Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

195,597
Total Tracked
195,579
VT Detected
88,130
Last Seen Active
98,339
Unavailable at Last Check
27
VT Pending
Mat Bao

Mat Bao 🇻🇳

🇻🇳 Vietnam Founded 2002 IANA #1586 matbao.net
1,488
Phishing Domains
331
Still Alive
1,157
Taken Down
99.3%
Detection Rate
8.6
Avg VT Score
22.2%
Alive Rate
1,488 phishing-domain abuse reports sent: Mat Bao
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,488 domains registered through Mat Bao, so the primary report total is 1,488. Database coverage starts Jul 10, 2025. 22% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.3% of domains flagged by VirusTotal 991 domains with VT ≥ 5
Tracking since Jul 2025 — latest: Aug 26, 2026
MAT BAO CORPORATION 1,488 domains
Screenshot of nexusdice.com
nexusdice.com
12 VTUnknowngenericcrypto
Screenshot of nexusdice.com
nexusdice.com
Screenshot of nexusroll.com
nexusroll.com
12 VTUnknowngenericcrypto
Screenshot of nexusroll.com
nexusroll.com
Screenshot of nezcas.com
nezcas.com
12 VTUnknowngenericcrypto
Screenshot of nezcas.com
nezcas.com
Screenshot of ovalwin.com
ovalwin.com
12 VTTaken Downgenericcrypto
Screenshot of ovalwin.com
ovalwin.com
Screenshot of ovovault.com
ovovault.com
12 VTActivecryptoscam
Screenshot of ovovault.com
ovovault.com
Screenshot of papkem.com
papkem.com
12 VTUnknowngenericcrypto
Screenshot of papkem.com
papkem.com
Screenshot of paxwex.com
paxwex.com
12 VTTaken Downgenericcrypto
Screenshot of paxwex.com
paxwex.com
Screenshot of pezowex.com
pezowex.com
12 VTUnknowngenericcrypto
Screenshot of pezowex.com
pezowex.com
Screenshot of pionexttrades.com
pionexttrades.com
12 VTActive
Screenshot of pionexttrades.com
pionexttrades.com
Screenshot of playempirex.com
playempirex.com
12 VTUnknownx.com
Screenshot of playempirex.com
playempirex.com
Screenshot of playoxc.com
playoxc.com
12 VTTaken Downgenericcrypto
Screenshot of playoxc.com
playoxc.com
Screenshot of poxcas.com
poxcas.com
12 VTUnknowngenericcrypto
Screenshot of poxcas.com
poxcas.com
Screenshot of privacycenter-x.com
privacycenter-x.com
12 VTUnknown
Screenshot of privacycenter-x.com
privacycenter-x.com
Screenshot of pump.fun-wallet-dexv3.com
pump.fun-wallet-dexv3.com
12 VTUnknownPump.fun
Screenshot of pump.fun-wallet-dexv3.com
pump.fun-wallet-dexv3.com
Screenshot of qulitex.com
qulitex.com
12 VTUnknownx.com
Screenshot of qulitex.com
qulitex.com
Screenshot of qwixbet.com
qwixbet.com
12 VTActiveblast
Screenshot of qwixbet.com
qwixbet.com
Screenshot of raxfort.com
raxfort.com
12 VTUnknowngenericcrypto
Screenshot of raxfort.com
raxfort.com
Screenshot of rockxspin.com
rockxspin.com
12 VTTaken Downgenericcrypto
Screenshot of rockxspin.com
rockxspin.com
Screenshot of roxbom.com
roxbom.com
12 VTTaken Downgenericcrypto
Screenshot of roxbom.com
roxbom.com
Screenshot of salospin.com
salospin.com
12 VTTaken Downgenericcrypto
Screenshot of salospin.com
salospin.com
Screenshot of scansolanaspin.com
scansolanaspin.com
12 VTTaken DownSolana DrainerSolana
Screenshot of scansolanaspin.com
scansolanaspin.com
Screenshot of sectoral-signal-7503.com
sectoral-signal-7503.com
12 VTActiveWalletConnect
Screenshot of sectoral-signal-7503.com
sectoral-signal-7503.com
selurin.com
12 VTTaken Downgenericcrypto
Screenshot of slotmetodo.com
slotmetodo.com
12 VTTaken Down
Screenshot of slotmetodo.com
slotmetodo.com
Screenshot of snowmusk.com
snowmusk.com
12 VTActive
Screenshot of snowmusk.com
snowmusk.com
Screenshot of sol-chey.com
sol-chey.com
12 VTActivesolana
Screenshot of sol-chey.com
sol-chey.com
Screenshot of solpamp.com
solpamp.com
12 VTTaken Downsolana
Screenshot of solpamp.com
solpamp.com
Screenshot of sorteaz.com
sorteaz.com
12 VTTaken Downgenericcrypto
Screenshot of sorteaz.com
sorteaz.com
Screenshot of spark.fi-v4-wallet-app.com
spark.fi-v4-wallet-app.com
12 VTUnknown
Screenshot of spark.fi-v4-wallet-app.com
spark.fi-v4-wallet-app.com
Screenshot of spinvyn.com
spinvyn.com
12 VTTaken Downgenericcrypto
Screenshot of spinvyn.com
spinvyn.com
Screenshot of starsed.com
starsed.com
12 VTTaken Downgenericcrypto
Screenshot of starsed.com
starsed.com
Screenshot of sushi.com-online-cdn-gateway-wallets.com
sushi.com-online-cdn-gateway-wallets.com
12 VTTaken DownAngel DrainerSushiSwap
Screenshot of sushi.com-online-cdn-gateway-wallets.com
sushi.com-online-cdn-gateway-wallets.com
Screenshot of symbiostic-fi.com
symbiostic-fi.com
12 VTActiveCloudflare
Screenshot of symbiostic-fi.com
symbiostic-fi.com
Screenshot of tarkov2026.com
tarkov2026.com
12 VTTaken Down
Screenshot of tarkov2026.com
tarkov2026.com
Screenshot of tonbetx.com
tonbetx.com
12 VTTaken Downx.com
Screenshot of tonbetx.com
tonbetx.com
tornetworklinks.com
12 VTTaken Down
Screenshot of treasury-onyx.com
treasury-onyx.com
12 VTUnknownCloudflare
Screenshot of treasury-onyx.com
treasury-onyx.com
Screenshot of tresapex.com
tresapex.com
12 VTTaken Downgenericcrypto
Screenshot of tresapex.com
tresapex.com
Screenshot of trump-sponsor.com
trump-sponsor.com
12 VTActive
Screenshot of trump-sponsor.com
trump-sponsor.com
Screenshot of udiwex.com
udiwex.com
12 VTTaken Downgenericcrypto
Screenshot of udiwex.com
udiwex.com
Screenshot of ugiwex.com
ugiwex.com
12 VTTaken Downgenericcrypto
Screenshot of ugiwex.com
ugiwex.com
Screenshot of uniswap.org-connect-wailetv2.com
uniswap.org-connect-wailetv2.com
12 VTUnknownUniswap
Screenshot of uniswap.org-connect-wailetv2.com
uniswap.org-connect-wailetv2.com
Screenshot of unlswap.org-api-app-walletv2.com
unlswap.org-api-app-walletv2.com
12 VTUnknownUniswap
Screenshot of unlswap.org-api-app-walletv2.com
unlswap.org-api-app-walletv2.com
Screenshot of update.trustwallet-fix.com
update.trustwallet-fix.com
12 VTTaken DownAngel DrainerTrustWallet
Screenshot of update.trustwallet-fix.com
update.trustwallet-fix.com
Screenshot of uriwex.com
uriwex.com
12 VTTaken Downgenericcrypto
Screenshot of uriwex.com
uriwex.com
Screenshot of vespins.com
vespins.com
12 VTActivegenericcrypto
Screenshot of vespins.com
vespins.com
Screenshot of vevocas.com
vevocas.com
12 VTActive
Screenshot of vevocas.com
vevocas.com
Screenshot of wemcas.com
wemcas.com
12 VTTaken Downgenericcrypto
Screenshot of wemcas.com
wemcas.com
Screenshot of weziwex.com
weziwex.com
12 VTTaken Downgenericcrypto
Screenshot of weziwex.com
weziwex.com
Screenshot of whelaxy.com
whelaxy.com
12 VTTaken DownEthereum
Screenshot of whelaxy.com
whelaxy.com
Screenshot of winmans.com
winmans.com
12 VTTaken Downgenericcrypto
Screenshot of winmans.com
winmans.com
winnasy.com
12 VTActive
Screenshot of xoncas.com
xoncas.com
12 VTTaken Downgenericcrypto
Screenshot of xoncas.com
xoncas.com
Screenshot of zetofex.com
zetofex.com
12 VTTaken Downgenericcrypto
Screenshot of zetofex.com
zetofex.com
Screenshot of zurofex.com
zurofex.com
12 VTTaken Downgenericcrypto
Screenshot of zurofex.com
zurofex.com
Screenshot of 1inch.io-v3-swap-connect.com
1inch.io-v3-swap-connect.com
11 VTUnknown1inch
Screenshot of 1inch.io-v3-swap-connect.com
1inch.io-v3-swap-connect.com
Screenshot of aave.com-dappv2-connect.com
aave.com-dappv2-connect.com
11 VTUnknownAave
Screenshot of aave.com-dappv2-connect.com
aave.com-dappv2-connect.com
Screenshot of appendaffix.com
appendaffix.com
11 VTUnknown
Screenshot of appendaffix.com
appendaffix.com
Screenshot of asmongamb.com
asmongamb.com
11 VTActiveCloudflare
Screenshot of asmongamb.com
asmongamb.com
Screenshot of aureviacasino.com
aureviacasino.com
11 VTUnknown
Screenshot of aureviacasino.com
aureviacasino.com
Screenshot of bavcas.com
bavcas.com
11 VTTaken Downgenericcrypto
Screenshot of bavcas.com
bavcas.com
Screenshot of beasttyx.com
beasttyx.com
11 VTActivecryptoscam
Screenshot of beasttyx.com
beasttyx.com
Screenshot of beastwon.com
beastwon.com
11 VTActivecryptoscam
Screenshot of beastwon.com
beastwon.com
Screenshot of besloon.com
besloon.com
11 VTUnknowngenericcrypto
Screenshot of besloon.com
besloon.com
Screenshot of bestwallet-airdrropen.com
bestwallet-airdrropen.com
11 VTActiveCloudflare
Screenshot of bestwallet-airdrropen.com
bestwallet-airdrropen.com
Screenshot of btc-live25.com
btc-live25.com
11 VTActiveEthereum
Screenshot of btc-live25.com
btc-live25.com
Screenshot of canadabethub.com
canadabethub.com
11 VTUnknowngenericcrypto
Screenshot of canadabethub.com
canadabethub.com
Screenshot of cascold.com
cascold.com
11 VTUnknowngenericcrypto
Screenshot of cascold.com
cascold.com
Screenshot of chatcas.com
chatcas.com
11 VTUnknown
Screenshot of chatcas.com
chatcas.com
Screenshot of claim-kaikostudios.com
claim-kaikostudios.com
11 VTUnknownCloudflare
Screenshot of claim-kaikostudios.com
claim-kaikostudios.com
Screenshot of daxodis.com
daxodis.com
11 VTUnknowncamelot
Screenshot of daxodis.com
daxodis.com
Screenshot of debank.com-dapp-wallet-connect.com
debank.com-dapp-wallet-connect.com
11 VTUnknownWalletConnect
Screenshot of debank.com-dapp-wallet-connect.com
debank.com-dapp-wallet-connect.com
Screenshot of deonax.com
deonax.com
11 VTTaken Downgenericcrypto
Screenshot of deonax.com
deonax.com
Screenshot of discord-securations.com
discord-securations.com
11 VTActiveDiscord
Screenshot of discord-securations.com
discord-securations.com
Screenshot of drakedeks.com
drakedeks.com
11 VTUnknowngenericcrypto
Screenshot of drakedeks.com
drakedeks.com
Screenshot of essnetab.com
essnetab.com
11 VTUnknowngenericcrypto
Screenshot of essnetab.com
essnetab.com
Screenshot of ether.fi-dappv4-connect-wailet.com
ether.fi-dappv4-connect-wailet.com
11 VTTaken Downgenericcloudflare
Screenshot of ether.fi-dappv4-connect-wailet.com
ether.fi-dappv4-connect-wailet.com
Screenshot of faceit.teams-ggturboarena.com
faceit.teams-ggturboarena.com
11 VTActiveacross
Screenshot of faceit.teams-ggturboarena.com
faceit.teams-ggturboarena.com
Screenshot of fortors.com
fortors.com
11 VTUnknowncryptoscam
Screenshot of fortors.com
fortors.com
Screenshot of freskot.com
freskot.com
11 VTUnknowngenericcrypto
Screenshot of freskot.com
freskot.com
Screenshot of galaxyxbet.com
galaxyxbet.com
11 VTActiveblast
Screenshot of galaxyxbet.com
galaxyxbet.com
Screenshot of gamebex.com
gamebex.com
11 VTUnknownx.com
Screenshot of gamebex.com
gamebex.com
Screenshot of geromex.com
geromex.com
11 VTUnknownMEXC
Screenshot of geromex.com
geromex.com
Screenshot of gewodex.com
gewodex.com
11 VTUnknowngenericcrypto
Screenshot of gewodex.com
gewodex.com
Screenshot of gixkover.com
gixkover.com
11 VTTaken Downgenericcrypto
Screenshot of gixkover.com
gixkover.com
Screenshot of herowex.com
herowex.com
11 VTTaken Downgenericcrypto
Screenshot of herowex.com
herowex.com
Screenshot of howemex.com
howemex.com
11 VTUnknownMEXC
Screenshot of howemex.com
howemex.com
Screenshot of hurofex.com
hurofex.com
11 VTUnknowngenericcrypto
Screenshot of hurofex.com
hurofex.com
Screenshot of hyperfoundation.xyz-connectwallet-v2.com
hyperfoundation.xyz-connectwallet-v2.com
11 VTUnknown
Screenshot of hyperfoundation.xyz-connectwallet-v2.com
hyperfoundation.xyz-connectwallet-v2.com
Screenshot of kardcas.com
kardcas.com
11 VTActiveCloudflare
Screenshot of kardcas.com
kardcas.com
Screenshot of krab1rc.com
krab1rc.com
11 VTUnknown
Screenshot of krab1rc.com
krab1rc.com
Screenshot of lixrise.com
lixrise.com
11 VTUnknowncryptoscam
Screenshot of lixrise.com
lixrise.com
Screenshot of mazerox.com
mazerox.com
11 VTTaken Downgenericcrypto
Screenshot of mazerox.com
mazerox.com
Screenshot of mbstplay.com
mbstplay.com
11 VTUnknowngenericcrypto
Screenshot of mbstplay.com
mbstplay.com
Screenshot of meancas.com
meancas.com
11 VTUnknowngenericcrypto
Screenshot of meancas.com
meancas.com
Screenshot of nanacazino.com
nanacazino.com
11 VTTaken Downgenericcrypto
Screenshot of nanacazino.com
nanacazino.com
Screenshot of ngslotcas.com
ngslotcas.com
11 VTUnknowngenericcrypto
Screenshot of ngslotcas.com
ngslotcas.com
Screenshot of nicecas.com
nicecas.com
11 VTUnknowngenericcrypto
Screenshot of nicecas.com
nicecas.com
Screenshot of noarisprotocol.com
noarisprotocol.com
11 VTActive
Screenshot of noarisprotocol.com
noarisprotocol.com
Screenshot of orliadex.com
orliadex.com
11 VTTaken Downgenericcrypto
Screenshot of orliadex.com
orliadex.com
« Prev 3 4 5 6 7 8 9 Next » Page 6 of 15

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,009 Cloudflare 21,485 Dynadot 10,887 PDR Ltd. d/b/a PublicDomainRe... 8,039 Namecheap 7,837 GoDaddy 6,675 NameSilo 6,546 Gname.com Pte. Ltd. 6,532 WebNIC 5,152 Global Domain Group 4,380 Trustname.com 4,247 Tucows 4,223 Wix Studio 4,093 Hostinger 3,403 Vercel 2,859 GitHub, Inc. 2,768 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,169 OwnRegistrar, Inc. 2,013 Netlify 1,980 Hosting Concepts B.V. d/b/a R... 1,747 Cloudflare Pages 1,724 Name.com 1,670 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,448 REGRU-RU 1,429 Key-Systems 1,411 Squarespace Domains II 1,295

Showing 1,488 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,671 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,747 genericcrypto 7,736 across 6,798 Google 6,364 Coinbase 4,214 MetaMask 3,899 Trezor 3,427 Solana 3,045 Ethereum 2,953 genericcloudflare 2,919 Binance 2,592 Kraken 2,495 Facebook 2,242 cryptoscam 1,827 Cloudflare 1,606 Apple 1,546 x.com 1,439 base 1,431 Microsoft 1,324 Bet365 1,320

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,034 Seed Phrase Theft 19 Airdrop Scam 8,312 Investment Scam 333

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust