Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

195,972
Total Tracked
195,972
VT Detected
93,915
Last Seen Active
98,304
Unavailable at Last Check
0
VT Pending
Namecheap

Namecheap 🇺🇸

🇺🇸 United States Founded 2000 IANA #1068 namecheap.com
7,869
Phishing Domains
4,947
Still Alive
2,922
Taken Down
98.5%
Detection Rate
7.3
Avg VT Score
62.9%
Alive Rate
7,869 phishing-domain abuse reports sent: Namecheap
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 7,869 domains registered through Namecheap, so the primary report total is 7,869. Database coverage starts Jul 24, 2024. 63% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.5% of domains flagged by VirusTotal 4,497 domains with VT ≥ 5
Tracking since Jul 2024 — latest: Aug 28, 2026
8/100
Global Risk Score — Low Risk
Based on 342M domains analyzed across 4,154 registrars
Full Analysis
23,150,904
Global Domains
37.5%
1-Year Reg
77.6%
Active IPs

NameCheap, Inc. has a low risk score of 8/100, indicating a relatively clean registrar environment. With 77.6% of domains having active IPs and only 22.4% without, the overall activity level is reassuring.

NameCheap, Inc. 7,869 domains
Screenshot of mediasync.cv
mediasync.cv
24 VTUnknownyoutube
Screenshot of mediasync.cv
mediasync.cv
Screenshot of 9y2awj2l.wsamoeesth.wefronetma4ms.ink
9y2awj2l.wsamoeesth.wefronetma4ms.ink
23 VTUnknownMicrosoft
Screenshot of 9y2awj2l.wsamoeesth.wefronetma4ms.ink
9y2awj2l.wsamoeesth.wefronetma4ms.ink
Screenshot of scootwinner.com
scootwinner.com
23 VTTaken DownBinance
Screenshot of scootwinner.com
scootwinner.com
Screenshot of updatdmsntfcn.liveblog365.com
updatdmsntfcn.liveblog365.com
23 VTCloaked · Livemicrosoft
Screenshot of updatdmsntfcn.liveblog365.com
updatdmsntfcn.liveblog365.com
Screenshot of wsamoeesth.wefronetma4ms.ink
wsamoeesth.wefronetma4ms.ink
23 VTUnknownGoogle
Screenshot of wsamoeesth.wefronetma4ms.ink
wsamoeesth.wefronetma4ms.ink
blockex.world
22 VTUnknownPayPal
Screenshot of dynamexcard.com
dynamexcard.com
22 VTActiveMEXC
Screenshot of dynamexcard.com
dynamexcard.com
Screenshot of facebook-feed7r6h.rollout.site
facebook-feed7r6h.rollout.site
22 VTUnknownFacebook
Screenshot of facebook-feed7r6h.rollout.site
facebook-feed7r6h.rollout.site
Screenshot of grked.online
grked.online
22 VTActive
Screenshot of grked.online
grked.online
Screenshot of instagram-ios-appg39b.rollout.site
instagram-ios-appg39b.rollout.site
22 VTUnknown["instagram"]
Screenshot of instagram-ios-appg39b.rollout.site
instagram-ios-appg39b.rollout.site
Screenshot of konf1rmasi-hadi4h10jut4.help1.site
konf1rmasi-hadi4h10jut4.help1.site
22 VTUnknowndana
Screenshot of konf1rmasi-hadi4h10jut4.help1.site
konf1rmasi-hadi4h10jut4.help1.site
Screenshot of oceancertsurveyors.com
oceancertsurveyors.com
22 VTActiveMicrosoft
Screenshot of oceancertsurveyors.com
oceancertsurveyors.com
Screenshot of 6ps7dukt.wsamoeesth.wefronetma4ms.ink
6ps7dukt.wsamoeesth.wefronetma4ms.ink
21 VTUnknownMicrosoft
Screenshot of 6ps7dukt.wsamoeesth.wefronetma4ms.ink
6ps7dukt.wsamoeesth.wefronetma4ms.ink
ajmontblanc.org
21 VTActive
Screenshot of americanmovingco.org
americanmovingco.org
21 VTCloaked · Liveadobe
Screenshot of americanmovingco.org
americanmovingco.org
Screenshot of app.renfrolan.com
app.renfrolan.com
21 VTActive
Screenshot of app.renfrolan.com
app.renfrolan.com
Screenshot of aviatronika.online
aviatronika.online
21 VTActive
Screenshot of aviatronika.online
aviatronika.online
Screenshot of bellsouth-att-sign-in-904158.webflow.io
bellsouth-att-sign-in-904158.webflow.io
21 VTUnknown
Screenshot of bellsouth-att-sign-in-904158.webflow.io
bellsouth-att-sign-in-904158.webflow.io
Screenshot of bingejobs.com
bingejobs.com
21 VTUnknown["netflix"]
Screenshot of bingejobs.com
bingejobs.com
Screenshot of dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
21 VTUnknown
Screenshot of dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
Screenshot of documentos-online.com
documentos-online.com
21 VTActive
Screenshot of documentos-online.com
documentos-online.com
Screenshot of geldchantix-trade.com
geldchantix-trade.com
21 VTUnknownbinance
Screenshot of geldchantix-trade.com
geldchantix-trade.com
Screenshot of help1.site
help1.site
21 VTUnknown
Screenshot of help1.site
help1.site
Screenshot of m.biblesignals.com
m.biblesignals.com
21 VTActive
Screenshot of m.biblesignals.com
m.biblesignals.com
Screenshot of metamasklogini.webflow.io
metamasklogini.webflow.io
21 VTUnknownMetaMask
Screenshot of metamasklogini.webflow.io
metamasklogini.webflow.io
Screenshot of ndrt.ink
ndrt.ink
21 VTActive
Screenshot of ndrt.ink
ndrt.ink
Screenshot of phamtom.online
phamtom.online
21 VTUnknownGoogle
Screenshot of phamtom.online
phamtom.online
robloxt.cv
21 VTTaken DownRoblox
Screenshot of syriatel.gamefy.io.proxy.openvpn-ssh.com
syriatel.gamefy.io.proxy.openvpn-ssh.com
21 VTTaken Downadobe
Screenshot of syriatel.gamefy.io.proxy.openvpn-ssh.com
syriatel.gamefy.io.proxy.openvpn-ssh.com
trixauvex.org
21 VTUnknown
Screenshot of vujpzqbycpkywvwi.digitalplatforumu.com
vujpzqbycpkywvwi.digitalplatforumu.com
21 VTActiveGoogle
Screenshot of vujpzqbycpkywvwi.digitalplatforumu.com
vujpzqbycpkywvwi.digitalplatforumu.com
Screenshot of yourtinyurl.live
yourtinyurl.live
21 VTCloaked · Live
Screenshot of yourtinyurl.live
yourtinyurl.live
Screenshot of yousitedecuidado-ec.infinityfree.me
yousitedecuidado-ec.infinityfree.me
21 VTCloaked · Live
Screenshot of yousitedecuidado-ec.infinityfree.me
yousitedecuidado-ec.infinityfree.me
Screenshot of zimbrastat.com
zimbrastat.com
21 VTActive
Screenshot of zimbrastat.com
zimbrastat.com
Screenshot of 156.67.218.149.sslip.io
156.67.218.149.sslip.io
20 VTUnknownApple
Screenshot of 156.67.218.149.sslip.io
156.67.218.149.sslip.io
Screenshot of 61oursectionalert-4a77a9.alpha-ai.page
61oursectionalert-4a77a9.alpha-ai.page
20 VTActivemicrosoft
Screenshot of 61oursectionalert-4a77a9.alpha-ai.page
61oursectionalert-4a77a9.alpha-ai.page
Screenshot of alert.casino6868.xyz
alert.casino6868.xyz
20 VTUnknownFacebook
Screenshot of alert.casino6868.xyz
alert.casino6868.xyz
Screenshot of aruty.com
aruty.com
20 VTActivegoogle
Screenshot of aruty.com
aruty.com
Screenshot of arvax.xyz
arvax.xyz
20 VTActive
Screenshot of arvax.xyz
arvax.xyz
auroravaultgame.com
20 VTActive
Screenshot of backoffice.myvibe.co
backoffice.myvibe.co
20 VTActiveMetaMask
Screenshot of backoffice.myvibe.co
backoffice.myvibe.co
Screenshot of bellsouth-att-sign-in-850e6d.webflow.io
bellsouth-att-sign-in-850e6d.webflow.io
20 VTUnknown
Screenshot of bellsouth-att-sign-in-850e6d.webflow.io
bellsouth-att-sign-in-850e6d.webflow.io
Screenshot of bet.ply365.net
bet.ply365.net
20 VTUnknownBet365
Screenshot of bet.ply365.net
bet.ply365.net
Screenshot of biblesignals.com
biblesignals.com
20 VTActive
Screenshot of biblesignals.com
biblesignals.com
Screenshot of bitmartxlogink.webflow.io
bitmartxlogink.webflow.io
20 VTUnknown["ethereum"]
Screenshot of bitmartxlogink.webflow.io
bitmartxlogink.webflow.io
Screenshot of danaaa-paylaateerr.brodhi.me
danaaa-paylaateerr.brodhi.me
20 VTUnknowndana
Screenshot of danaaa-paylaateerr.brodhi.me
danaaa-paylaateerr.brodhi.me
digitalplatforumu.com
20 VTActiveGoogle
Screenshot of direct-login-update.webflow.io
direct-login-update.webflow.io
20 VTUnknown
Screenshot of direct-login-update.webflow.io
direct-login-update.webflow.io
domatisc.ink
20 VTUnknownGoogle
Screenshot of easycab.thetrybe.xyz
easycab.thetrybe.xyz
20 VTActivegenericemail
Screenshot of easycab.thetrybe.xyz
easycab.thetrybe.xyz
Screenshot of fundmyprop.com
fundmyprop.com
20 VTActivetrustwallet
Screenshot of fundmyprop.com
fundmyprop.com
Screenshot of housecleaningservicemiramar.com
housecleaningservicemiramar.com
20 VTActive
Screenshot of housecleaningservicemiramar.com
housecleaningservicemiramar.com
Screenshot of houstontacolover.com
houstontacolover.com
20 VTCloaked · Livedocusign
Screenshot of houstontacolover.com
houstontacolover.com
Screenshot of icrmoving.com
icrmoving.com
20 VTActivetrustwallet
Screenshot of icrmoving.com
icrmoving.com
Screenshot of kucoin-login-authh.webflow.io
kucoin-login-authh.webflow.io
20 VTActiveKuCoin
Screenshot of kucoin-login-authh.webflow.io
kucoin-login-authh.webflow.io
Screenshot of kucoinloginc.webflow.io
kucoinloginc.webflow.io
20 VTUnknownKuCoin
Screenshot of kucoinloginc.webflow.io
kucoinloginc.webflow.io
linkedall.org
20 VTActive
linkedwith.org
20 VTActive
lostmoneyforum.com
20 VTUnknown
Screenshot of lvl99.store
lvl99.store
20 VTActive
Screenshot of lvl99.store
lvl99.store
Screenshot of m-app--start-trezor.webflow.io
m-app--start-trezor.webflow.io
20 VTUnknownTrezor
Screenshot of m-app--start-trezor.webflow.io
m-app--start-trezor.webflow.io
Screenshot of metamesklgi.webflow.io
metamesklgi.webflow.io
20 VTUnknownMetaMask
Screenshot of metamesklgi.webflow.io
metamesklgi.webflow.io
Screenshot of metiiimask-extensio.webflow.io
metiiimask-extensio.webflow.io
20 VTUnknownMetaMask
Screenshot of metiiimask-extensio.webflow.io
metiiimask-extensio.webflow.io
Screenshot of mut-tamask-wellat.webflow.io
mut-tamask-wellat.webflow.io
20 VTUnknownMetaMask
Screenshot of mut-tamask-wellat.webflow.io
mut-tamask-wellat.webflow.io
mxlclinfo.com
20 VTActive
Screenshot of mxx66.net
mxx66.net
20 VTActivetelegram
Screenshot of mxx66.net
mxx66.net
Screenshot of nestli.pro
nestli.pro
20 VTActive
Screenshot of nestli.pro
nestli.pro
Screenshot of netflixfw54.rollout.site
netflixfw54.rollout.site
20 VTUnknownNetflix
Screenshot of netflixfw54.rollout.site
netflixfw54.rollout.site
Screenshot of padisahbetwebsayfasi.live
padisahbetwebsayfasi.live
20 VTActive
Screenshot of padisahbetwebsayfasi.live
padisahbetwebsayfasi.live
Screenshot of portal-live-ledgar.webflow.io
portal-live-ledgar.webflow.io
20 VTActiveLedger
Screenshot of portal-live-ledgar.webflow.io
portal-live-ledgar.webflow.io
Screenshot of rblox.me
rblox.me
20 VTTaken Downroblox
Screenshot of rblox.me
rblox.me
Screenshot of robuxruleonline.vip
robuxruleonline.vip
20 VTCloaked · Liveroblox
Screenshot of robuxruleonline.vip
robuxruleonline.vip
Screenshot of sso-uphold-com-cdnn-auth-en-u.webflow.io
sso-uphold-com-cdnn-auth-en-u.webflow.io
20 VTUnknown
Screenshot of sso-uphold-com-cdnn-auth-en-u.webflow.io
sso-uphold-com-cdnn-auth-en-u.webflow.io
Screenshot of sweeply.my
sweeply.my
20 VTTaken Downyoutube
Screenshot of sweeply.my
sweeply.my
Screenshot of tiktok.tnzmedia.com
tiktok.tnzmedia.com
20 VTTaken Down["tiktok"]
Screenshot of tiktok.tnzmedia.com
tiktok.tnzmedia.com
usdgift.cc
20 VTActive
varenie.live
20 VTActive
Screenshot of winupdate.ink
winupdate.ink
20 VTActive
Screenshot of winupdate.ink
winupdate.ink
Screenshot of xalurxojup.cyou
xalurxojup.cyou
20 VTTaken Down
Screenshot of xalurxojup.cyou
xalurxojup.cyou
Screenshot of 250njrvefdosc.com
250njrvefdosc.com
19 VTActive
Screenshot of 250njrvefdosc.com
250njrvefdosc.com
Screenshot of 4refdwcneowdmce4.com
4refdwcneowdmce4.com
19 VTActive
Screenshot of 4refdwcneowdmce4.com
4refdwcneowdmce4.com
Screenshot of 4ribjevnkfdclsx.com
4ribjevnkfdclsx.com
19 VTActive
Screenshot of 4ribjevnkfdclsx.com
4ribjevnkfdclsx.com
Screenshot of 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
19 VTUnknownbancopichincha
Screenshot of 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
Screenshot of 67fvcbejdskjx.com
67fvcbejdskjx.com
19 VTActive
Screenshot of 67fvcbejdskjx.com
67fvcbejdskjx.com
Screenshot of 7x4r.com
7x4r.com
19 VTUnknown
Screenshot of 7x4r.com
7x4r.com
Screenshot of aboveandbeyondcreatives.com
aboveandbeyondcreatives.com
19 VTActive
Screenshot of aboveandbeyondcreatives.com
aboveandbeyondcreatives.com
aimevbot.cc
19 VTActive
al-akshaintl.com
19 VTCloaked · Livedocusign
Screenshot of amarifirmdynamic-concepts.com
amarifirmdynamic-concepts.com
19 VTActiveGoogle
Screenshot of amarifirmdynamic-concepts.com
amarifirmdynamic-concepts.com
anus-staylard.xyz
19 VTTaken Down
asteara.org
19 VTUnknown
Screenshot of auth-ndaxlogus.webflow.io
auth-ndaxlogus.webflow.io
19 VTActivendax
Screenshot of auth-ndaxlogus.webflow.io
auth-ndaxlogus.webflow.io
Screenshot of bellsouth-att-signing-verify-48fc56.webflow.io
bellsouth-att-signing-verify-48fc56.webflow.io
19 VTUnknown
Screenshot of bellsouth-att-signing-verify-48fc56.webflow.io
bellsouth-att-signing-verify-48fc56.webflow.io
bersatu.me
19 VTActive
Screenshot of bet365.casinologinonline.com
bet365.casinologinonline.com
19 VTActiveBet365
Screenshot of bet365.casinologinonline.com
bet365.casinologinonline.com
Screenshot of blockchainlogin.webflow.io
blockchainlogin.webflow.io
19 VTUnknown
Screenshot of blockchainlogin.webflow.io
blockchainlogin.webflow.io
bonusgame-revo.win
19 VTActive
deep-ai-guard.store
19 VTUnknown
Screenshot of defiarthubx.com
defiarthubx.com
19 VTActivegenericcrypto
Screenshot of defiarthubx.com
defiarthubx.com
dinghdjushs.info
19 VTTaken Down
1 2 3 4 Next » Page 1 of 79

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,048 Cloudflare 21,492 Dynadot 10,917 PDR Ltd. d/b/a PublicDomainRe... 8,054 Namecheap 7,869 GoDaddy 6,694 NameSilo 6,553 Gname.com Pte. Ltd. 6,541 WebNIC 5,154 Global Domain Group 4,399 Trustname.com 4,250 Tucows 4,231 Wix Studio 4,093 Hostinger 3,407 Vercel 2,859 GitHub, Inc. 2,772 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,188 OwnRegistrar, Inc. 2,019 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,754 Cloudflare Pages 1,724 Name.com 1,681 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,449 REGRU-RU 1,430 Key-Systems 1,413 Squarespace Domains II 1,296

Showing 7,869 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,748 genericcrypto 7,740 across 6,798 Google 6,367 Coinbase 4,215 MetaMask 3,903 Trezor 3,427 Solana 3,053 Ethereum 2,953 genericcloudflare 2,919 Binance 2,595 Kraken 2,497 Facebook 2,242 cryptoscam 1,827 Cloudflare 1,607 Apple 1,549 x.com 1,439 base 1,432 Microsoft 1,324 Bet365 1,321

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,035 Seed Phrase Theft 19 Airdrop Scam 8,321 Investment Scam 335

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust