
6 VTActivegenericcrypto
Screenshot of veriftron.com
veriftron.com
wallet-recovery-tools-staging.extrawallet.app
6 VTActive
Screenshot of walletrecovery.app
walletrecovery.app
6 VTActiveEthereum
Screenshot of walletrecovery.app
walletrecovery.app
Screenshot of walletrecoveryservice.com
walletrecoveryservice.com
6 VTActiveEthereum
Screenshot of walletrecoveryservice.com
walletrecoveryservice.com
Screenshot of web-dapp-protocol.com
web-dapp-protocol.com
6 VTActive
Screenshot of web-dapp-protocol.com
web-dapp-protocol.com
Screenshot of www.securewalletrecover.com
www.securewalletrecover.com
6 VTActive
Screenshot of www.securewalletrecover.com
www.securewalletrecover.com
Screenshot of atzec.network
atzec.network
5 VTActiveFacebook
Screenshot of atzec.network
atzec.network
Screenshot of digital-canalbank.com
digital-canalbank.com
5 VTActive
Screenshot of digital-canalbank.com
digital-canalbank.com
Screenshot of drive-google.digital
drive-google.digital
5 VTUnknownGoogle
Screenshot of drive-google.digital
drive-google.digital
Screenshot of hyenae.trade
hyenae.trade
5 VTActiveGoogle
Screenshot of hyenae.trade
hyenae.trade
Screenshot of keyforgeonline.com
keyforgeonline.com
5 VTUnknownMicrosoft
Screenshot of keyforgeonline.com
keyforgeonline.com
Screenshot of ledger-hardware-wallet-recovery.com
ledger-hardware-wallet-recovery.com
5 VTUnknownLedger
Screenshot of ledger-hardware-wallet-recovery.com
ledger-hardware-wallet-recovery.com
Screenshot of limitlesstradingacademy.xyz
limitlesstradingacademy.xyz
5 VTUnknownGoogle
Screenshot of limitlesstradingacademy.xyz
limitlesstradingacademy.xyz
Screenshot of percolatordex.trade
percolatordex.trade
5 VTActiveGoogle
Screenshot of percolatordex.trade
percolatordex.trade
Screenshot of recovery.app.rabble.pro
recovery.app.rabble.pro
5 VTUnknown
Screenshot of recovery.app.rabble.pro
recovery.app.rabble.pro
Screenshot of restoredapptoolkit.xyz
restoredapptoolkit.xyz
5 VTUnknown
Screenshot of restoredapptoolkit.xyz
restoredapptoolkit.xyz
Screenshot of secure-wallet.online
secure-wallet.online
5 VTUnknownacross
Screenshot of secure-wallet.online
secure-wallet.online
Screenshot of trustwalllet.us
trustwalllet.us
5 VTActiveTrust Wallet
Screenshot of trustwalllet.us
trustwalllet.us
Screenshot of web-dapp-protocol.org
web-dapp-protocol.org
5 VTActive
Screenshot of web-dapp-protocol.org
web-dapp-protocol.org
Screenshot of web3walletrecovery.com
web3walletrecovery.com
5 VTActivecoinbase
Screenshot of web3walletrecovery.com
web3walletrecovery.com
Screenshot of ztec.network
ztec.network
5 VTActiveFacebook
Screenshot of ztec.network
ztec.network
Screenshot of 297421coinbase.com
297421coinbase.com
4 VTUnknownCoinbase
Screenshot of 297421coinbase.com
297421coinbase.com
Screenshot of 998232coinbase.com
998232coinbase.com
4 VTUnknownCoinbase
Screenshot of 998232coinbase.com
998232coinbase.com
Screenshot of chainvaultdapp.org
chainvaultdapp.org
4 VTActiveWallet Connect AbuseBinance
Screenshot of chainvaultdapp.org
chainvaultdapp.org
Screenshot of coinrescue.io
coinrescue.io
4 VTActive
Screenshot of coinrescue.io
coinrescue.io
Screenshot of cold-wallet.org
cold-wallet.org
4 VTActiveEthereum
Screenshot of cold-wallet.org
cold-wallet.org
Screenshot of guardchain.live
guardchain.live
4 VTActive
Screenshot of guardchain.live
guardchain.live
Screenshot of heliswaprestore.xyz
heliswaprestore.xyz
4 VTUnknowngenericcrypto
Screenshot of heliswaprestore.xyz
heliswaprestore.xyz
Screenshot of heyna.trade
heyna.trade
4 VTActivedydx
Screenshot of heyna.trade
heyna.trade
Screenshot of hyna.trade
hyna.trade
4 VTActivedydx
Screenshot of hyna.trade
hyna.trade
Screenshot of lacoursconstruction.group
lacoursconstruction.group
4 VTUnknown
Screenshot of lacoursconstruction.group
lacoursconstruction.group
Screenshot of recovermywallet.online
recovermywallet.online
4 VTUnknown
Screenshot of recovermywallet.online
recovermywallet.online
Screenshot of rpc-remote-protocol.com
rpc-remote-protocol.com
4 VTActive
Screenshot of rpc-remote-protocol.com
rpc-remote-protocol.com
Screenshot of stakeaztec.network
stakeaztec.network
4 VTActiveFacebook
Screenshot of stakeaztec.network
stakeaztec.network
Screenshot of us03webzoon.top
us03webzoon.top
4 VTActive
Screenshot of us03webzoon.top
us03webzoon.top
Screenshot of x402wh.xyz
x402wh.xyz
4 VTActiveacross
Screenshot of x402wh.xyz
x402wh.xyz
Screenshot of aztc.network
aztc.network
3 VTUnknownFacebook
Screenshot of aztc.network
aztc.network
Screenshot of friendlyhelpcommunity.com
friendlyhelpcommunity.com
3 VTUnknownacross
Screenshot of friendlyhelpcommunity.com
friendlyhelpcommunity.com
Screenshot of hackedwalletrecovery.com
hackedwalletrecovery.com
3 VTActiveEthereum
Screenshot of hackedwalletrecovery.com
hackedwalletrecovery.com
Screenshot of hhyena.trade
hhyena.trade
3 VTActivedydx
Screenshot of hhyena.trade
hhyena.trade
Screenshot of ismyseedphrasesafe.com
ismyseedphrasesafe.com
3 VTActiveledger
Screenshot of ismyseedphrasesafe.com
ismyseedphrasesafe.com
Screenshot of lethologica.nl
lethologica.nl
3 VTActive
Screenshot of lethologica.nl
lethologica.nl
Screenshot of megaservis.com
megaservis.com
3 VTActive
Screenshot of megaservis.com
megaservis.com
Screenshot of quantumwalletrecovery.org
quantumwalletrecovery.org
3 VTActiveacross
Screenshot of quantumwalletrecovery.org
quantumwalletrecovery.org
Screenshot of rewallet.de
rewallet.de
3 VTActiveEthereum
Screenshot of rewallet.de
rewallet.de
Screenshot of s-lon.lk
s-lon.lk
3 VTActive
Screenshot of s-lon.lk
s-lon.lk
Screenshot of satoshi-savers.com
satoshi-savers.com
3 VTActiveGoogle
Screenshot of satoshi-savers.com
satoshi-savers.com
Screenshot of wallettconnect.blogspot.com
wallettconnect.blogspot.com
3 VTActiveWalletConnect
Screenshot of wallettconnect.blogspot.com
wallettconnect.blogspot.com
Screenshot of amlstore.org
amlstore.org
2 VTUnknowncsgo
Screenshot of amlstore.org
amlstore.org
Screenshot of coinbase.ticket193963.com
coinbase.ticket193963.com
2 VTUnknownCoinbase
Screenshot of coinbase.ticket193963.com
coinbase.ticket193963.com
Screenshot of exod.exoqus.co.com
exod.exoqus.co.com
2 VTUnknown
Screenshot of exod.exoqus.co.com
exod.exoqus.co.com
Screenshot of meet-goagle.com
meet-goagle.com
2 VTUnknown
Screenshot of meet-goagle.com
meet-goagle.com
onchainr.pro
2 VTUnknownsolana
Screenshot of professionalcryptorecovery.com
professionalcryptorecovery.com
2 VTActiveacross
Screenshot of professionalcryptorecovery.com
professionalcryptorecovery.com
Screenshot of recover.biglabs.eu
recover.biglabs.eu
2 VTActive
Screenshot of recover.biglabs.eu
recover.biglabs.eu
Screenshot of smartrecover.net
smartrecover.net
2 VTActive
Screenshot of smartrecover.net
smartrecover.net
Screenshot of walletrescueservice.com
walletrescueservice.com
2 VTActive
Screenshot of walletrescueservice.com
walletrescueservice.com
Screenshot of www.professionalcryptorecovery.com
www.professionalcryptorecovery.com
2 VTActive
Screenshot of www.professionalcryptorecovery.com
www.professionalcryptorecovery.com
mnemonic-phrase-missing-word.pages.dev
1 VTActive
Screenshot of recover-cosmos-wallet.pages.dev
recover-cosmos-wallet.pages.dev
1 VTActive
Screenshot of recover-cosmos-wallet.pages.dev
recover-cosmos-wallet.pages.dev
Screenshot of restoredappsmodal.com
restoredappsmodal.com
1 VTUnknownAngel Draineracross
Screenshot of restoredappsmodal.com
restoredappsmodal.com
Screenshot of saveassetback.com
saveassetback.com
1 VTActive
Screenshot of saveassetback.com
saveassetback.com
Screenshot of williamsoncc.edu
williamsoncc.edu
1 VTActiveLedger
Screenshot of williamsoncc.edu
williamsoncc.edu
Screenshot of www.walletrecovery.com
www.walletrecovery.com
1 VTActive
Screenshot of www.walletrecovery.com
www.walletrecovery.com
Screenshot of xellox-website.pages.dev
xellox-website.pages.dev
1 VTActiveBitcoin
Screenshot of xellox-website.pages.dev
xellox-website.pages.dev
Screenshot of io.exoqus.co.com
io.exoqus.co.com
Unknownapple
Screenshot of io.exoqus.co.com
io.exoqus.co.com

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,995 Cloudflare 21,482 Dynadot 10,868 PDR Ltd. d/b/a PublicDomainRe... 8,036 Namecheap 7,827 GoDaddy 6,667 NameSilo 6,543 Gname.com Pte. Ltd. 6,527 WebNIC 5,152 Global Domain Group 4,377 Trustname.com 4,243 Tucows 4,217 Wix Studio 4,093 Hostinger 3,402 Vercel 2,859 GitHub, Inc. 2,765 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,164 OwnRegistrar, Inc. 2,013 Netlify 1,976 Hosting Concepts B.V. d/b/a R... 1,743 Cloudflare Pages 1,724 Name.com 1,668 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,447 REGRU-RU 1,428 Key-Systems 1,411 Squarespace Domains II 1,295

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,671 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Showing 97 domains above

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,747 genericcrypto 7,736 across 6,798 Google 6,364 Coinbase 4,214 MetaMask 3,899 Trezor 3,427 Solana 3,045 Ethereum 2,953 genericcloudflare 2,919 Binance 2,592 Kraken 2,495 Facebook 2,242 cryptoscam 1,827 Cloudflare 1,606 Apple 1,546 x.com 1,439 base 1,431 Microsoft 1,324 Bet365 1,320

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,033 Seed Phrase Theft 19 Airdrop Scam 8,312 Investment Scam 333

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust