Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

193,395
Total Tracked
193,394
VT Detected
85,967
Last Seen Active
108,916
Unavailable at Last Check
1
VT Pending
Cloudflare Pages

Cloudflare Pages

1,697
Phishing Domains
1,209
Still Alive
488
Taken Down
96.1%
Detection Rate
8.5
Avg VT Score
71.2%
Alive Rate
1,697 phishing-domain abuse reports sent: Cloudflare Pages
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,697 domains registered through Cloudflare Pages, so the primary report total is 1,697. Database coverage starts Mar 10, 2026. 71% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
96.1% of domains flagged by VirusTotal 1,013 domains with VT ≥ 5
Tracking since Mar 2026 — latest: Aug 22, 2026
Cloudflare Pages 1,697 domains
app-ledgrr-live.pages.dev
13 VTActiveLedger
Screenshot of app-live.pages.dev
app-live.pages.dev
13 VTActiveApple
Screenshot of app-live.pages.dev
app-live.pages.dev
ask-ledgr-live.pages.dev
13 VTUnknownCloudflare
auth-lger-live.pages.dev
13 VTUnknownCloudflare
available-ledger-hardware-wallet.pages.dev
13 VTUnknownLedger
bationappverses.pages.dev
13 VTUnknownGoogle
began-ledger-live-desktop-eng-us.pages.dev
13 VTUnknownLedger
begin--ledgerlive.pages.dev
13 VTUnknownLedger
Screenshot of bermita-nqx-zormela-p7t8dw13.pages.dev
bermita-nqx-zormela-p7t8dw13.pages.dev
13 VTUnknownfacebook
Screenshot of bermita-nqx-zormela-p7t8dw13.pages.dev
bermita-nqx-zormela-p7t8dw13.pages.dev
bingwucoin-claim.pages.dev
13 VTActive
bp73u-e5g6-op43c7-4w54-tlfp22.pages.dev
13 VTActiveCloudflare
Screenshot of btrzp5avstr-klmqwmja-2d9e6f-btq03c.pages.dev
btrzp5avstr-klmqwmja-2d9e6f-btq03c.pages.dev
13 VTActive
Screenshot of btrzp5avstr-klmqwmja-2d9e6f-btq03c.pages.dev
btrzp5avstr-klmqwmja-2d9e6f-btq03c.pages.dev
clktp7agpxo-kphzwmja-4f7g9c-clk96c.pages.dev
13 VTActiveCloudflare
com-ledgerr-start-io.pages.dev
13 VTActiveLedger
com-ledgr--start.pages.dev
13 VTActiveLedger
com-strt-ledgr-info.pages.dev
13 VTActiveLedger
connect-bridge-trzzar.pages.dev
13 VTUnknownMetaMask
dmivok-trelna-2ed83f-vjbyh-6cb712.pages.dev
13 VTUnknownCloudflare
download---app--live.pages.dev
13 VTActiveLedger
dravela-gld-lormavi-c5t7hc24.pages.dev
13 VTActive
dravor-qunix-a17db5-thjj-z2406adv.pages.dev
13 VTActive
draxil-zomber-1e91ac-kthn-dravik.pages.dev
13 VTActiveCloudflare
elonairdrop-reward.pages.dev
13 VTActiveAirdrop Scam
en-base-ledgr.pages.dev
13 VTActiveLedger
exodswalet.pages.dev
13 VTUnknownexodus
faqs-desktop-live.pages.dev
13 VTActiveLedger
glemizng-parfait-a763e6-kl1204lk-n-2406uxj.pages.dev
13 VTActiveCloudflare
gorvanel-biz-zormutera-a1m9pc63.pages.dev
13 VTActiveCloudflare
hardware--en-io-trezo.pages.dev
13 VTUnknowngenericcloudflare
hbkpt4a51gp-xlbdwmja-2e0f6b-hbk96c.pages.dev
13 VTUnknown
home-ledgegr.pages.dev
13 VTActiveLedger
hxdi-o4g3u-j6c5m-uf4th4-1n3.pages.dev
13 VTActiveCloudflare
i2s-uoinm-xp1e-k89itv-j7bhb.pages.dev
13 VTActiveCloudflare
know-trzr-suite.pages.dev
13 VTUnknown
leadgred-com-web.pages.dev
13 VTActiveLedger
Screenshot of ledger--live-login-cdn.pages.dev
ledger--live-login-cdn.pages.dev
13 VTActiveLedger
Screenshot of ledger--live-login-cdn.pages.dev
ledger--live-login-cdn.pages.dev
ledgerlive-desktopp.pages.dev
13 VTActiveLedger
ledgr-com-usstart.pages.dev
13 VTActiveLedger
ledhger-desk-top-login.pages.dev
13 VTActiveLedger
Screenshot of lege-desktop-live.pages.dev
lege-desktop-live.pages.dev
13 VTActiveLedger
Screenshot of lege-desktop-live.pages.dev
lege-desktop-live.pages.dev
Screenshot of legrerr-en-desktop.pages.dev
legrerr-en-desktop.pages.dev
13 VTActiveLedger
Screenshot of legrerr-en-desktop.pages.dev
legrerr-en-desktop.pages.dev
Screenshot of live-desktop-eng.pages.dev
live-desktop-eng.pages.dev
13 VTActiveLedger
Screenshot of live-desktop-eng.pages.dev
live-desktop-eng.pages.dev
logn-trezr-nge.pages.dev
13 VTUnknown
merlin-68m.pages.dev
13 VTActive
migrates-singularity-ai.pages.dev
13 VTActive
mugicateth-vip.pages.dev
13 VTActiveMetaMask
nav-metaamsk--run.pages.dev
13 VTUnknownMetaMask
net16ct-toru-biz-vemi-zano.pages.dev
13 VTActiveCloudflare
nexari-blimor-1a63ef-hr1504jj-gn2406xut.pages.dev
13 VTActiveCloudflare
od0dm-kqv-5da1ma-8pbr-5380.pages.dev
13 VTActiveCloudflare
presales-connects.pages.dev
13 VTUnknownCloudflare
project-trezor-wllts.pages.dev
13 VTUnknownTrezor
qagdt-ga5-tzy-tx2-yiku-x4rz3.pages.dev
13 VTActive
qerneta-gld-zentora-a4x8hk20.pages.dev
13 VTActiveCloudflare
quiniela-fifa-2026.pages.dev
13 VTUnknown
rxwf4x4x4.pages.dev
13 VTUnknown
sales-ledger-dzw.pages.dev
13 VTActiveLedger
secure-ledger-en-us.pages.dev
13 VTActiveLedger
silly-gid-druid-75279c-btr1004qfg-2406bqw.pages.dev
13 VTActiveCloudflare
smeth.pages.dev
13 VTUnknownMetaMask
sp0ct-korqax-biz-felnex-yorvik.pages.dev
13 VTActiveCloudflare
sp0ct-relvix-biz-morqem-gelnax.pages.dev
13 VTActiveCloudflare
sp10ct-corem-biz8-furek-lazin.pages.dev
13 VTActive
sp10ct6-fralnix-biz-slurnor-platem.pages.dev
13 VTUnknown
sp11ct-fornik-biz8-varsel-modrek.pages.dev
13 VTUnknown
sp11ct-norvik-biz8-feldor-havsar.pages.dev
13 VTUnknown
sp11ct-polrek-biz8-farnix-lomvek.pages.dev
13 VTUnknown
sp11ct-pralok-biz8-kemvar-morsik.pages.dev
13 VTUnknown
sp11ct-ravnor-biz8-kelsik-domvek.pages.dev
13 VTUnknown
sp11ct-velsok-biz8-karsen-promel.pages.dev
13 VTUnknown
sp11ct-vordek-biz8-lamsor-prenik.pages.dev
13 VTUnknown
sp11ct-zavdok-biz8-pralor-kesvik.pages.dev
13 VTUnknown
Screenshot of sp12ct-dravik-biz-zemlor-parsok.pages.dev
sp12ct-dravik-biz-zemlor-parsok.pages.dev
13 VTActive
Screenshot of sp12ct-dravik-biz-zemlor-parsok.pages.dev
sp12ct-dravik-biz-zemlor-parsok.pages.dev
sp12ct-folsar-biz-hemrik-pradok.pages.dev
13 VTActiveCloudflare
sp12ct-framel-biz-kordik-zarsel.pages.dev
13 VTActiveCloudflare
sp12ct-fravsel-biz-zandor-kemvik.pages.dev
13 VTActiveCloudflare
sp12ct-harsok-biz-kemnor-folvik.pages.dev
13 VTUnknown
sp12ct-holvik-biz-fresel-kandor.pages.dev
13 VTUnknown
sp12ct-homvik-biz-zolrek-farsen.pages.dev
13 VTUnknown
sp12ct-lavdor-biz-pravsel-hondik.pages.dev
13 VTActiveCloudflare
sp12ct-lavsel-biz-hormek-frandik.pages.dev
13 VTActiveCloudflare
sp12ct-lendik-biz-prasor-favmel.pages.dev
13 VTUnknown
sp12ct-lordik-biz-prandel-hensor.pages.dev
13 VTActiveCloudflare
Screenshot of sp12ct-lorsik-biz-hazdel-framok.pages.dev
sp12ct-lorsik-biz-hazdel-framok.pages.dev
13 VTUnknown
Screenshot of sp12ct-lorsik-biz-hazdel-framok.pages.dev
sp12ct-lorsik-biz-hazdel-framok.pages.dev
Screenshot of sp12ct-varkel-biz-frensok-ladmor.pages.dev
sp12ct-varkel-biz-frensok-ladmor.pages.dev
13 VTActive
Screenshot of sp12ct-varkel-biz-frensok-ladmor.pages.dev
sp12ct-varkel-biz-frensok-ladmor.pages.dev
sp12ct-vormek-biz-pransik-keldor.pages.dev
13 VTActiveCloudflare
sp13ct-prandel-biz-zormek-lavkor.pages.dev
13 VTActiveCloudflare
sp15ct7-haskor-biz-lurten-savnik.pages.dev
13 VTActiveCloudflare
sp23ct-qelun-biz-varek-morik.pages.dev
13 VTActiveCloudflare
sp23ct-zorun-biz-melik-vapek.pages.dev
13 VTActive
sp29ct-zavlor-biz-hensik-qempar.pages.dev
13 VTActiveCloudflare
sp3ct-rislor-biz8-davnek-fomel.pages.dev
13 VTActiveCloudflare
sp3ct-zavqik-biz8-fornel-pudem.pages.dev
13 VTUnknownCloudflare
sp5ct-farol-biz8-kurem-losen.pages.dev
13 VTActiveCloudflare
sp5ct-lorek-biz8-hurem-savix.pages.dev
13 VTUnknown
sp5ct6-plaqtor-biz-fralvik-qravnex.pages.dev
13 VTUnknownBase
sp6ct-dervik-biz8-plorsen-vamrik.pages.dev
13 VTActiveCloudflare
swiftrpcnodesfix.pages.dev
13 VTUnknown
tavquro-kxt-zenmavi-c3t6hp91.pages.dev
13 VTActiveCloudflare
Screenshot of telmora-nqx-zentora-c4x3dp95.pages.dev
telmora-nqx-zentora-c4x3dp95.pages.dev
13 VTActive
Screenshot of telmora-nqx-zentora-c4x3dp95.pages.dev
telmora-nqx-zentora-c4x3dp95.pages.dev
« Prev 2 3 4 5 6 7 8 Next » Page 5 of 17

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,690 Cloudflare 21,455 Dynadot 10,757 PDR Ltd. d/b/a PublicDomainRe... 7,988 Namecheap 7,714 GoDaddy 6,622 Gname.com Pte. Ltd. 6,496 NameSilo 6,453 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,191 Trustname.com 4,167 Wix Studio 4,093 Hostinger 3,377 GitHub, Inc. 2,721 Vercel 2,710 MarkMonitor 2,584 Dominet (HK) Limited 2,180 Spaceship, Inc. 2,119 OwnRegistrar, Inc. 2,007 Netlify 1,896 Hosting Concepts B.V. d/b/a R... 1,721 Cloudflare Pages 1,697 Name.com 1,655 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,437 Key-Systems 1,403 REGRU-RU 1,383 Squarespace Domains II 1,274

Showing 1,697 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,733 genericcrypto 7,713 across 6,799 Google 6,338 Coinbase 4,195 MetaMask 3,726 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,481 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,566 Apple 1,541 x.com 1,439 base 1,426 Microsoft 1,309 Bet365 1,306

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,023 Seed Phrase Theft 19 Airdrop Scam 8,273 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust