NameSilo Abuse Response and Phishing Portfolio Analysis

Documented phishing domains, targeted-report outcomes, portfolio methodology, and the PhishDestroy accountability record for NameSilo, LLC.

195,453
Total Tracked
195,453
VT Detected
88,480
Last Seen Active
108,701
Unavailable at Last Check
0
VT Pending
NameSilo

NameSilo πŸ‡ΊπŸ‡Έ

πŸ‡ΊπŸ‡Έ United States Founded 2009 IANA #1479 namesilo.com
Registrar notice Β· CRITICAL NameSilo actively retaliated against threat researchers publishing evidence of its clients

After PhishDestroy published documented receipts of NameSilo hosting a Monero drainer operation (xmrwallet.com, $20M+ in thefts, 10+ years of inaction), our @Phish_Destroy X account was reported and suspended β€” despite X's own automated review clearing the reports. NameSilo then publicly defended the scam operator rather than acting on abuse complaints. Pattern of behaviour is consistent with ICANN RAA 3.18 non-compliance: abuse reports triggered retaliation instead of mitigation.

NameSilo Killed Our Twitter β€” full report xmrwallet.com / NameSilo exposure
PhishDestroy statement Β· NameSilo Β· IANA #1479

NameSilo: a conscious choice to be what it is

NameSilo is the worst registrar, packed with cheap domains purely for volume. It wants phishing and Russian propaganda, and it employs a large number of representatives from Russia. This is a conscious choice by the registrar to be what it is.

NameSilo hates criticism. It loves buying articles about itself, promoting itself on its own domains, and writing one-line reviews about itself.

What this means in human terms:

99.65%of NameSilo's portfolio has
ZERO confirmed traffic
1 : 1.3For every 1 top-million domain,
1.3 phishing domains
387xPhishing domains outnumber
Tranco top-10K by 387x

The "dirty ratio" depends on what you compare against:

vs Total (5.18M):0.43%"barely anything"
vs Live IP (2.3M):0.98%"almost 1%"
vs HTTP alive (958K):2.34%"every 43rd site"
vs Top-million (17.8K):125.6%"more scam than legit"
vs Real business (54.8K):40.9%"1 phishing for every 2.5 businesses"

This is why NameSilo buys phantom domains. When you compare 22,000 malicious domains against 5.18 million total, it's "0.43% β€” barely anything." But when you strip away the dead weight and compare against domains that actually work, the picture changes completely. The phantom domains are a statistical smokescreen.

Report to Your Local Authorities

Choose your country to see verified official cybercrime reporting routes. Add the affected domain to prepare a local-language complaint draft.

Nothing is sent automatically. Review every fact and submit the complaint yourself through an official route.

6,543
Phishing Domains
2,147
Still Alive
4,396
Taken Down
97.4%
Detection Rate
8.0
Avg VT Score
32.8%
Alive Rate
6,543 phishing-domain abuse reports sent: NameSilo
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 6,543 domains registered through NameSilo, so the primary report total is 6,543. Database coverage starts Jun 30, 2025. 33% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
97.4% of domains flagged by VirusTotal 4,037 domains with VT β‰₯ 5
Tracking since Jun 2025 β€” latest: Aug 27, 2026
NameSilo, LLC 6,543 domains
Screenshot of aponcht.info
aponcht.info
20 VTActive
Screenshot of aponcht.info
aponcht.info
Screenshot of app-flverr.help
app-flverr.help
20 VTUnknown
Screenshot of app-flverr.help
app-flverr.help
artmagnus.info
20 VTActiveallegro
Screenshot of b45060.com
b45060.com
20 VTUnknownBet365
Screenshot of b45060.com
b45060.com
Screenshot of b45q.com
b45q.com
20 VTActiveBet365
Screenshot of b45q.com
b45q.com
bet73019.com
20 VTCloaked Β· Live
Screenshot of bet73rr.com
bet73rr.com
20 VTUnknownbet365
Screenshot of bet73rr.com
bet73rr.com
Screenshot of bet83066.com
bet83066.com
20 VTUnknownbet365
Screenshot of bet83066.com
bet83066.com
Screenshot of claimnow-esl.sbs
claimnow-esl.sbs
20 VTUnknown
Screenshot of claimnow-esl.sbs
claimnow-esl.sbs
Screenshot of claims2-esl-org.sbs
claims2-esl-org.sbs
20 VTUnknownGoogle
Screenshot of claims2-esl-org.sbs
claims2-esl-org.sbs
Screenshot of coingekx.com
coingekx.com
20 VTActive
Screenshot of coingekx.com
coingekx.com
com-isupport.help
20 VTActive
dyneavo.top
20 VTUnknown
eb8rvu.top
20 VTUnknown
Screenshot of fifa-mx.com
fifa-mx.com
20 VTActivefifa
Screenshot of fifa-mx.com
fifa-mx.com
Screenshot of i3bppf.cfd
i3bppf.cfd
20 VTUnknown
Screenshot of i3bppf.cfd
i3bppf.cfd
Screenshot of itauunibanco.global
itauunibanco.global
20 VTUnknown
Screenshot of itauunibanco.global
itauunibanco.global
lc77.net
20 VTActive
m.dilidiliapp.com
20 VTActive
Screenshot of nationaleuropenews.org
nationaleuropenews.org
20 VTActiveCloudflare
Screenshot of nationaleuropenews.org
nationaleuropenews.org
Screenshot of nodechaindapp.com
nodechaindapp.com
20 VTUnknownavalanche
Screenshot of nodechaindapp.com
nodechaindapp.com
Screenshot of open.apknewdownload.info
open.apknewdownload.info
20 VTActive
Screenshot of open.apknewdownload.info
open.apknewdownload.info
patterndomain.info
20 VTUnknownfacebook
Screenshot of portfolio-bilget.com
portfolio-bilget.com
20 VTActiveMetaMask
Screenshot of portfolio-bilget.com
portfolio-bilget.com
raf-pro.net
20 VTUnknown
raiffeisen-sache.vip
20 VTTaken Down
Screenshot of rblxhelper.co
rblxhelper.co
20 VTActive
Screenshot of rblxhelper.co
rblxhelper.co
Screenshot of recoveryledger.live
recoveryledger.live
20 VTTaken DownLedger
Screenshot of recoveryledger.live
recoveryledger.live
Screenshot of shop.tkjsonlin.cc
shop.tkjsonlin.cc
20 VTTaken Downtiktok
Screenshot of shop.tkjsonlin.cc
shop.tkjsonlin.cc
space.eyeliteglasses.info
20 VTActiveGoogle
Screenshot of stop.blogbeastit.info
stop.blogbeastit.info
20 VTActive
Screenshot of stop.blogbeastit.info
stop.blogbeastit.info
Screenshot of suffocates.dorgahings.info
suffocates.dorgahings.info
20 VTUnknownallegro
Screenshot of suffocates.dorgahings.info
suffocates.dorgahings.info
Screenshot of suncoust.click
suncoust.click
20 VTTaken Downfoundation
Screenshot of suncoust.click
suncoust.click
Screenshot of t-mobile.dpxhrj.top
t-mobile.dpxhrj.top
20 VTTaken Down
Screenshot of t-mobile.dpxhrj.top
t-mobile.dpxhrj.top
Screenshot of t-mobile.fvikw.top
t-mobile.fvikw.top
20 VTTaken Down
Screenshot of t-mobile.fvikw.top
t-mobile.fvikw.top
Screenshot of t-mobile.gwtqoy.top
t-mobile.gwtqoy.top
20 VTUnknown
Screenshot of t-mobile.gwtqoy.top
t-mobile.gwtqoy.top
Screenshot of t-mobile.iqfclm.top
t-mobile.iqfclm.top
20 VTTaken Downt-mobile
Screenshot of t-mobile.iqfclm.top
t-mobile.iqfclm.top
t-mobile.jaioez.top
20 VTTaken Down
Screenshot of t-mobile.jmctse.top
t-mobile.jmctse.top
20 VTTaken Down
Screenshot of t-mobile.jmctse.top
t-mobile.jmctse.top
Screenshot of t-mobile.kymaei.top
t-mobile.kymaei.top
20 VTTaken Down
Screenshot of t-mobile.kymaei.top
t-mobile.kymaei.top
Screenshot of t-mobile.phykbg.top
t-mobile.phykbg.top
20 VTTaken Down
Screenshot of t-mobile.phykbg.top
t-mobile.phykbg.top
t-mobile.rshicz.top
20 VTUnknownGoogle
Screenshot of t-mobile.tmuwpk.top
t-mobile.tmuwpk.top
20 VTTaken Down
Screenshot of t-mobile.tmuwpk.top
t-mobile.tmuwpk.top
Screenshot of t-mobile.vqfsgi.top
t-mobile.vqfsgi.top
20 VTTaken Down
Screenshot of t-mobile.vqfsgi.top
t-mobile.vqfsgi.top
Screenshot of t-mobile.vusocd.top
t-mobile.vusocd.top
20 VTTaken Downt-mobile
Screenshot of t-mobile.vusocd.top
t-mobile.vusocd.top
Screenshot of t-mobile.xopyjl.top
t-mobile.xopyjl.top
20 VTTaken Downt-mobile
Screenshot of t-mobile.xopyjl.top
t-mobile.xopyjl.top
t-mobile.zctkrs.top
20 VTTaken Down
t-mobile.zufioh.top
20 VTTaken Down
Screenshot of thesaferelemento.net
thesaferelemento.net
20 VTActivegenericcrypto
Screenshot of thesaferelemento.net
thesaferelemento.net
Screenshot of tr.padisahbetguncel-giris2026.cc
tr.padisahbetguncel-giris2026.cc
20 VTTaken Down
Screenshot of tr.padisahbetguncel-giris2026.cc
tr.padisahbetguncel-giris2026.cc
Screenshot of verifications-kraken.com
verifications-kraken.com
20 VTTaken Downkraken
Screenshot of verifications-kraken.com
verifications-kraken.com
Screenshot of volusionwyss.com
volusionwyss.com
20 VTCloaked Β· LiveGoogle
Screenshot of volusionwyss.com
volusionwyss.com
Screenshot of yhdc111.com
yhdc111.com
20 VTActive
Screenshot of yhdc111.com
yhdc111.com
zeropayment.top
20 VTUnknownamazon
Screenshot of zoominvitesapplicants.us
zoominvitesapplicants.us
20 VTTaken Down
Screenshot of zoominvitesapplicants.us
zoominvitesapplicants.us
Screenshot of 718809.top
718809.top
19 VTTaken Down
Screenshot of 718809.top
718809.top
Screenshot of abirigroupofschools.com
abirigroupofschools.com
19 VTUnknownpanini
Screenshot of abirigroupofschools.com
abirigroupofschools.com
Screenshot of advertise-003.top
advertise-003.top
19 VTUnknown
Screenshot of advertise-003.top
advertise-003.top
Screenshot of alert-text-esl.top
alert-text-esl.top
19 VTUnknowneslfcu
Screenshot of alert-text-esl.top
alert-text-esl.top
Screenshot of b45017.com
b45017.com
19 VTUnknownBet365
Screenshot of b45017.com
b45017.com
Screenshot of b45061.com
b45061.com
19 VTUnknownBet365
Screenshot of b45061.com
b45061.com
Screenshot of b45094.com
b45094.com
19 VTTaken DownBet365
Screenshot of b45094.com
b45094.com
Screenshot of bbasd.com
bbasd.com
19 VTCloaked Β· LiveTrust Wallet
Screenshot of bbasd.com
bbasd.com
bet4069.com
19 VTCloaked Β· LiveBet365
Screenshot of bet63ii.com
bet63ii.com
19 VTActiveBet365
Screenshot of bet63ii.com
bet63ii.com
Screenshot of bet63vv.com
bet63vv.com
19 VTActiveBet365
Screenshot of bet63vv.com
bet63vv.com
Screenshot of bet73018.com
bet73018.com
19 VTUnknownBet365
Screenshot of bet73018.com
bet73018.com
Screenshot of bet73ii.com
bet73ii.com
19 VTActiveBet365
Screenshot of bet73ii.com
bet73ii.com
Screenshot of bet73tt.com
bet73tt.com
19 VTUnknownbet365
Screenshot of bet73tt.com
bet73tt.com
Screenshot of betyeni3.com
betyeni3.com
19 VTActive
Screenshot of betyeni3.com
betyeni3.com
betza.cc
19 VTActive
Screenshot of borobudur777.com
borobudur777.com
19 VTUnknownroblox
Screenshot of borobudur777.com
borobudur777.com
carprimp.info
19 VTActive
ckramx.com
19 VTUnknownMetaMask
click.wranglerdenver.info
19 VTActive
Screenshot of corev3-secure-b4df72d1-ff44b36-ae57.network
corev3-secure-b4df72d1-ff44b36-ae57.network
19 VTUnknownWallet Connect AbuseWalletConnect
Screenshot of corev3-secure-b4df72d1-ff44b36-ae57.network
corev3-secure-b4df72d1-ff44b36-ae57.network
cvprojectsharedocs.top
19 VTUnknownMicrosoft
Screenshot of dnssearcheer.online
dnssearcheer.online
19 VTActive
Screenshot of dnssearcheer.online
dnssearcheer.online
draw88.net
19 VTActive
Screenshot of facenes1t.top
facenes1t.top
19 VTUnknownApple
Screenshot of facenes1t.top
facenes1t.top
facenest-shop.top
19 VTUnknown
Screenshot of fefaewfaew.top
fefaewfaew.top
19 VTUnknownamazon
Screenshot of fefaewfaew.top
fefaewfaew.top
fiverr-projects.pro
19 VTUnknown
flverr-support.click
19 VTUnknown
Screenshot of fnview.cc
fnview.cc
19 VTUnknownepicgames
Screenshot of fnview.cc
fnview.cc
Screenshot of formnscosttmerlyan.hazelnutindo.com
formnscosttmerlyan.hazelnutindo.com
19 VTUnknowndana
Screenshot of formnscosttmerlyan.hazelnutindo.com
formnscosttmerlyan.hazelnutindo.com
headcage.info
19 VTUnknownGoogle
Screenshot of iforget.ubicacion-cloud.info
iforget.ubicacion-cloud.info
19 VTCloaked Β· Live
Screenshot of iforget.ubicacion-cloud.info
iforget.ubicacion-cloud.info
Screenshot of isywetwqky.yoga
isywetwqky.yoga
19 VTUnknownApple
Screenshot of isywetwqky.yoga
isywetwqky.yoga
Screenshot of js4519.com
js4519.com
19 VTActive
Screenshot of js4519.com
js4519.com
Screenshot of kucoin-app.cc
kucoin-app.cc
19 VTUnknownKuCoin
Screenshot of kucoin-app.cc
kucoin-app.cc
landing.azeiteeoliva.info
19 VTActive
Screenshot of ledgercapitvl.com
ledgercapitvl.com
19 VTUnknownLedger
Screenshot of ledgercapitvl.com
ledgercapitvl.com
Screenshot of lesehan777.com
lesehan777.com
19 VTUnknownroblox
Screenshot of lesehan777.com
lesehan777.com
Screenshot of loss.blogbeastit.info
loss.blogbeastit.info
19 VTActive
Screenshot of loss.blogbeastit.info
loss.blogbeastit.info
Screenshot of m.535by.com
m.535by.com
19 VTActive
Screenshot of m.535by.com
m.535by.com
Screenshot of microsoftword.programgridsoft.com
microsoftword.programgridsoft.com
19 VTActiveMicrosoft
Screenshot of microsoftword.programgridsoft.com
microsoftword.programgridsoft.com
Screenshot of mobilesafeguard.systems
mobilesafeguard.systems
19 VTActiveInstagram
Screenshot of mobilesafeguard.systems
mobilesafeguard.systems
ms-record.top
19 VTActive
Screenshot of napdealin-shop3.top
napdealin-shop3.top
19 VTUnknownApple
Screenshot of napdealin-shop3.top
napdealin-shop3.top
Β« Prev 1 2 3 4 5 Next Β» Page 2 of 66

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,995 Cloudflare 21,482 Dynadot 10,868 PDR Ltd. d/b/a PublicDomainRe... 8,036 Namecheap 7,827 GoDaddy 6,667 NameSilo 6,543 Gname.com Pte. Ltd. 6,527 WebNIC 5,152 Global Domain Group 4,377 Trustname.com 4,243 Tucows 4,217 Wix Studio 4,093 Hostinger 3,402 Vercel 2,859 GitHub, Inc. 2,765 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,164 OwnRegistrar, Inc. 2,013 Netlify 1,976 Hosting Concepts B.V. d/b/a R... 1,743 Cloudflare Pages 1,724 Name.com 1,668 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,447 REGRU-RU 1,428 Key-Systems 1,411 Squarespace Domains II 1,295

Showing 6,543 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,671 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,747 genericcrypto 7,736 across 6,798 Google 6,364 Coinbase 4,214 MetaMask 3,899 Trezor 3,427 Solana 3,045 Ethereum 2,953 genericcloudflare 2,919 Binance 2,592 Kraken 2,495 Facebook 2,242 cryptoscam 1,827 Cloudflare 1,606 Apple 1,546 x.com 1,439 base 1,431 Microsoft 1,324 Bet365 1,320

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,033 Seed Phrase Theft 19 Airdrop Scam 8,312 Investment Scam 333

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization β†’

Threat Intelligence Checksβ€” every domain is scanned & cross-checked against:
urlscan.ioScreenshot Β· DOM Β· HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS Β· certs Β· categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 Β· AdGuard Β· CleanBrowsingWeb-CheckFull surface scan
Global Vendor Syncβ€” confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust