Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

196,403
Total Tracked
196,403
VT Detected
88,934
Last Seen Active
98,858
Unavailable at Last Check
0
VT Pending
Global Domain Group

Global Domain Group 🇺🇸

🇺🇸 United States Founded 2020 IANA #3956 globaldomaingroup.net
4,457
Phishing Domains
2,960
Still Alive
1,497
Taken Down
99%
Detection Rate
9.6
Avg VT Score
66.4%
Alive Rate
4,457 phishing-domain abuse reports sent: Global Domain Group
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 4,457 domains registered through Global Domain Group, so the primary report total is 4,457. Database coverage starts Feb 2, 2025. 66% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99% of domains flagged by VirusTotal 3,424 domains with VT ≥ 5
Tracking since Feb 2025 — latest: Aug 30, 2026
Global Domain Group LLC 4,457 domains
Screenshot of mellroll.pro
mellroll.pro
11 VTActive
Screenshot of mellroll.pro
mellroll.pro
Screenshot of memdev.xyz
memdev.xyz
11 VTActivecoinbase
Screenshot of memdev.xyz
memdev.xyz
Screenshot of merittipfxonline.com
merittipfxonline.com
11 VTActive
Screenshot of merittipfxonline.com
merittipfxonline.com
Screenshot of metatrustcapital.com
metatrustcapital.com
11 VTActiveacross
Screenshot of metatrustcapital.com
metatrustcapital.com
moonscan.click
11 VTActivechase
Screenshot of moonsgetv.click
moonsgetv.click
11 VTUnknownMoonshot
Screenshot of moonsgetv.click
moonsgetv.click
Screenshot of moonshootvote.space
moonshootvote.space
11 VTUnknownmoonshot
Screenshot of moonshootvote.space
moonshootvote.space
Screenshot of multichainsol.live
multichainsol.live
11 VTUnknownSolana DrainerRaydium
Screenshot of multichainsol.live
multichainsol.live
Screenshot of mycsgoo.shop
mycsgoo.shop
11 VTActive
Screenshot of mycsgoo.shop
mycsgoo.shop
Screenshot of nerimex.com
nerimex.com
11 VTActivex.com
Screenshot of nerimex.com
nerimex.com
Screenshot of nowget.xyz
nowget.xyz
11 VTActiveMetaMask
Screenshot of nowget.xyz
nowget.xyz
Screenshot of onetowin.bond
onetowin.bond
11 VTTaken Downgenericcrypto
Screenshot of onetowin.bond
onetowin.bond
Screenshot of online.northprimecreditunion.com
online.northprimecreditunion.com
11 VTCloaked · Liveamerican express
Screenshot of online.northprimecreditunion.com
online.northprimecreditunion.com
Screenshot of owntrustsave.online
owntrustsave.online
11 VTUnknown
Screenshot of owntrustsave.online
owntrustsave.online
paalai-airdrop.xyz
11 VTActiveMetaMask
Screenshot of pinnaclevest.com
pinnaclevest.com
11 VTActiveinvestmentscam
Screenshot of pinnaclevest.com
pinnaclevest.com
Screenshot of polymarket.cam
polymarket.cam
11 VTTaken DownPolymarket
Screenshot of polymarket.cam
polymarket.cam
Screenshot of polymarket.us-app.cyou
polymarket.us-app.cyou
11 VTActive
Screenshot of polymarket.us-app.cyou
polymarket.us-app.cyou
Screenshot of popmma.lol
popmma.lol
11 VTActive
Screenshot of popmma.lol
popmma.lol
Screenshot of posteitaliane.help
posteitaliane.help
11 VTUnknownSolana
Screenshot of posteitaliane.help
posteitaliane.help
Screenshot of protect.sequirtybot.cfd
protect.sequirtybot.cfd
11 VTTaken Down
Screenshot of protect.sequirtybot.cfd
protect.sequirtybot.cfd
Screenshot of pumjp.fun
pumjp.fun
11 VTActivedexscreener
Screenshot of pumjp.fun
pumjp.fun
Screenshot of pump-helpse.fun
pump-helpse.fun
11 VTActivePump.fun
Screenshot of pump-helpse.fun
pump-helpse.fun
Screenshot of pump-time.fun
pump-time.fun
11 VTActivePump.fun
Screenshot of pump-time.fun
pump-time.fun
Screenshot of pumplive.xyz
pumplive.xyz
11 VTActiveMetaMask
Screenshot of pumplive.xyz
pumplive.xyz
Screenshot of pumpvision.live
pumpvision.live
11 VTActivePump.fun
Screenshot of pumpvision.live
pumpvision.live
Screenshot of rbxcoala.rest
rbxcoala.rest
11 VTActive
Screenshot of rbxcoala.rest
rbxcoala.rest
Screenshot of redbet.click
redbet.click
11 VTActivegenericcrypto
Screenshot of redbet.click
redbet.click
Screenshot of riderbet.icu
riderbet.icu
11 VTTaken Downgenericcrypto
Screenshot of riderbet.icu
riderbet.icu
Screenshot of rpcresolverhome.pro
rpcresolverhome.pro
11 VTActiveAngel Drainer1inch
Screenshot of rpcresolverhome.pro
rpcresolverhome.pro
Screenshot of security-checker.cfd
security-checker.cfd
11 VTTaken Downbinance
Screenshot of security-checker.cfd
security-checker.cfd
Screenshot of skinsbox.org
skinsbox.org
11 VTActive
Screenshot of skinsbox.org
skinsbox.org
Screenshot of skr.mintpad.cc
skr.mintpad.cc
11 VTActiveSolana Drainersolana
Screenshot of skr.mintpad.cc
skr.mintpad.cc
Screenshot of sol-helper.trade
sol-helper.trade
11 VTActiveSolana
Screenshot of sol-helper.trade
sol-helper.trade
Screenshot of sol-vision.live
sol-vision.live
11 VTActiveAngel DrainerSolana
Screenshot of sol-vision.live
sol-vision.live
Screenshot of sola-event.click
sola-event.click
11 VTTaken DownSolana Drainerbitget
Screenshot of sola-event.click
sola-event.click
Screenshot of solana-memes-factory.live
solana-memes-factory.live
11 VTActiveSolana
Screenshot of solana-memes-factory.live
solana-memes-factory.live
Screenshot of solevent.digital
solevent.digital
11 VTActivegenericcrypto
Screenshot of solevent.digital
solevent.digital
Screenshot of solovote.club
solovote.club
11 VTCloaked · Live
Screenshot of solovote.club
solovote.club
Screenshot of soluckchance.click
soluckchance.click
11 VTCloaked · LiveSolana
Screenshot of soluckchance.click
soluckchance.click
Screenshot of spinara.cc
spinara.cc
11 VTActiveSolana
Screenshot of spinara.cc
spinara.cc
Screenshot of spinsolana.click
spinsolana.click
11 VTActiveSolana DrainerSolana
Screenshot of spinsolana.click
spinsolana.click
Screenshot of store.workshopcreatorworks.com
store.workshopcreatorworks.com
11 VTActive
Screenshot of store.workshopcreatorworks.com
store.workshopcreatorworks.com
studio-identify.com
11 VTActive
Screenshot of teambet.top
teambet.top
11 VTTaken Downgenericcrypto
Screenshot of teambet.top
teambet.top
telsquntum.com.luxowallets.com
11 VTUnknowngenericscam
Screenshot of teslareserveholdings.com
teslareserveholdings.com
11 VTActive
Screenshot of teslareserveholdings.com
teslareserveholdings.com
Screenshot of tokicas.top
tokicas.top
11 VTTaken Downgenericcrypto
Screenshot of tokicas.top
tokicas.top
Screenshot of toobit.click
toobit.click
11 VTActive
Screenshot of toobit.click
toobit.click
Screenshot of tradefolio.net
tradefolio.net
11 VTActive
Screenshot of tradefolio.net
tradefolio.net
Screenshot of tradefun.lol
tradefun.lol
11 VTTaken Down
Screenshot of tradefun.lol
tradefun.lol
Screenshot of triplet.lol
triplet.lol
11 VTActive
Screenshot of triplet.lol
triplet.lol
Screenshot of tronbandwidth.io
tronbandwidth.io
11 VTActive
Screenshot of tronbandwidth.io
tronbandwidth.io
Screenshot of trumpcas.live
trumpcas.live
11 VTTaken Downgenericcrypto
Screenshot of trumpcas.live
trumpcas.live
Screenshot of trusrmlk.top
trusrmlk.top
11 VTActive
Screenshot of trusrmlk.top
trusrmlk.top
Screenshot of trustwalletinvestment.com
trustwalletinvestment.com
11 VTTaken DownTrust Wallet
Screenshot of trustwalletinvestment.com
trustwalletinvestment.com
Screenshot of trx-swaps.org
trx-swaps.org
11 VTActiverevolut
Screenshot of trx-swaps.org
trx-swaps.org
Screenshot of trxmarket.click
trxmarket.click
11 VTActivebitget
Screenshot of trxmarket.click
trxmarket.click
Screenshot of tws-current.org
tws-current.org
11 VTUnknown
Screenshot of tws-current.org
tws-current.org
twsprocar.digital
11 VTUnknown
Screenshot of unicity.digital
unicity.digital
11 VTActiveAirdrop Scam
Screenshot of unicity.digital
unicity.digital
Screenshot of unlockevent.live
unlockevent.live
11 VTCloaked · LiveSolana
Screenshot of unlockevent.live
unlockevent.live
Screenshot of update-sec.click
update-sec.click
11 VTTaken Downgenericcloudflare
Screenshot of update-sec.click
update-sec.click
usdt.earn68.com
11 VTActive
Screenshot of user5591.trustcard.ac
user5591.trustcard.ac
11 VTTaken Downmastercard
Screenshot of user5591.trustcard.ac
user5591.trustcard.ac
Screenshot of vagox.lol
vagox.lol
11 VTTaken Downgenericcrypto
Screenshot of vagox.lol
vagox.lol
Screenshot of vantrex.digital
vantrex.digital
11 VTActiveblast
Screenshot of vantrex.digital
vantrex.digital
Screenshot of velomenius.digital
velomenius.digital
11 VTActive
Screenshot of velomenius.digital
velomenius.digital
Screenshot of vinted.kleina-mall0.world
vinted.kleina-mall0.world
11 VTTaken Down
Screenshot of vinted.kleina-mall0.world
vinted.kleina-mall0.world
Screenshot of vlrntgnrskn.online
vlrntgnrskn.online
11 VTTaken Down
Screenshot of vlrntgnrskn.online
vlrntgnrskn.online
Screenshot of web3nexuscontract.com.web3securesystem.com
web3nexuscontract.com.web3securesystem.com
11 VTActive
Screenshot of web3nexuscontract.com.web3securesystem.com
web3nexuscontract.com.web3securesystem.com
Screenshot of whitecas.top
whitecas.top
11 VTTaken Downgenericcrypto
Screenshot of whitecas.top
whitecas.top
Screenshot of withdraw-blockchain.cfd
withdraw-blockchain.cfd
11 VTActiveAMLBot
Screenshot of withdraw-blockchain.cfd
withdraw-blockchain.cfd
Screenshot of www.app.clbstandard.click
www.app.clbstandard.click
11 VTActivegenericbanking
Screenshot of www.app.clbstandard.click
www.app.clbstandard.click
Screenshot of www.blueskycreditunion.ibanking.online
www.blueskycreditunion.ibanking.online
11 VTActivegenericbanking
Screenshot of www.blueskycreditunion.ibanking.online
www.blueskycreditunion.ibanking.online
Screenshot of www.coinsecurity.digital
www.coinsecurity.digital
11 VTActiveGoogle
Screenshot of www.coinsecurity.digital
www.coinsecurity.digital
Screenshot of www.loomizbk.com.mazcapitals.com
www.loomizbk.com.mazcapitals.com
11 VTActive
Screenshot of www.loomizbk.com.mazcapitals.com
www.loomizbk.com.mazcapitals.com
Screenshot of www.pulseairdrop.sbs
www.pulseairdrop.sbs
11 VTCloaked · Live
Screenshot of www.pulseairdrop.sbs
www.pulseairdrop.sbs
Screenshot of www.web3.vexorcore.top
www.web3.vexorcore.top
11 VTTaken Downgenericcrypto
Screenshot of www.web3.vexorcore.top
www.web3.vexorcore.top
Screenshot of www.web3ledgerprotect.com
www.web3ledgerprotect.com
11 VTActiveLedger
Screenshot of www.web3ledgerprotect.com
www.web3ledgerprotect.com
Screenshot of www.web3securegateway.com
www.web3securegateway.com
11 VTTaken Downcoinbase
Screenshot of www.web3securegateway.com
www.web3securegateway.com
Screenshot of x-casino.win
x-casino.win
11 VTActivegenericcrypto
Screenshot of x-casino.win
x-casino.win
Screenshot of x-slots.pro
x-slots.pro
11 VTActiveCloudflare
Screenshot of x-slots.pro
x-slots.pro
Screenshot of xfme.lol
xfme.lol
11 VTActive
Screenshot of xfme.lol
xfme.lol
xtoken-market.org
11 VTActive
Screenshot of xtrump.click
xtrump.click
11 VTActivegenericcrypto
Screenshot of xtrump.click
xtrump.click
Screenshot of zoferex.com
zoferex.com
11 VTUnknowngenericcloudflare
Screenshot of zoferex.com
zoferex.com
Screenshot of zol-spin.lol
zol-spin.lol
11 VTActiveSolana
Screenshot of zol-spin.lol
zol-spin.lol
Screenshot of zoryaswbank.com
zoryaswbank.com
11 VTActivegenericbanking
Screenshot of zoryaswbank.com
zoryaswbank.com
Screenshot of 2up.lol
2up.lol
10 VTTaken Downcryptoscam
Screenshot of 2up.lol
2up.lol
Screenshot of aave-v3.xyz
aave-v3.xyz
10 VTActiveAave
Screenshot of aave-v3.xyz
aave-v3.xyz
Screenshot of activatep2ptrading.com
activatep2ptrading.com
10 VTUnknown
Screenshot of activatep2ptrading.com
activatep2ptrading.com
aeradrome.co
10 VTActive
Screenshot of aixbtrewards.tech
aixbtrewards.tech
10 VTActiveAngel Drainercompound
Screenshot of aixbtrewards.tech
aixbtrewards.tech
Screenshot of allegro.3288f2g0-32.sbs
allegro.3288f2g0-32.sbs
10 VTUnknown
Screenshot of allegro.3288f2g0-32.sbs
allegro.3288f2g0-32.sbs
Screenshot of alphapepetokenpresale.online
alphapepetokenpresale.online
10 VTUnknown
Screenshot of alphapepetokenpresale.online
alphapepetokenpresale.online
Screenshot of amlbot-chain.com
amlbot-chain.com
10 VTActiveAMLBot
Screenshot of amlbot-chain.com
amlbot-chain.com
Screenshot of amlbotcheck.io
amlbotcheck.io
10 VTActiveAMLBot
Screenshot of amlbotcheck.io
amlbotcheck.io
Screenshot of apesonsol.xyz
apesonsol.xyz
10 VTActiveSolana
Screenshot of apesonsol.xyz
apesonsol.xyz
Screenshot of app.hybitproyield.click
app.hybitproyield.click
10 VTActiveacross
Screenshot of app.hybitproyield.click
app.hybitproyield.click
« Prev 18 19 20 21 22 23 24 Next » Page 21 of 45

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,090 Cloudflare 21,496 Dynadot 10,969 PDR Ltd. d/b/a PublicDomainRe... 8,065 Namecheap 7,885 GoDaddy 6,701 NameSilo 6,573 Gname.com Pte. Ltd. 6,550 WebNIC 5,159 Global Domain Group 4,457 Trustname.com 4,263 Tucows 4,234 Wix Studio 4,093 Hostinger 3,412 Vercel 2,892 GitHub, Inc. 2,772 MarkMonitor 2,588 Dominet (HK) Limited 2,209 Spaceship, Inc. 2,205 OwnRegistrar, Inc. 2,021 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,774 Cloudflare Pages 1,731 Name.com 1,685 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,490 Cosmotown 1,466 REGRU-RU 1,430 Key-Systems 1,413 Squarespace Domains II 1,299

Showing 4,457 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,754 genericcrypto 7,740 across 6,798 Google 6,379 Coinbase 4,215 MetaMask 4,092 Trezor 3,435 Solana 3,054 Ethereum 2,954 genericcloudflare 2,919 Binance 2,596 Kraken 2,497 Facebook 2,242 cryptoscam 1,834 Cloudflare 1,610 Apple 1,549 x.com 1,439 base 1,432 Microsoft 1,324 Bet365 1,321

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,036 Seed Phrase Theft 19 Airdrop Scam 8,321 Investment Scam 336

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust