Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

194,527
Total Tracked
194,526
VT Detected
87,354
Last Seen Active
108,531
Unavailable at Last Check
1
VT Pending
REGISTRAR_NOT_FOUND

REGISTRAR_NOT_FOUND

1,553
Phishing Domains
1,003
Still Alive
550
Taken Down
99.5%
Detection Rate
11.6
Avg VT Score
64.6%
Alive Rate
1,553 phishing-domain abuse reports sent: REGISTRAR_NOT_FOUND
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,553 domains registered through REGISTRAR_NOT_FOUND, so the primary report total is 1,553. Database coverage starts Mar 18, 2026. 65% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.5% of domains flagged by VirusTotal 1,291 domains with VT ≥ 5
Tracking since Mar 2026 — latest: Aug 25, 2026
REGISTRAR_NOT_FOUND 1,553 domains
Screenshot of linn-eska.de
linn-eska.de
20 VTUnknownGoogle
Screenshot of linn-eska.de
linn-eska.de
Screenshot of mail.arnbsix.rumahsakit.de
mail.arnbsix.rumahsakit.de
20 VTUnknown
Screenshot of mail.arnbsix.rumahsakit.de
mail.arnbsix.rumahsakit.de
Screenshot of mail.frstore.rumahsakit.de
mail.frstore.rumahsakit.de
20 VTTaken Down
Screenshot of mail.frstore.rumahsakit.de
mail.frstore.rumahsakit.de
Screenshot of netflix.bikramgyawali.com.np
netflix.bikramgyawali.com.np
20 VTUnknownNetflix
Screenshot of netflix.bikramgyawali.com.np
netflix.bikramgyawali.com.np
Screenshot of perbaiika4n-akun-danaa.resmi-akzz3.my.id
perbaiika4n-akun-danaa.resmi-akzz3.my.id
20 VTUnknowndana
Screenshot of perbaiika4n-akun-danaa.resmi-akzz3.my.id
perbaiika4n-akun-danaa.resmi-akzz3.my.id
Screenshot of post-swiss.pro
post-swiss.pro
20 VTUnknownSui
Screenshot of post-swiss.pro
post-swiss.pro
roblox.et
20 VTActiveRoblox
support-ticket99600837.es
20 VTActive
Screenshot of t.gettrustpayment.live
t.gettrustpayment.live
20 VTTaken DownTrust Wallet
Screenshot of t.gettrustpayment.live
t.gettrustpayment.live
Screenshot of test2.c3rberus.at
test2.c3rberus.at
20 VTActiveSteam
Screenshot of test2.c3rberus.at
test2.c3rberus.at
Screenshot of w4b-d4naa.cxbb-ofisiaaal.biz.id
w4b-d4naa.cxbb-ofisiaaal.biz.id
20 VTTaken Downdana
Screenshot of w4b-d4naa.cxbb-ofisiaaal.biz.id
w4b-d4naa.cxbb-ofisiaaal.biz.id
Screenshot of www.robiox.com.py
www.robiox.com.py
20 VTActiveRoblox
Screenshot of www.robiox.com.py
www.robiox.com.py
Screenshot of xinnewfrom-costmerzn.sufisme.web.id
xinnewfrom-costmerzn.sufisme.web.id
20 VTTaken Downdana
Screenshot of xinnewfrom-costmerzn.sufisme.web.id
xinnewfrom-costmerzn.sufisme.web.id
Screenshot of xlayananm-indonewz.shineeni.my.id
xlayananm-indonewz.shineeni.my.id
20 VTActive
Screenshot of xlayananm-indonewz.shineeni.my.id
xlayananm-indonewz.shineeni.my.id
Screenshot of ywgsgs765.vis3367.shop
ywgsgs765.vis3367.shop
20 VTUnknown
Screenshot of ywgsgs765.vis3367.shop
ywgsgs765.vis3367.shop
Screenshot of 013224.icefactory.cl
013224.icefactory.cl
19 VTActive
Screenshot of 013224.icefactory.cl
013224.icefactory.cl
121deo.senes.at
19 VTActivecoinbase
Screenshot of 14b435.icefactory.cl
14b435.icefactory.cl
19 VTActiveadobe
Screenshot of 14b435.icefactory.cl
14b435.icefactory.cl
Screenshot of 14b52e.icefactory.cl
14b52e.icefactory.cl
19 VTActive
Screenshot of 14b52e.icefactory.cl
14b52e.icefactory.cl
Screenshot of 32094373.dojiner.at
32094373.dojiner.at
19 VTActivesteam
Screenshot of 32094373.dojiner.at
32094373.dojiner.at
Screenshot of 3577db.icefactory.cl
3577db.icefactory.cl
19 VTActiveadobe
Screenshot of 3577db.icefactory.cl
3577db.icefactory.cl
Screenshot of 6424172528.dojiner.at
6424172528.dojiner.at
19 VTActivesteam
Screenshot of 6424172528.dojiner.at
6424172528.dojiner.at
Screenshot of 65.jj37799.vip
65.jj37799.vip
19 VTActive
Screenshot of 65.jj37799.vip
65.jj37799.vip
Screenshot of 65.jj38127.vip
65.jj38127.vip
19 VTActivebet365
Screenshot of 65.jj38127.vip
65.jj38127.vip
Screenshot of 71f3d8.icefactory.cl
71f3d8.icefactory.cl
19 VTActiveadobe
Screenshot of 71f3d8.icefactory.cl
71f3d8.icefactory.cl
Screenshot of 93fd0a.icefactory.cl
93fd0a.icefactory.cl
19 VTActive
Screenshot of 93fd0a.icefactory.cl
93fd0a.icefactory.cl
Screenshot of 97ee9.catex.at
97ee9.catex.at
19 VTActiveCoinbase
Screenshot of 97ee9.catex.at
97ee9.catex.at
Screenshot of a4b52a.icefactory.cl
a4b52a.icefactory.cl
19 VTActive
Screenshot of a4b52a.icefactory.cl
a4b52a.icefactory.cl
Screenshot of aktiffkan-paylater.yqq.my.id
aktiffkan-paylater.yqq.my.id
19 VTUnknowndana
Screenshot of aktiffkan-paylater.yqq.my.id
aktiffkan-paylater.yqq.my.id
Screenshot of aktiffkan-paylatercc.fez.my.id
aktiffkan-paylatercc.fez.my.id
19 VTActivedana
Screenshot of aktiffkan-paylatercc.fez.my.id
aktiffkan-paylatercc.fez.my.id
aktifkann-payylaterr4.resmi-kaz.my.id
19 VTUnknowndana
Screenshot of aktifkndannaxpaylter.tubersis.biz.id
aktifkndannaxpaylter.tubersis.biz.id
19 VTActivedana
Screenshot of aktifkndannaxpaylter.tubersis.biz.id
aktifkndannaxpaylter.tubersis.biz.id
akttiydnap-idxx.mmexe.my.id
19 VTUnknowndana
Screenshot of antai-service-app.kingpur.pt
antai-service-app.kingpur.pt
19 VTActive
Screenshot of antai-service-app.kingpur.pt
antai-service-app.kingpur.pt
Screenshot of arnbsix.rumahsakit.de
arnbsix.rumahsakit.de
19 VTUnknown
Screenshot of arnbsix.rumahsakit.de
arnbsix.rumahsakit.de
Screenshot of auth-telekom.de
auth-telekom.de
19 VTActivetelekom
Screenshot of auth-telekom.de
auth-telekom.de
Screenshot of b52ca2.icefactory.cl
b52ca2.icefactory.cl
19 VTActiveadobe
Screenshot of b52ca2.icefactory.cl
b52ca2.icefactory.cl
Screenshot of be2901.icefactory.cl
be2901.icefactory.cl
19 VTActiveadobe
Screenshot of be2901.icefactory.cl
be2901.icefactory.cl
bhd660bf367144d4ac0b5e290f.xo.je
19 VTActiveGoogle
blueconcept.ae
19 VTCloaked · Liveadobe
Screenshot of boost-aave.us
boost-aave.us
19 VTActiveAave
Screenshot of boost-aave.us
boost-aave.us
Screenshot of carrefour-pass-espace.de
carrefour-pass-espace.de
19 VTActivecarrefour
Screenshot of carrefour-pass-espace.de
carrefour-pass-espace.de
danaa-iindonesiaa.utt.my.id
19 VTUnknowndana
Screenshot of danaaa-paaylaateerr.twaz.my.id
danaaa-paaylaateerr.twaz.my.id
19 VTActive
Screenshot of danaaa-paaylaateerr.twaz.my.id
danaaa-paaylaateerr.twaz.my.id
danaaiindonesiax.dwfg.my.id
19 VTUnknowndana
Screenshot of danaaindonesiia.gtzc.my.id
danaaindonesiia.gtzc.my.id
19 VTUnknowndana
Screenshot of danaaindonesiia.gtzc.my.id
danaaindonesiia.gtzc.my.id
danaid.7xb.web.id
19 VTUnknowndana
Screenshot of dannax-paylteriidn.cheoxyo.biz.id
dannax-paylteriidn.cheoxyo.biz.id
19 VTUnknowndana
Screenshot of dannax-paylteriidn.cheoxyo.biz.id
dannax-paylteriidn.cheoxyo.biz.id
e-love-ass.ai-cryptolist.com
19 VTActive
Screenshot of ea51fe.icefactory.cl
ea51fe.icefactory.cl
19 VTActiveadobe
Screenshot of ea51fe.icefactory.cl
ea51fe.icefactory.cl
Screenshot of f174b7.icefactory.cl
f174b7.icefactory.cl
19 VTActive
Screenshot of f174b7.icefactory.cl
f174b7.icefactory.cl
Screenshot of fitur-aktivasipay.paylater.buzz
fitur-aktivasipay.paylater.buzz
19 VTActivedana
Screenshot of fitur-aktivasipay.paylater.buzz
fitur-aktivasipay.paylater.buzz
gemini.91vip.de
19 VTUnknownGemini
Screenshot of girope.hu
girope.hu
19 VTActive
Screenshot of girope.hu
girope.hu
j105m.vip
19 VTActiveBet365
j107c.vip
19 VTActive
Screenshot of j75n.vip
j75n.vip
19 VTActiveBet365
Screenshot of j75n.vip
j75n.vip
Screenshot of kdoupayqianbao.com.cn
kdoupayqianbao.com.cn
19 VTActive
Screenshot of kdoupayqianbao.com.cn
kdoupayqianbao.com.cn
knowledgeable.edu.sa
19 VTActive
Screenshot of link-dana-sekarang.dana-terbaru.biz.id
link-dana-sekarang.dana-terbaru.biz.id
19 VTActivedana
Screenshot of link-dana-sekarang.dana-terbaru.biz.id
link-dana-sekarang.dana-terbaru.biz.id
Screenshot of midasbuy-official-topup.shop
midasbuy-official-topup.shop
19 VTActive
Screenshot of midasbuy-official-topup.shop
midasbuy-official-topup.shop
Screenshot of nanz.rumahsakit.de
nanz.rumahsakit.de
19 VTUnknown
Screenshot of nanz.rumahsakit.de
nanz.rumahsakit.de
pemuliha4n-akun-danaa.resmi-zxc.my.id
19 VTTaken Down
Screenshot of r.gettrustpayment.live
r.gettrustpayment.live
19 VTUnknownTrust Wallet
Screenshot of r.gettrustpayment.live
r.gettrustpayment.live
Screenshot of rss.sayler.at
rss.sayler.at
19 VTActivecoinbase
Screenshot of rss.sayler.at
rss.sayler.at
Screenshot of sub-dana-id.cvgy.my.id
sub-dana-id.cvgy.my.id
19 VTActivedana
Screenshot of sub-dana-id.cvgy.my.id
sub-dana-id.cvgy.my.id
Screenshot of subflix.es
subflix.es
19 VTActivenetflix
Screenshot of subflix.es
subflix.es
support.trustwallet.afmil.info
19 VTActiveTrustWallet
t-mobile.gbvstk.shop
19 VTTaken Down
t-mobile.xoumzj.shop
19 VTTaken Down
Screenshot of tether.com.bz
tether.com.bz
19 VTUnknowngenericcrypto
Screenshot of tether.com.bz
tether.com.bz
Screenshot of trzobridg.zapier.app
trzobridg.zapier.app
19 VTUnknowntrezor
Screenshot of trzobridg.zapier.app
trzobridg.zapier.app
vame.be
19 VTTaken Down
Screenshot of yahonda.rumahsakit.de
yahonda.rumahsakit.de
19 VTUnknown
Screenshot of yahonda.rumahsakit.de
yahonda.rumahsakit.de
Screenshot of ylogin.cholz.de
ylogin.cholz.de
19 VTCloaked · Live["yahoo"]
Screenshot of ylogin.cholz.de
ylogin.cholz.de
yoga.newlifeayurveda.com.np
19 VTActivelinkt
zxdanaindonsianew.fascist.biz.id
19 VTUnknowndana
Screenshot of 0387ff.icefactory.cl
0387ff.icefactory.cl
18 VTActiveadobe
Screenshot of 0387ff.icefactory.cl
0387ff.icefactory.cl
Screenshot of 1665274281.dojiner.at
1665274281.dojiner.at
18 VTActivesteam
Screenshot of 1665274281.dojiner.at
1665274281.dojiner.at
Screenshot of 23109c.icefactory.cl
23109c.icefactory.cl
18 VTActiveadobe
Screenshot of 23109c.icefactory.cl
23109c.icefactory.cl
Screenshot of 41c91f.icefactory.cl
41c91f.icefactory.cl
18 VTActiveadobe
Screenshot of 41c91f.icefactory.cl
41c91f.icefactory.cl
4fd09f.icefactory.cl
18 VTActive
Screenshot of 519ef0.icefactory.cl
519ef0.icefactory.cl
18 VTActiveadobe
Screenshot of 519ef0.icefactory.cl
519ef0.icefactory.cl
Screenshot of 57da70.icefactory.cl
57da70.icefactory.cl
18 VTActive
Screenshot of 57da70.icefactory.cl
57da70.icefactory.cl
Screenshot of 6127576648.dojiner.at
6127576648.dojiner.at
18 VTActivesteam
Screenshot of 6127576648.dojiner.at
6127576648.dojiner.at
Screenshot of 647623577.dojiner.at
647623577.dojiner.at
18 VTActivesteam
Screenshot of 647623577.dojiner.at
647623577.dojiner.at
Screenshot of 65.jj38336.vip
65.jj38336.vip
18 VTActive
Screenshot of 65.jj38336.vip
65.jj38336.vip
Screenshot of 6c236e.icefactory.cl
6c236e.icefactory.cl
18 VTActive
Screenshot of 6c236e.icefactory.cl
6c236e.icefactory.cl
Screenshot of 6d3851.icefactory.cl
6d3851.icefactory.cl
18 VTActive
Screenshot of 6d3851.icefactory.cl
6d3851.icefactory.cl
Screenshot of 7b6297.icefactory.cl
7b6297.icefactory.cl
18 VTActiveadobe
Screenshot of 7b6297.icefactory.cl
7b6297.icefactory.cl
Screenshot of 87a44a.icefactory.cl
87a44a.icefactory.cl
18 VTActiveadobe
Screenshot of 87a44a.icefactory.cl
87a44a.icefactory.cl
Screenshot of 97ee7.catex.at
97ee7.catex.at
18 VTActiveCoinbase
Screenshot of 97ee7.catex.at
97ee7.catex.at
Screenshot of a43970.icefactory.cl
a43970.icefactory.cl
18 VTActive
Screenshot of a43970.icefactory.cl
a43970.icefactory.cl
Screenshot of aktiffkan-paylaterz.zak.my.id
aktiffkan-paylaterz.zak.my.id
18 VTUnknowndana
Screenshot of aktiffkan-paylaterz.zak.my.id
aktiffkan-paylaterz.zak.my.id
Screenshot of alufast.com.br
alufast.com.br
18 VTActivegeneric
Screenshot of alufast.com.br
alufast.com.br
Screenshot of appsupholld.zapier.app
appsupholld.zapier.app
18 VTActiveuphold
Screenshot of appsupholld.zapier.app
appsupholld.zapier.app
b1fc29.icefactory.cl
18 VTActive
b47i.vip
18 VTActive
b47k.vip
18 VTActive
Screenshot of balconyresidences.com.br
balconyresidences.com.br
18 VTActiveadobe
Screenshot of balconyresidences.com.br
balconyresidences.com.br
« Prev 1 2 3 4 5 Next » Page 2 of 16

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,927 Cloudflare 21,465 Dynadot 10,808 PDR Ltd. d/b/a PublicDomainRe... 8,020 Namecheap 7,787 GoDaddy 6,644 NameSilo 6,515 Gname.com Pte. Ltd. 6,513 WebNIC 5,134 Global Domain Group 4,300 Trustname.com 4,221 Tucows 4,205 Wix Studio 4,093 Hostinger 3,393 Vercel 2,770 GitHub, Inc. 2,751 MarkMonitor 2,585 Dominet (HK) Limited 2,187 Spaceship, Inc. 2,134 OwnRegistrar, Inc. 2,012 Netlify 1,969 Hosting Concepts B.V. d/b/a R... 1,731 Cloudflare Pages 1,713 Name.com 1,663 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,484 Cosmotown 1,445 Key-Systems 1,408 REGRU-RU 1,384 Squarespace Domains II 1,286

Showing 1,553 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,667 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,738 genericcrypto 7,732 across 6,798 Google 6,355 Coinbase 4,202 MetaMask 3,779 Trezor 3,413 Solana 3,034 Ethereum 2,949 genericcloudflare 2,919 Binance 2,586 Kraken 2,489 Facebook 2,238 cryptoscam 1,821 Cloudflare 1,587 Apple 1,543 x.com 1,439 base 1,427 Bet365 1,316 Microsoft 1,315

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,029 Seed Phrase Theft 19 Airdrop Scam 8,296 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust