Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

195,987
Total Tracked
195,987
VT Detected
89,032
Last Seen Active
108,303
Unavailable at Last Check
0
VT Pending
Global Domain Group

Global Domain Group 🇺🇸

🇺🇸 United States Founded 2020 IANA #3956 globaldomaingroup.net
4,401
Phishing Domains
2,959
Still Alive
1,442
Taken Down
99.4%
Detection Rate
9.6
Avg VT Score
67.2%
Alive Rate
4,401 phishing-domain abuse reports sent: Global Domain Group
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 4,401 domains registered through Global Domain Group, so the primary report total is 4,401. Database coverage starts Feb 2, 2025. 67% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.4% of domains flagged by VirusTotal 3,380 domains with VT ≥ 5
Tracking since Feb 2025 — latest: Aug 29, 2026
Global Domain Group LLC 4,401 domains
krab----2.cc
14 VTActiveMetaMask
Screenshot of kraken-krab15.sbs
kraken-krab15.sbs
14 VTUnknownKraken
Screenshot of kraken-krab15.sbs
kraken-krab15.sbs
krakenblack.biz
14 VTActiveKraken
Screenshot of kyrex.cc
kyrex.cc
14 VTActivegenericcrypto
Screenshot of kyrex.cc
kyrex.cc
Screenshot of legal-support.club
legal-support.club
14 VTActive
Screenshot of legal-support.club
legal-support.club
Screenshot of linebetx.top
linebetx.top
14 VTUnknownCrypto Casino / Gambling
Screenshot of linebetx.top
linebetx.top
Screenshot of lite-base.top
lite-base.top
14 VTUnknown
Screenshot of lite-base.top
lite-base.top
Screenshot of login.workshopartistlibrary.com
login.workshopartistlibrary.com
14 VTActivecs2
Screenshot of login.workshopartistlibrary.com
login.workshopartistlibrary.com
Screenshot of login.workshopbrowsemods.com
login.workshopbrowsemods.com
14 VTActivecs2
Screenshot of login.workshopbrowsemods.com
login.workshopbrowsemods.com
Screenshot of login.workshopskingallery.com
login.workshopskingallery.com
14 VTTaken Downcs2
Screenshot of login.workshopskingallery.com
login.workshopskingallery.com
Screenshot of login.workshopusercontent.com
login.workshopusercontent.com
14 VTActivecs2
Screenshot of login.workshopusercontent.com
login.workshopusercontent.com
Screenshot of login.workshopuservotes.com
login.workshopuservotes.com
14 VTActivecs2
Screenshot of login.workshopuservotes.com
login.workshopuservotes.com
Screenshot of lootixy.info
lootixy.info
14 VTActiveEpic Games
Screenshot of lootixy.info
lootixy.info
Screenshot of lurvex.top
lurvex.top
14 VTActiveepicgames
Screenshot of lurvex.top
lurvex.top
Screenshot of magicrust.org
magicrust.org
14 VTUnknownEthereum
Screenshot of magicrust.org
magicrust.org
Screenshot of makepex.com
makepex.com
14 VTActivegenericcrypto
Screenshot of makepex.com
makepex.com
Screenshot of maple-ledger.online
maple-ledger.online
14 VTActiveLedger
Screenshot of maple-ledger.online
maple-ledger.online
matreshkabalalaika.com
14 VTActive
meetup-trustwallet.info
14 VTActiveTrust Wallet
Screenshot of metamaskpayouts.io
metamaskpayouts.io
14 VTActiveMetaMask
Screenshot of metamaskpayouts.io
metamaskpayouts.io
mktvaultcpt.com
14 VTActive
Screenshot of moca-rewards.foundation
moca-rewards.foundation
14 VTActive
Screenshot of moca-rewards.foundation
moca-rewards.foundation
Screenshot of moon-vote.bond
moon-vote.bond
14 VTActive
Screenshot of moon-vote.bond
moon-vote.bond
Screenshot of moonlisting.click
moonlisting.click
14 VTUnknownMoonshot
Screenshot of moonlisting.click
moonlisting.click
Screenshot of moonshoot-vote.help
moonshoot-vote.help
14 VTUnknownmoonshot
Screenshot of moonshoot-vote.help
moonshoot-vote.help
Screenshot of moonshot-money.fun
moonshot-money.fun
14 VTActiveMoonshot
Screenshot of moonshot-money.fun
moonshot-money.fun
Screenshot of moonshot-money.space
moonshot-money.space
14 VTActiveMoonshot
Screenshot of moonshot-money.space
moonshot-money.space
Screenshot of msbank.pro
msbank.pro
14 VTActive
Screenshot of msbank.pro
msbank.pro
Screenshot of myrsedch.click
myrsedch.click
14 VTActivegeneric
Screenshot of myrsedch.click
myrsedch.click
Screenshot of navomex.com
navomex.com
14 VTCloaked · LiveMEXC
Screenshot of navomex.com
navomex.com
Screenshot of neo-cas.cc
neo-cas.cc
14 VTActivegenericcrypto
Screenshot of neo-cas.cc
neo-cas.cc
Screenshot of neo-spin.live
neo-spin.live
14 VTActivegenericcrypto
Screenshot of neo-spin.live
neo-spin.live
Screenshot of neonwin.cc
neonwin.cc
14 VTActivegenericcrypto
Screenshot of neonwin.cc
neonwin.cc
Screenshot of neversino.cc
neversino.cc
14 VTActivegenericcrypto
Screenshot of neversino.cc
neversino.cc
nimcas.com
14 VTTaken Downgenericcrypto
Screenshot of nodesynchronize.live
nodesynchronize.live
14 VTActivegenericcrypto
Screenshot of nodesynchronize.live
nodesynchronize.live
Screenshot of nordvik.biz
nordvik.biz
14 VTUnknowngenericcrypto
Screenshot of nordvik.biz
nordvik.biz
Screenshot of nvfort.lol
nvfort.lol
14 VTActiveEpic Games
Screenshot of nvfort.lol
nvfort.lol
Screenshot of omnimusk.live
omnimusk.live
14 VTActiveinvestmentscam
Screenshot of omnimusk.live
omnimusk.live
Screenshot of onlyfanswin.cc
onlyfanswin.cc
14 VTUnknowngenericcrypto
Screenshot of onlyfanswin.cc
onlyfanswin.cc
Screenshot of order-verification2026.shop
order-verification2026.shop
14 VTActiveGoogle
Screenshot of order-verification2026.shop
order-verification2026.shop
Screenshot of padrecheck.fun
padrecheck.fun
14 VTActiveSolana Drainersolana
Screenshot of padrecheck.fun
padrecheck.fun
Screenshot of pakepex.com
pakepex.com
14 VTActivegenericcrypto
Screenshot of pakepex.com
pakepex.com
Screenshot of palowex.com
palowex.com
14 VTActivegenericcrypto
Screenshot of palowex.com
palowex.com
Screenshot of pengucore.lol
pengucore.lol
14 VTTaken Down["solana"]
Screenshot of pengucore.lol
pengucore.lol
Screenshot of petitions-change.com
petitions-change.com
14 VTActive
Screenshot of petitions-change.com
petitions-change.com
Screenshot of pharosnetwsworks.com
pharosnetwsworks.com
14 VTActivegenericcrypto
Screenshot of pharosnetwsworks.com
pharosnetwsworks.com
phersonetwork.com
14 VTCloaked · LiveGoogle
Screenshot of pi-xchange.com
pi-xchange.com
14 VTTaken DownFacebook
Screenshot of pi-xchange.com
pi-xchange.com
pinnaclepurex.com
14 VTActive
Screenshot of playgrand.cc
playgrand.cc
14 VTActivegenericcrypto
Screenshot of playgrand.cc
playgrand.cc
Screenshot of ponzobet.com
ponzobet.com
14 VTTaken Downgenericcrypto
Screenshot of ponzobet.com
ponzobet.com
Screenshot of postfinance.club
postfinance.club
14 VTActive
Screenshot of postfinance.club
postfinance.club
Screenshot of pqumocqb.click
pqumocqb.click
14 VTActivegeneric
Screenshot of pqumocqb.click
pqumocqb.click
Screenshot of pragmat-bet.live
pragmat-bet.live
14 VTActivecryptoscam
Screenshot of pragmat-bet.live
pragmat-bet.live
Screenshot of primesovera.online
primesovera.online
14 VTActivegenericbanking
Screenshot of primesovera.online
primesovera.online
Screenshot of primyx.live
primyx.live
14 VTActive
Screenshot of primyx.live
primyx.live
Screenshot of pspins.cc
pspins.cc
14 VTActivegenericcrypto
Screenshot of pspins.cc
pspins.cc
Screenshot of psyopanime.cc
psyopanime.cc
14 VTActive
Screenshot of psyopanime.cc
psyopanime.cc
Screenshot of pulsesol.live
pulsesol.live
14 VTActive
Screenshot of pulsesol.live
pulsesol.live
pump-joinstream.fun
14 VTTaken Down
pump-stream.live
14 VTActive
Screenshot of pump-vault.fun
pump-vault.fun
14 VTActivephantom
Screenshot of pump-vault.fun
pump-vault.fun
Screenshot of pump-vision.pro
pump-vision.pro
14 VTActivePump.fun
Screenshot of pump-vision.pro
pump-vision.pro
Screenshot of qbgmdble.click
qbgmdble.click
14 VTActivegeneric
Screenshot of qbgmdble.click
qbgmdble.click
Screenshot of qd.muhgsdd.sbs
qd.muhgsdd.sbs
14 VTTaken Downtiktok
Screenshot of qd.muhgsdd.sbs
qd.muhgsdd.sbs
Screenshot of qwyuczje.click
qwyuczje.click
14 VTActivegeneric
Screenshot of qwyuczje.click
qwyuczje.click
rbxtools.cc
14 VTActive
Screenshot of rbxtools.digital
rbxtools.digital
14 VTActiveRoblox
Screenshot of rbxtools.digital
rbxtools.digital
Screenshot of received-confirm-sol.click
received-confirm-sol.click
14 VTCloaked · LiveSolana
Screenshot of received-confirm-sol.click
received-confirm-sol.click
recovery-ekubo.org
14 VTActive
Screenshot of rectifywallet.click
rectifywallet.click
14 VTActiveSolana Drainer
Screenshot of rectifywallet.click
rectifywallet.click
Screenshot of recuvahackersolutions.com
recuvahackersolutions.com
14 VTActiveBitcoin
Screenshot of recuvahackersolutions.com
recuvahackersolutions.com
renouvellement.monabo.info
14 VTActive
risex.exchange
14 VTActive
Screenshot of roforge.co
roforge.co
14 VTTaken Downceler
Screenshot of roforge.co
roforge.co
Screenshot of royal-exchange.club
royal-exchange.club
14 VTActiveinvestmentscam
Screenshot of royal-exchange.club
royal-exchange.club
Screenshot of royal-stake.cc
royal-stake.cc
14 VTActivegenericcrypto
Screenshot of royal-stake.cc
royal-stake.cc
Screenshot of safe.ledgerweb3chain.com
safe.ledgerweb3chain.com
14 VTTaken Down1inch
Screenshot of safe.ledgerweb3chain.com
safe.ledgerweb3chain.com
Screenshot of saharalabsai.com
saharalabsai.com
14 VTActive
Screenshot of saharalabsai.com
saharalabsai.com
Screenshot of sakepex.com
sakepex.com
14 VTActivex.com
Screenshot of sakepex.com
sakepex.com
Screenshot of sanowex.com
sanowex.com
14 VTActivegenericcrypto
Screenshot of sanowex.com
sanowex.com
savecapital.cyou
14 VTActive
Screenshot of scanclaw.live
scanclaw.live
14 VTActive
Screenshot of scanclaw.live
scanclaw.live
Screenshot of scriptblox.cc
scriptblox.cc
14 VTTaken Down
Screenshot of scriptblox.cc
scriptblox.cc
Screenshot of securego-update.biz
securego-update.biz
14 VTActiveMetaMask
Screenshot of securego-update.biz
securego-update.biz
secureid-loginca.com
14 VTActiveFacebook
Screenshot of senidex.com
senidex.com
14 VTActivegenericcrypto
Screenshot of senidex.com
senidex.com
Screenshot of sentineledgesb.com
sentineledgesb.com
14 VTActive
Screenshot of sentineledgesb.com
sentineledgesb.com
Screenshot of signalstacktrend.live
signalstacktrend.live
14 VTActive
Screenshot of signalstacktrend.live
signalstacktrend.live
simplytaoai.com
14 VTActive
Screenshot of skinout.org
skinout.org
14 VTActive
Screenshot of skinout.org
skinout.org
Screenshot of slon67.shop
slon67.shop
14 VTTaken DownKraken
Screenshot of slon67.shop
slon67.shop
Screenshot of sol-drops.lol
sol-drops.lol
14 VTActiveSolana
Screenshot of sol-drops.lol
sol-drops.lol
Screenshot of sol-good.pro
sol-good.pro
14 VTActiveSolana Drainersolana
Screenshot of sol-good.pro
sol-good.pro
Screenshot of sol-helper.click
sol-helper.click
14 VTActiveSolana
Screenshot of sol-helper.click
sol-helper.click
Screenshot of sol-helper.org
sol-helper.org
14 VTActiveAngel DrainerSolana
Screenshot of sol-helper.org
sol-helper.org
Screenshot of sol-predict.click
sol-predict.click
14 VTActiveSolana
Screenshot of sol-predict.click
sol-predict.click
Screenshot of sol-scope.help
sol-scope.help
14 VTActiveSolana
Screenshot of sol-scope.help
sol-scope.help
Screenshot of sol-vision.click
sol-vision.click
14 VTActiveAngel DrainerSolana
Screenshot of sol-vision.click
sol-vision.click
« Prev 9 10 11 12 13 14 15 Next » Page 12 of 45

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,052 Cloudflare 21,492 Dynadot 10,919 PDR Ltd. d/b/a PublicDomainRe... 8,054 Namecheap 7,869 GoDaddy 6,694 NameSilo 6,554 Gname.com Pte. Ltd. 6,541 WebNIC 5,154 Global Domain Group 4,401 Trustname.com 4,257 Tucows 4,232 Wix Studio 4,093 Hostinger 3,407 Vercel 2,859 GitHub, Inc. 2,772 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,192 OwnRegistrar, Inc. 2,019 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,754 Cloudflare Pages 1,724 Name.com 1,681 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,450 REGRU-RU 1,430 Key-Systems 1,413 Squarespace Domains II 1,296

Showing 4,401 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,748 genericcrypto 7,740 across 6,798 Google 6,377 Coinbase 4,215 MetaMask 4,083 Trezor 3,428 Solana 3,054 Ethereum 2,954 genericcloudflare 2,919 Binance 2,595 Kraken 2,497 Facebook 2,242 cryptoscam 1,832 Cloudflare 1,607 Apple 1,549 x.com 1,439 base 1,432 Microsoft 1,324 Bet365 1,321

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,035 Seed Phrase Theft 19 Airdrop Scam 8,321 Investment Scam 335

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust