Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

195,747
Total Tracked
195,747
VT Detected
88,281
Last Seen Active
98,339
Unavailable at Last Check
7
VT Pending
Registrar.eu

Registrar.eu 🇳🇱

🇳🇱 Netherlands Founded 2004 IANA #1647 registrar.eu
1,752
Phishing Domains
1,500
Still Alive
252
Taken Down
99.5%
Detection Rate
10.0
Avg VT Score
85.6%
Alive Rate
1,752 phishing-domain abuse reports sent: Registrar.eu
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,752 domains registered through Registrar.eu, so the primary report total is 1,752. Database coverage starts Jul 8, 2025. 86% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.5% of domains flagged by VirusTotal 1,398 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 28, 2026
8/100
Global Risk Score — Low Risk
Based on 342M domains analyzed across 4,154 registrars
Full Analysis
1,536,547
Global Domains
34.2%
1-Year Reg
75.2%
Active IPs

Hosting Concepts B.V. d/b/a Registrar.eu shows a low risk score of 8/100, indicating a generally clean registration environment. With 75.2% of domains having active IPs and 64.6% older than one year, the data suggests a stable user base.

Hosting Concepts B.V. d/b/a Registrar.eu 1,752 domains
changenowx.com
15 VTActive
cn-trustwallet.co
15 VTActiveTrust Wallet
coinbasehelp-support.netlifi.app
15 VTActiveCoinbase
Screenshot of cornerstarnamibia.com
cornerstarnamibia.com
15 VTActive
Screenshot of cornerstarnamibia.com
cornerstarnamibia.com
Screenshot of curve.finance-swap.sbs
curve.finance-swap.sbs
15 VTActiveCurve
Screenshot of curve.finance-swap.sbs
curve.finance-swap.sbs
Screenshot of curvetokens.com
curvetokens.com
15 VTActiveCurve
Screenshot of curvetokens.com
curvetokens.com
Screenshot of cwsrmveq.coinbase-assists.com
cwsrmveq.coinbase-assists.com
15 VTActiveCoinbase
Screenshot of cwsrmveq.coinbase-assists.com
cwsrmveq.coinbase-assists.com
Screenshot of debridge.com.co
debridge.com.co
15 VTActive
Screenshot of debridge.com.co
debridge.com.co
Screenshot of delvonaonix.com
delvonaonix.com
15 VTActiveargent
Screenshot of delvonaonix.com
delvonaonix.com
Screenshot of descuentosexclusivoparati.com
descuentosexclusivoparati.com
15 VTActive
Screenshot of descuentosexclusivoparati.com
descuentosexclusivoparati.com
Screenshot of diamondtradingoptions.com
diamondtradingoptions.com
15 VTActivegeneric
Screenshot of diamondtradingoptions.com
diamondtradingoptions.com
Screenshot of download-exodus.io
download-exodus.io
15 VTActiveExodus
Screenshot of download-exodus.io
download-exodus.io
Screenshot of ee047801.connexion-banques-info.com
ee047801.connexion-banques-info.com
15 VTUnknown
Screenshot of ee047801.connexion-banques-info.com
ee047801.connexion-banques-info.com
Screenshot of en-exodus.org
en-exodus.org
15 VTActiveExodus
Screenshot of en-exodus.org
en-exodus.org
en-trezor.com
15 VTActiveTrezor
Screenshot of eprimb.com
eprimb.com
15 VTActivegenericbanking
Screenshot of eprimb.com
eprimb.com
Screenshot of exobus.io
exobus.io
15 VTActiveExodus Wallet
Screenshot of exobus.io
exobus.io
Screenshot of exodus-tools.at
exodus-tools.at
15 VTUnknownExodus
Screenshot of exodus-tools.at
exodus-tools.at
finance-firelight.com
15 VTActive
Screenshot of finportnexus.com
finportnexus.com
15 VTActivebinance
Screenshot of finportnexus.com
finportnexus.com
Screenshot of flare.portalsnet.com
flare.portalsnet.com
15 VTActiveFlare
Screenshot of flare.portalsnet.com
flare.portalsnet.com
Screenshot of flaybiex.com
flaybiex.com
15 VTActiveEthereum
Screenshot of flaybiex.com
flaybiex.com
Screenshot of fms.infoniz.in
fms.infoniz.in
15 VTActive
Screenshot of fms.infoniz.in
fms.infoniz.in
Screenshot of galicia.bmglobal.cl
galicia.bmglobal.cl
15 VTUnknown
Screenshot of galicia.bmglobal.cl
galicia.bmglobal.cl
Screenshot of goldenpeaksroll.com
goldenpeaksroll.com
15 VTActivegenericcrypto
Screenshot of goldenpeaksroll.com
goldenpeaksroll.com
haxwin.com
15 VTActive
hellcase.london
15 VTCloaked · Live
Screenshot of helpdesk-support-crypto.com
helpdesk-support-crypto.com
15 VTActiveCrypto.com
Screenshot of helpdesk-support-crypto.com
helpdesk-support-crypto.com
Screenshot of ioqsmtp.eubluemong7-mb-paypal.coinbase-assists.com
ioqsmtp.eubluemong7-mb-paypal.coinbase-assists.com
15 VTActiveCoinbase
Screenshot of ioqsmtp.eubluemong7-mb-paypal.coinbase-assists.com
ioqsmtp.eubluemong7-mb-paypal.coinbase-assists.com
Screenshot of islington-cc.netflix-subscription-uae.com
islington-cc.netflix-subscription-uae.com
15 VTCloaked · Livenetflix
Screenshot of islington-cc.netflix-subscription-uae.com
islington-cc.netflix-subscription-uae.com
Screenshot of iver.info
iver.info
15 VTActiveapple
Screenshot of iver.info
iver.info
Screenshot of kkhh001.top
kkhh001.top
15 VTActivegeneric
Screenshot of kkhh001.top
kkhh001.top
kra--37-cc.cc
15 VTActive
Screenshot of krab-2.cc
krab-2.cc
15 VTActive
Screenshot of krab-2.cc
krab-2.cc
Screenshot of krab6cc.com
krab6cc.com
15 VTActive
Screenshot of krab6cc.com
krab6cc.com
ledger-mod.org
15 VTActiveLedger
Screenshot of ledgerliveapp.us
ledgerliveapp.us
15 VTCloaked · LiveLedger
Screenshot of ledgerliveapp.us
ledgerliveapp.us
Screenshot of ledgersupportnewrelease.com
ledgersupportnewrelease.com
15 VTActiveLedger
Screenshot of ledgersupportnewrelease.com
ledgersupportnewrelease.com
Screenshot of ledgerwalletcommunity.com
ledgerwalletcommunity.com
15 VTActiveLedger
Screenshot of ledgerwalletcommunity.com
ledgerwalletcommunity.com
Screenshot of ledgerwalletsupportweb.com
ledgerwalletsupportweb.com
15 VTActiveLedger
Screenshot of ledgerwalletsupportweb.com
ledgerwalletsupportweb.com
Screenshot of ledgerweb3support.com
ledgerweb3support.com
15 VTActiveLedger
Screenshot of ledgerweb3support.com
ledgerweb3support.com
lexoindex.com
15 VTActivebinance
Screenshot of lexotrustai.com
lexotrustai.com
15 VTActivegenericcloudflare
Screenshot of lexotrustai.com
lexotrustai.com
Screenshot of login.dept-coinbase.com
login.dept-coinbase.com
15 VTActiveCoinbase
Screenshot of login.dept-coinbase.com
login.dept-coinbase.com
Screenshot of lqkcfyuw.trendyolal31.coinbase-assists.com
lqkcfyuw.trendyolal31.coinbase-assists.com
15 VTActiveCoinbase
Screenshot of lqkcfyuw.trendyolal31.coinbase-assists.com
lqkcfyuw.trendyolal31.coinbase-assists.com
Screenshot of lunexora-ki.com
lunexora-ki.com
15 VTActive
Screenshot of lunexora-ki.com
lunexora-ki.com
Screenshot of massivedynamiclimited.com
massivedynamiclimited.com
15 VTActivegeneric
Screenshot of massivedynamiclimited.com
massivedynamiclimited.com
Screenshot of meeecdigital.com
meeecdigital.com
15 VTActivecryptoscam
Screenshot of meeecdigital.com
meeecdigital.com
Screenshot of meta-mask.com.co
meta-mask.com.co
15 VTActiveMetaMask
Screenshot of meta-mask.com.co
meta-mask.com.co
Screenshot of myminfn-support.com
myminfn-support.com
15 VTActivespf
Screenshot of myminfn-support.com
myminfn-support.com
Screenshot of net-25-xljqvr-6381-data-unit-16.myfiportal.com
net-25-xljqvr-6381-data-unit-16.myfiportal.com
15 VTUnknown
Screenshot of net-25-xljqvr-6381-data-unit-16.myfiportal.com
net-25-xljqvr-6381-data-unit-16.myfiportal.com
Screenshot of netfllx-premium-help-center.com
netfllx-premium-help-center.com
15 VTActive
Screenshot of netfllx-premium-help-center.com
netfllx-premium-help-center.com
Screenshot of nethoaksfinance.com
nethoaksfinance.com
15 VTActivegenericbanking
Screenshot of nethoaksfinance.com
nethoaksfinance.com
Screenshot of noox.fi
noox.fi
15 VTUnknownWallet Connect AbuseWalletConnect
Screenshot of noox.fi
noox.fi
Screenshot of oknrmtcy.gaxlmqrh.raiffeisen-lidhje.com
oknrmtcy.gaxlmqrh.raiffeisen-lidhje.com
15 VTUnknown
Screenshot of oknrmtcy.gaxlmqrh.raiffeisen-lidhje.com
oknrmtcy.gaxlmqrh.raiffeisen-lidhje.com
Screenshot of onstreamza.com
onstreamza.com
15 VTActive
Screenshot of onstreamza.com
onstreamza.com
Screenshot of oxelvianai.com
oxelvianai.com
15 VTActive
Screenshot of oxelvianai.com
oxelvianai.com
Screenshot of paycard-trustwallet.com
paycard-trustwallet.com
15 VTActiveTrust Wallet
Screenshot of paycard-trustwallet.com
paycard-trustwallet.com
Screenshot of phantom.builders
phantom.builders
15 VTUnknownSolana DrainerPhantom
Screenshot of phantom.builders
phantom.builders
Screenshot of ploutodraxa.com
ploutodraxa.com
15 VTActiveargent
Screenshot of ploutodraxa.com
ploutodraxa.com
Screenshot of portal-descuentoparati.com
portal-descuentoparati.com
15 VTActive
Screenshot of portal-descuentoparati.com
portal-descuentoparati.com
Screenshot of postmaster.connexion-client.com
postmaster.connexion-client.com
15 VTActive
Screenshot of postmaster.connexion-client.com
postmaster.connexion-client.com
Screenshot of quantumai-eu.com
quantumai-eu.com
15 VTActivegenericcloudflare
Screenshot of quantumai-eu.com
quantumai-eu.com
Screenshot of rainbet-aus.com
rainbet-aus.com
15 VTActive
Screenshot of rainbet-aus.com
rainbet-aus.com
Screenshot of ralixia.vip
ralixia.vip
15 VTActivebase
Screenshot of ralixia.vip
ralixia.vip
Screenshot of reaktivierstream.com
reaktivierstream.com
15 VTActivenetflix
Screenshot of reaktivierstream.com
reaktivierstream.com
Screenshot of remote.login-coinbase-secured.com
remote.login-coinbase-secured.com
15 VTTaken DownCoinbase
Screenshot of remote.login-coinbase-secured.com
remote.login-coinbase-secured.com
ro-verify.ink
15 VTUnknown
Screenshot of robloxwrld.com
robloxwrld.com
15 VTActivegoogle
Screenshot of robloxwrld.com
robloxwrld.com
rover-ify.com
15 VTActive
safepal-download.com
15 VTActiveSafePal
Screenshot of secure-assets-profile.com
secure-assets-profile.com
15 VTActive
Screenshot of secure-assets-profile.com
secure-assets-profile.com
Screenshot of securepipfinance.com
securepipfinance.com
15 VTActivecryptoscam
Screenshot of securepipfinance.com
securepipfinance.com
Screenshot of senwix-prime.com
senwix-prime.com
15 VTActiveGoogle
Screenshot of senwix-prime.com
senwix-prime.com
shirinekhoury-haq.com
15 VTActive
Screenshot of shop.coinbase-assists.com
shop.coinbase-assists.com
15 VTActiveCoinbase
Screenshot of shop.coinbase-assists.com
shop.coinbase-assists.com
Screenshot of simpleswap.fi
simpleswap.fi
15 VTCloaked · Live
Screenshot of simpleswap.fi
simpleswap.fi
skinclub.london
15 VTCloaked · Live
Screenshot of solflere.org
solflere.org
15 VTActivecoinmarketcap
Screenshot of solflere.org
solflere.org
Screenshot of sonicrex.com
sonicrex.com
15 VTActive
Screenshot of sonicrex.com
sonicrex.com
Screenshot of start-ledger.io
start-ledger.io
15 VTActiveLedger
Screenshot of start-ledger.io
start-ledger.io
Screenshot of stellarblocknetwork.com
stellarblocknetwork.com
15 VTActiveCloudflare
Screenshot of stellarblocknetwork.com
stellarblocknetwork.com
Screenshot of strendus-casino-online-mx.com
strendus-casino-online-mx.com
15 VTActivegoogle
Screenshot of strendus-casino-online-mx.com
strendus-casino-online-mx.com
Screenshot of svfdeory.trendyolal31.coinbase-assists.com
svfdeory.trendyolal31.coinbase-assists.com
15 VTActiveCoinbase
Screenshot of svfdeory.trendyolal31.coinbase-assists.com
svfdeory.trendyolal31.coinbase-assists.com
Screenshot of temp-owkexuorwkyoibanumaq.webadorsite.com
temp-owkexuorwkyoibanumaq.webadorsite.com
15 VTActive
Screenshot of temp-owkexuorwkyoibanumaq.webadorsite.com
temp-owkexuorwkyoibanumaq.webadorsite.com
Screenshot of theprogressivegroup.starbearingcentre.com
theprogressivegroup.starbearingcentre.com
15 VTTaken Down
Screenshot of theprogressivegroup.starbearingcentre.com
theprogressivegroup.starbearingcentre.com
tokensdao.com
15 VTActive
Screenshot of tronfree-trustwallet.com
tronfree-trustwallet.com
15 VTActiveTrust Wallet
Screenshot of tronfree-trustwallet.com
tronfree-trustwallet.com
tronlink.com.co
15 VTActive
Screenshot of trustwalletv1.com
trustwalletv1.com
15 VTUnknownTrust Wallet
Screenshot of trustwalletv1.com
trustwalletv1.com
Screenshot of tslatrade.smcxh.com
tslatrade.smcxh.com
15 VTActivecryptoscam
Screenshot of tslatrade.smcxh.com
tslatrade.smcxh.com
Screenshot of tufinanzadeapoyo.com
tufinanzadeapoyo.com
15 VTActivebancolombia
Screenshot of tufinanzadeapoyo.com
tufinanzadeapoyo.com
tws-checkout.com
15 VTActive
Screenshot of unijoin1.com
unijoin1.com
15 VTActiveethereum
Screenshot of unijoin1.com
unijoin1.com
Screenshot of unlock-wallet-trust.com
unlock-wallet-trust.com
15 VTActiveWallet Connect AbuseTrustWallet
Screenshot of unlock-wallet-trust.com
unlock-wallet-trust.com
Screenshot of uphold.techinsgroup.co
uphold.techinsgroup.co
15 VTTaken Down
Screenshot of uphold.techinsgroup.co
uphold.techinsgroup.co
Screenshot of us-meet.com
us-meet.com
15 VTActive
Screenshot of us-meet.com
us-meet.com
Screenshot of user-prenium.com
user-prenium.com
15 VTActive
Screenshot of user-prenium.com
user-prenium.com
Screenshot of uswebzoomworkplace.com
uswebzoomworkplace.com
15 VTActive
Screenshot of uswebzoomworkplace.com
uswebzoomworkplace.com
utilita-energy.ltd
15 VTActive
« Prev 1 2 3 4 5 6 7 Next » Page 4 of 18

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,027 Cloudflare 21,486 Dynadot 10,899 PDR Ltd. d/b/a PublicDomainRe... 8,051 Namecheap 7,846 GoDaddy 6,684 NameSilo 6,547 Gname.com Pte. Ltd. 6,536 WebNIC 5,152 Global Domain Group 4,388 Trustname.com 4,249 Tucows 4,229 Wix Studio 4,093 Hostinger 3,404 Vercel 2,859 GitHub, Inc. 2,771 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,176 OwnRegistrar, Inc. 2,017 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,752 Cloudflare Pages 1,724 Name.com 1,672 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,448 REGRU-RU 1,430 Key-Systems 1,412 Squarespace Domains II 1,295

Showing 1,752 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,747 genericcrypto 7,736 across 6,798 Google 6,364 Coinbase 4,214 MetaMask 3,899 Trezor 3,427 Solana 3,046 Ethereum 2,953 genericcloudflare 2,919 Binance 2,592 Kraken 2,495 Facebook 2,242 cryptoscam 1,827 Cloudflare 1,606 Apple 1,546 x.com 1,439 base 1,431 Microsoft 1,324 Bet365 1,320

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,034 Seed Phrase Theft 19 Airdrop Scam 8,313 Investment Scam 333

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust