Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

195,589
Total Tracked
195,579
VT Detected
88,122
Last Seen Active
98,339
Unavailable at Last Check
19
VT Pending
Mat Bao

Mat Bao 🇻🇳

🇻🇳 Vietnam Founded 2002 IANA #1586 matbao.net
1,488
Phishing Domains
331
Still Alive
1,157
Taken Down
99.3%
Detection Rate
8.6
Avg VT Score
22.2%
Alive Rate
1,488 phishing-domain abuse reports sent: Mat Bao
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,488 domains registered through Mat Bao, so the primary report total is 1,488. Database coverage starts Jul 10, 2025. 22% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.3% of domains flagged by VirusTotal 991 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 26, 2026
MAT BAO CORPORATION 1,488 domains
Screenshot of gazwex.com
gazwex.com
16 VTUnknowngenericcrypto
Screenshot of gazwex.com
gazwex.com
Screenshot of gipowex.com
gipowex.com
16 VTUnknowngenericcrypto
Screenshot of gipowex.com
gipowex.com
Screenshot of gogowex.com
gogowex.com
16 VTUnknowngenericcrypto
Screenshot of gogowex.com
gogowex.com
Screenshot of gonedex.com
gonedex.com
16 VTUnknowngenericcrypto
Screenshot of gonedex.com
gonedex.com
Screenshot of gurofex.com
gurofex.com
16 VTUnknowngenericcrypto
Screenshot of gurofex.com
gurofex.com
Screenshot of herofex.com
herofex.com
16 VTUnknowngenericcrypto
Screenshot of herofex.com
herofex.com
Screenshot of jefowex.com
jefowex.com
16 VTUnknownGoogle
Screenshot of jefowex.com
jefowex.com
Screenshot of jemofex.com
jemofex.com
16 VTUnknowngenericcrypto
Screenshot of jemofex.com
jemofex.com
Screenshot of kaicasino.com
kaicasino.com
16 VTUnknowngenericcrypto
Screenshot of kaicasino.com
kaicasino.com
Screenshot of kardibed.com
kardibed.com
16 VTUnknowngenericcrypto
Screenshot of kardibed.com
kardibed.com
Screenshot of kizowex.com
kizowex.com
16 VTTaken Downgenericcrypto
Screenshot of kizowex.com
kizowex.com
Screenshot of ledgeer-live.com
ledgeer-live.com
16 VTUnknownLedger
Screenshot of ledgeer-live.com
ledgeer-live.com
Screenshot of llittlepepe.com
llittlepepe.com
16 VTActiveAngel Drainergenericcrypto
Screenshot of llittlepepe.com
llittlepepe.com
Screenshot of max-wallconnecttesting-z1.com
max-wallconnecttesting-z1.com
16 VTUnknowngenericcloudflare
Screenshot of max-wallconnecttesting-z1.com
max-wallconnecttesting-z1.com
Screenshot of meziwex.com
meziwex.com
16 VTUnknowngenericcrypto
Screenshot of meziwex.com
meziwex.com
Screenshot of nelarion.com
nelarion.com
16 VTUnknowngenericcrypto
Screenshot of nelarion.com
nelarion.com
Screenshot of neverban.cc
neverban.cc
16 VTActive
Screenshot of neverban.cc
neverban.cc
Screenshot of nulowex.com
nulowex.com
16 VTUnknowngenericcrypto
Screenshot of nulowex.com
nulowex.com
olimpyx.com
16 VTActivegenericcrypto
Screenshot of punowex.com
punowex.com
16 VTTaken Downgenericcrypto
Screenshot of punowex.com
punowex.com
Screenshot of rexwex.com
rexwex.com
16 VTTaken Downgenericcrypto
Screenshot of rexwex.com
rexwex.com
Screenshot of robux-store.com
robux-store.com
16 VTTaken Downroblox
Screenshot of robux-store.com
robux-store.com
Screenshot of roxborn.com
roxborn.com
16 VTTaken Down
Screenshot of roxborn.com
roxborn.com
Screenshot of savileno.com
savileno.com
16 VTTaken Downcryptoscam
Screenshot of savileno.com
savileno.com
Screenshot of spirush.com
spirush.com
16 VTTaken Down
Screenshot of spirush.com
spirush.com
Screenshot of stackrectify.com
stackrectify.com
16 VTActiveWalletConnect
Screenshot of stackrectify.com
stackrectify.com
Screenshot of stage3.wpengine-universalimaginginc.com
stage3.wpengine-universalimaginginc.com
16 VTUnknown
Screenshot of stage3.wpengine-universalimaginginc.com
stage3.wpengine-universalimaginginc.com
Screenshot of statibet.com
statibet.com
16 VTTaken Downgenericcrypto
Screenshot of statibet.com
statibet.com
store.workshoplistmods.com
16 VTActive
Screenshot of store.workshopmodsviews.com
store.workshopmodsviews.com
16 VTTaken DownFacebook
Screenshot of store.workshopmodsviews.com
store.workshopmodsviews.com
Screenshot of tefwex.com
tefwex.com
16 VTTaken Downgenericcrypto
Screenshot of tefwex.com
tefwex.com
Screenshot of teowex.com
teowex.com
16 VTTaken Downgenericcrypto
Screenshot of teowex.com
teowex.com
Screenshot of tezomex.com
tezomex.com
16 VTTaken DownMEXC
Screenshot of tezomex.com
tezomex.com
Screenshot of tizwex.com
tizwex.com
16 VTTaken Down
Screenshot of tizwex.com
tizwex.com
Screenshot of torycasino.com
torycasino.com
16 VTTaken Downgenericcrypto
Screenshot of torycasino.com
torycasino.com
Screenshot of wallettconnect.com
wallettconnect.com
16 VTActiveSolana Drainer
Screenshot of wallettconnect.com
wallettconnect.com
Screenshot of web-iqoption.com
web-iqoption.com
16 VTActiveapple
Screenshot of web-iqoption.com
web-iqoption.com
Screenshot of wegofex.com
wegofex.com
16 VTTaken Downgenericcrypto
Screenshot of wegofex.com
wegofex.com
Screenshot of weoplayers.com
weoplayers.com
16 VTTaken Downgenericcrypto
Screenshot of weoplayers.com
weoplayers.com
Screenshot of workshopdevcreated.com
workshopdevcreated.com
16 VTTaken Downcs2
Screenshot of workshopdevcreated.com
workshopdevcreated.com
Screenshot of workshopskinrelease.com
workshopskinrelease.com
16 VTTaken Downcounter-strike
Screenshot of workshopskinrelease.com
workshopskinrelease.com
Screenshot of zekomex.com
zekomex.com
16 VTTaken DownMEXC
Screenshot of zekomex.com
zekomex.com
Screenshot of 094523coinbase.com
094523coinbase.com
15 VTTaken DownCoinbase
Screenshot of 094523coinbase.com
094523coinbase.com
app-magmafinance.com
15 VTActive
Screenshot of app.sonicpts.com
app.sonicpts.com
15 VTUnknown
Screenshot of app.sonicpts.com
app.sonicpts.com
Screenshot of astercas.com
astercas.com
15 VTTaken Downgenericcrypto
Screenshot of astercas.com
astercas.com
Screenshot of autoamlbot.com
autoamlbot.com
15 VTActiveaave
Screenshot of autoamlbot.com
autoamlbot.com
Screenshot of beastthex.com
beastthex.com
15 VTUnknowncryptoscam
Screenshot of beastthex.com
beastthex.com
Screenshot of bemotex.com
bemotex.com
15 VTCloaked · Liveton
Screenshot of bemotex.com
bemotex.com
Screenshot of betvarnix.com
betvarnix.com
15 VTUnknowngenericcrypto
Screenshot of betvarnix.com
betvarnix.com
Screenshot of blockdappsprotocol.com
blockdappsprotocol.com
15 VTActiveCloudflare
Screenshot of blockdappsprotocol.com
blockdappsprotocol.com
Screenshot of booking.provide-dates576873.com
booking.provide-dates576873.com
15 VTUnknown
Screenshot of booking.provide-dates576873.com
booking.provide-dates576873.com
Screenshot of bybit-ru.com
bybit-ru.com
15 VTUnknownBybit
Screenshot of bybit-ru.com
bybit-ru.com
Screenshot of cas5x.com
cas5x.com
15 VTUnknowngenericcrypto
Screenshot of cas5x.com
cas5x.com
Screenshot of cemodex.com
cemodex.com
15 VTUnknown
Screenshot of cemodex.com
cemodex.com
Screenshot of centvip.com
centvip.com
15 VTUnknowngenericcrypto
Screenshot of centvip.com
centvip.com
Screenshot of claim-atomicwallet.com
claim-atomicwallet.com
15 VTActiveAtomic Wallet
Screenshot of claim-atomicwallet.com
claim-atomicwallet.com
Screenshot of discordconnects.com
discordconnects.com
15 VTUnknownsteam
Screenshot of discordconnects.com
discordconnects.com
Screenshot of dofwex.com
dofwex.com
15 VTActivegenericcrypto
Screenshot of dofwex.com
dofwex.com
Screenshot of domerex.com
domerex.com
15 VTUnknowngenericcrypto
Screenshot of domerex.com
domerex.com
Screenshot of dotwex.com
dotwex.com
15 VTUnknowngenericcrypto
Screenshot of dotwex.com
dotwex.com
Screenshot of edowex.com
edowex.com
15 VTTaken Downgenericcrypto
Screenshot of edowex.com
edowex.com
Screenshot of faderex.com
faderex.com
15 VTUnknownTrump Token
Screenshot of faderex.com
faderex.com
Screenshot of fidowex.com
fidowex.com
15 VTUnknown
Screenshot of fidowex.com
fidowex.com
Screenshot of flexcas.com
flexcas.com
15 VTActivecryptoscam
Screenshot of flexcas.com
flexcas.com
Screenshot of fortnitec.com
fortnitec.com
15 VTActiveepicgames
Screenshot of fortnitec.com
fortnitec.com
Screenshot of fortvalued.com
fortvalued.com
15 VTActive
Screenshot of fortvalued.com
fortvalued.com
Screenshot of foxowex.com
foxowex.com
15 VTUnknowngenericcrypto
Screenshot of foxowex.com
foxowex.com
Screenshot of gglocker.com
gglocker.com
15 VTActive
Screenshot of gglocker.com
gglocker.com
Screenshot of ggzup.com
ggzup.com
15 VTUnknowngenericcrypto
Screenshot of ggzup.com
ggzup.com
Screenshot of gixboom.com
gixboom.com
15 VTUnknowngenericcrypto
Screenshot of gixboom.com
gixboom.com
Screenshot of goldxslots.com
goldxslots.com
15 VTUnknowngenericcrypto
Screenshot of goldxslots.com
goldxslots.com
Screenshot of gopowex.com
gopowex.com
15 VTUnknowngenericcrypto
Screenshot of gopowex.com
gopowex.com
Screenshot of gotowex.com
gotowex.com
15 VTTaken Downgenericcrypto
Screenshot of gotowex.com
gotowex.com
Screenshot of grokcas.com
grokcas.com
15 VTUnknowngenericcrypto
Screenshot of grokcas.com
grokcas.com
Screenshot of group-mega-phone.com
group-mega-phone.com
15 VTActiveWalletConnect
Screenshot of group-mega-phone.com
group-mega-phone.com
Screenshot of hetowex.com
hetowex.com
15 VTUnknowngenericcrypto
Screenshot of hetowex.com
hetowex.com
Screenshot of hippodrome-online.com
hippodrome-online.com
15 VTCloaked · Livegenericcrypto
Screenshot of hippodrome-online.com
hippodrome-online.com
Screenshot of jackrox.com
jackrox.com
15 VTUnknowngenericcrypto
Screenshot of jackrox.com
jackrox.com
Screenshot of jelitex.com
jelitex.com
15 VTUnknowngenericcrypto
Screenshot of jelitex.com
jelitex.com
Screenshot of jenowex.com
jenowex.com
15 VTUnknowngenericcrypto
Screenshot of jenowex.com
jenowex.com
kudofex.com
15 VTUnknowngenericcrypto
Screenshot of layzyro.com
layzyro.com
15 VTUnknowngenericcrypto
Screenshot of layzyro.com
layzyro.com
Screenshot of lido.fi-connect-defiv3-wailet.com
lido.fi-connect-defiv3-wailet.com
15 VTTaken DownLido
Screenshot of lido.fi-connect-defiv3-wailet.com
lido.fi-connect-defiv3-wailet.com
Screenshot of lixking.com
lixking.com
15 VTUnknowncryptoscam
Screenshot of lixking.com
lixking.com
Screenshot of menazex.com
menazex.com
15 VTUnknowngenericcrypto
Screenshot of menazex.com
menazex.com
Screenshot of metamasksafe.com
metamasksafe.com
15 VTUnknownmetamask
Screenshot of metamasksafe.com
metamasksafe.com
Screenshot of mizwex.com
mizwex.com
15 VTUnknowngenericcrypto
Screenshot of mizwex.com
mizwex.com
Screenshot of muskxwin.com
muskxwin.com
15 VTUnknowngenericcrypto
Screenshot of muskxwin.com
muskxwin.com
Screenshot of nizwex.com
nizwex.com
15 VTUnknowngenericcrypto
Screenshot of nizwex.com
nizwex.com
Screenshot of nodegoai.com
nodegoai.com
15 VTActive
Screenshot of nodegoai.com
nodegoai.com
Screenshot of nurdex.com
nurdex.com
15 VTUnknowngenericcrypto
Screenshot of nurdex.com
nurdex.com
Screenshot of nyrko.com
nyrko.com
15 VTUnknowngenericcrypto
Screenshot of nyrko.com
nyrko.com
Screenshot of ovogod.com
ovogod.com
15 VTUnknowngenericcrypto
Screenshot of ovogod.com
ovogod.com
Screenshot of playexgold.com
playexgold.com
15 VTTaken Downgenericcrypto
Screenshot of playexgold.com
playexgold.com
Screenshot of polymarket-dapp.com
polymarket-dapp.com
15 VTUnknown
Screenshot of polymarket-dapp.com
polymarket-dapp.com
Screenshot of rollbiton.com
rollbiton.com
15 VTTaken Down
Screenshot of rollbiton.com
rollbiton.com
Screenshot of slotdrak.com
slotdrak.com
15 VTTaken Downgenericcrypto
Screenshot of slotdrak.com
slotdrak.com
Screenshot of sol-dapp.com
sol-dapp.com
15 VTTaken Down1inch
Screenshot of sol-dapp.com
sol-dapp.com
Screenshot of solmultichain.com
solmultichain.com
15 VTTaken DownSolana DrainerRaydium
Screenshot of solmultichain.com
solmultichain.com
« Prev 1 2 3 4 5 Next » Page 2 of 15

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,008 Cloudflare 21,485 Dynadot 10,886 PDR Ltd. d/b/a PublicDomainRe... 8,039 Namecheap 7,837 GoDaddy 6,675 NameSilo 6,545 Gname.com Pte. Ltd. 6,531 WebNIC 5,152 Global Domain Group 4,380 Trustname.com 4,247 Tucows 4,223 Wix Studio 4,093 Hostinger 3,403 Vercel 2,859 GitHub, Inc. 2,768 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,169 OwnRegistrar, Inc. 2,013 Netlify 1,980 Hosting Concepts B.V. d/b/a R... 1,747 Cloudflare Pages 1,724 Name.com 1,669 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,448 REGRU-RU 1,429 Key-Systems 1,411 Squarespace Domains II 1,295

Showing 1,488 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,671 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,747 genericcrypto 7,736 across 6,798 Google 6,364 Coinbase 4,214 MetaMask 3,899 Trezor 3,427 Solana 3,045 Ethereum 2,953 genericcloudflare 2,919 Binance 2,592 Kraken 2,495 Facebook 2,242 cryptoscam 1,827 Cloudflare 1,606 Apple 1,546 x.com 1,439 base 1,431 Microsoft 1,324 Bet365 1,320

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,034 Seed Phrase Theft 19 Airdrop Scam 8,312 Investment Scam 333

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust