NameSilo Abuse Response and Phishing Portfolio Analysis

Documented phishing domains, targeted-report outcomes, portfolio methodology, and the PhishDestroy accountability record for NameSilo, LLC.

196,114
Total Tracked
196,112
VT Detected
88,618
Last Seen Active
99,589
Unavailable at Last Check
2
VT Pending
NameSilo

NameSilo πŸ‡ΊπŸ‡Έ

πŸ‡ΊπŸ‡Έ United States Founded 2009 IANA #1479 namesilo.com
Registrar notice Β· CRITICAL NameSilo actively retaliated against threat researchers publishing evidence of its clients

After PhishDestroy published documented receipts of NameSilo hosting a Monero drainer operation (xmrwallet.com, $20M+ in thefts, 10+ years of inaction), our @Phish_Destroy X account was reported and suspended β€” despite X's own automated review clearing the reports. NameSilo then publicly defended the scam operator rather than acting on abuse complaints. Pattern of behaviour is consistent with ICANN RAA 3.18 non-compliance: abuse reports triggered retaliation instead of mitigation.

NameSilo Killed Our Twitter β€” full report xmrwallet.com / NameSilo exposure
PhishDestroy statement Β· NameSilo Β· IANA #1479

NameSilo: a conscious choice to be what it is

NameSilo is the worst registrar, packed with cheap domains purely for volume. It wants phishing and Russian propaganda, and it employs a large number of representatives from Russia. This is a conscious choice by the registrar to be what it is.

NameSilo hates criticism. It loves buying articles about itself, promoting itself on its own domains, and writing one-line reviews about itself.

What this means in human terms:

99.65%of NameSilo's portfolio has
ZERO confirmed traffic
1 : 1.3For every 1 top-million domain,
1.3 phishing domains
387xPhishing domains outnumber
Tranco top-10K by 387x

The "dirty ratio" depends on what you compare against:

vs Total (5.18M):0.43%"barely anything"
vs Live IP (2.3M):0.98%"almost 1%"
vs HTTP alive (958K):2.34%"every 43rd site"
vs Top-million (17.8K):125.6%"more scam than legit"
vs Real business (54.8K):40.9%"1 phishing for every 2.5 businesses"

This is why NameSilo buys phantom domains. When you compare 22,000 malicious domains against 5.18 million total, it's "0.43% β€” barely anything." But when you strip away the dead weight and compare against domains that actually work, the picture changes completely. The phantom domains are a statistical smokescreen.

Report to Your Local Authorities

Choose your country to see verified official cybercrime reporting routes. Add the affected domain to prepare a local-language complaint draft.

Nothing is sent automatically. Review every fact and submit the complaint yourself through an official route.

6,559
Phishing Domains
2,155
Still Alive
4,404
Taken Down
97.4%
Detection Rate
8.1
Avg VT Score
32.9%
Alive Rate
6,559 phishing-domain abuse reports sent: NameSilo
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 6,559 domains registered through NameSilo, so the primary report total is 6,559. Database coverage starts Jun 30, 2025. 33% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
97.4% of domains flagged by VirusTotal 4,056 domains with VT β‰₯ 5
Tracking since Jun 2025 β€” latest: Aug 29, 2026
NameSilo, LLC 6,559 domains
Screenshot of saraghrar.scholarlumni.info
saraghrar.scholarlumni.info
17 VTTaken Downallegro
Screenshot of saraghrar.scholarlumni.info
saraghrar.scholarlumni.info
Screenshot of schiwzer-sbb-cffr66.info
schiwzer-sbb-cffr66.info
17 VTTaken Down
Screenshot of schiwzer-sbb-cffr66.info
schiwzer-sbb-cffr66.info
Screenshot of secundoclick.com
secundoclick.com
17 VTCloaked Β· LiveCloudflare
Screenshot of secundoclick.com
secundoclick.com
Screenshot of shufersal.top
shufersal.top
17 VTTaken Downamazon
Screenshot of shufersal.top
shufersal.top
Screenshot of skywin77slot.com
skywin77slot.com
17 VTActive
Screenshot of skywin77slot.com
skywin77slot.com
Screenshot of slot117login.net
slot117login.net
17 VTActive
Screenshot of slot117login.net
slot117login.net
Screenshot of srvclouds.com
srvclouds.com
17 VTTaken Down
Screenshot of srvclouds.com
srvclouds.com
Screenshot of stampsinquiry.com
stampsinquiry.com
17 VTTaken Downusps
Screenshot of stampsinquiry.com
stampsinquiry.com
Screenshot of starclub.cc
starclub.cc
17 VTTaken Downgenericcrypto
Screenshot of starclub.cc
starclub.cc
t-mobile.acuifg.top
17 VTTaken Down
Screenshot of t-mobile.auqisg.top
t-mobile.auqisg.top
17 VTTaken Down
Screenshot of t-mobile.auqisg.top
t-mobile.auqisg.top
Screenshot of t-mobile.cawgtj.top
t-mobile.cawgtj.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.cawgtj.top
t-mobile.cawgtj.top
Screenshot of t-mobile.converselwicd.top
t-mobile.converselwicd.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.converselwicd.top
t-mobile.converselwicd.top
Screenshot of t-mobile.converselzwtu.top
t-mobile.converselzwtu.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.converselzwtu.top
t-mobile.converselzwtu.top
Screenshot of t-mobile.dmhcua.top
t-mobile.dmhcua.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.dmhcua.top
t-mobile.dmhcua.top
Screenshot of t-mobile.doepuh.top
t-mobile.doepuh.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.doepuh.top
t-mobile.doepuh.top
Screenshot of t-mobile.dtvbsu.top
t-mobile.dtvbsu.top
17 VTTaken Down
Screenshot of t-mobile.dtvbsu.top
t-mobile.dtvbsu.top
Screenshot of t-mobile.fbdjog.top
t-mobile.fbdjog.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.fbdjog.top
t-mobile.fbdjog.top
Screenshot of t-mobile.fhgayl.top
t-mobile.fhgayl.top
17 VTTaken Down
Screenshot of t-mobile.fhgayl.top
t-mobile.fhgayl.top
Screenshot of t-mobile.fswiyv.top
t-mobile.fswiyv.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.fswiyv.top
t-mobile.fswiyv.top
Screenshot of t-mobile.gilqud.top
t-mobile.gilqud.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.gilqud.top
t-mobile.gilqud.top
t-mobile.guplnr.top
17 VTTaken Down
Screenshot of t-mobile.hditwq.top
t-mobile.hditwq.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.hditwq.top
t-mobile.hditwq.top
Screenshot of t-mobile.hnvyjq.top
t-mobile.hnvyjq.top
17 VTTaken Down
Screenshot of t-mobile.hnvyjq.top
t-mobile.hnvyjq.top
Screenshot of t-mobile.hxouka.top
t-mobile.hxouka.top
17 VTTaken Down
Screenshot of t-mobile.hxouka.top
t-mobile.hxouka.top
Screenshot of t-mobile.idegws.top
t-mobile.idegws.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.idegws.top
t-mobile.idegws.top
t-mobile.irvlkq.top
17 VTUnknownGoogle
Screenshot of t-mobile.ldvpoy.top
t-mobile.ldvpoy.top
17 VTTaken DownGoogle
Screenshot of t-mobile.ldvpoy.top
t-mobile.ldvpoy.top
t-mobile.lxykjb.top
17 VTTaken Down
Screenshot of t-mobile.meudwo.top
t-mobile.meudwo.top
17 VTTaken Down
Screenshot of t-mobile.meudwo.top
t-mobile.meudwo.top
Screenshot of t-mobile.miagnet.top
t-mobile.miagnet.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.miagnet.top
t-mobile.miagnet.top
Screenshot of t-mobile.mjwplk.top
t-mobile.mjwplk.top
17 VTTaken Down
Screenshot of t-mobile.mjwplk.top
t-mobile.mjwplk.top
t-mobile.mnrwgh.top
17 VTTaken Down
Screenshot of t-mobile.mxnrca.top
t-mobile.mxnrca.top
17 VTTaken Down
Screenshot of t-mobile.mxnrca.top
t-mobile.mxnrca.top
Screenshot of t-mobile.onkfcy.top
t-mobile.onkfcy.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.onkfcy.top
t-mobile.onkfcy.top
Screenshot of t-mobile.oswybj.top
t-mobile.oswybj.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.oswybj.top
t-mobile.oswybj.top
Screenshot of t-mobile.ovrpjz.top
t-mobile.ovrpjz.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.ovrpjz.top
t-mobile.ovrpjz.top
Screenshot of t-mobile.pvkezn.top
t-mobile.pvkezn.top
17 VTTaken Down
Screenshot of t-mobile.pvkezn.top
t-mobile.pvkezn.top
t-mobile.shuzwx.top
17 VTUnknown
Screenshot of t-mobile.spgdcj.top
t-mobile.spgdcj.top
17 VTTaken Down
Screenshot of t-mobile.spgdcj.top
t-mobile.spgdcj.top
Screenshot of t-mobile.swmzre.top
t-mobile.swmzre.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.swmzre.top
t-mobile.swmzre.top
t-mobile.tejkpi.top
17 VTUnknown
Screenshot of t-mobile.wqtfyc.top
t-mobile.wqtfyc.top
17 VTTaken Downt-mobile
Screenshot of t-mobile.wqtfyc.top
t-mobile.wqtfyc.top
Screenshot of tanakabauer.info
tanakabauer.info
17 VTTaken Down
Screenshot of tanakabauer.info
tanakabauer.info
tesla-stock-trading-voltera-capital-markets.sbs
17 VTActive
Screenshot of text-secure-esl.top
text-secure-esl.top
17 VTTaken Downeslfcu
Screenshot of text-secure-esl.top
text-secure-esl.top
Screenshot of tknishop.top
tknishop.top
17 VTUnknownBitget
Screenshot of tknishop.top
tknishop.top
track.tumorbiologie.info
17 VTActiveallegro
Screenshot of tradingviewfx.live
tradingviewfx.live
17 VTTaken Downcryptoscam
Screenshot of tradingviewfx.live
tradingviewfx.live
Screenshot of trak-gty-d76.zentoro.info
trak-gty-d76.zentoro.info
17 VTUnknown
Screenshot of trak-gty-d76.zentoro.info
trak-gty-d76.zentoro.info
Screenshot of transaction-esl-org.top
transaction-esl-org.top
17 VTUnknowneslfcu
Screenshot of transaction-esl-org.top
transaction-esl-org.top
Screenshot of transaction1-esl-org.top
transaction1-esl-org.top
17 VTUnknowneslfcu
Screenshot of transaction1-esl-org.top
transaction1-esl-org.top
Screenshot of transactions1-esl-org.top
transactions1-esl-org.top
17 VTUnknowneslfcu
Screenshot of transactions1-esl-org.top
transactions1-esl-org.top
Screenshot of trust-secure-device.icu
trust-secure-device.icu
17 VTActive
Screenshot of trust-secure-device.icu
trust-secure-device.icu
Screenshot of us03web.my
us03web.my
17 VTTaken Down
Screenshot of us03web.my
us03web.my
Screenshot of us04web-zoom-workspace9786677402028402.online
us04web-zoom-workspace9786677402028402.online
17 VTTaken Down
Screenshot of us04web-zoom-workspace9786677402028402.online
us04web-zoom-workspace9786677402028402.online
Screenshot of wallet.pinnacletradingassets.com
wallet.pinnacletradingassets.com
17 VTActiveWalletConnect
Screenshot of wallet.pinnacletradingassets.com
wallet.pinnacletradingassets.com
Screenshot of wallxnet.cm-at.sbs
wallxnet.cm-at.sbs
17 VTTaken Downacross
Screenshot of wallxnet.cm-at.sbs
wallxnet.cm-at.sbs
Screenshot of wcb.taleagrm.cc
wcb.taleagrm.cc
17 VTTaken Downtelegram
Screenshot of wcb.taleagrm.cc
wcb.taleagrm.cc
Screenshot of web-meets.com
web-meets.com
17 VTActiveBinance
Screenshot of web-meets.com
web-meets.com
Screenshot of whatdpapp.com
whatdpapp.com
17 VTTaken Downwhatsapp
Screenshot of whatdpapp.com
whatdpapp.com
winfoacacorp.com
17 VTUnknown
Screenshot of winpulse.cc
winpulse.cc
17 VTUnknowngenericcrypto
Screenshot of winpulse.cc
winpulse.cc
Screenshot of worldcupvote.live
worldcupvote.live
17 VTTaken DownSolana
Screenshot of worldcupvote.live
worldcupvote.live
Screenshot of worldilbertyfinacial.site
worldilbertyfinacial.site
17 VTTaken DownAngel Drainergenericcrypto
Screenshot of worldilbertyfinacial.site
worldilbertyfinacial.site
Screenshot of wwb.talegrew.top
wwb.talegrew.top
17 VTTaken Downtelegram
Screenshot of wwb.talegrew.top
wwb.talegrew.top
Screenshot of www.easywgcash.top
www.easywgcash.top
17 VTTaken Downcash app
Screenshot of www.easywgcash.top
www.easywgcash.top
wwwl-find-myiphone.help
17 VTUnknownApple
Screenshot of xrplnode.dev
xrplnode.dev
17 VTActiveCloudflare
Screenshot of xrplnode.dev
xrplnode.dev
Screenshot of xzwc527206833.xpj3553.com
xzwc527206833.xpj3553.com
17 VTActive
Screenshot of xzwc527206833.xpj3553.com
xzwc527206833.xpj3553.com
Screenshot of zix.casino
zix.casino
17 VTTaken Downgenericcrypto
Screenshot of zix.casino
zix.casino
Screenshot of zoom-meets.us
zoom-meets.us
17 VTTaken DownMicrosoft
Screenshot of zoom-meets.us
zoom-meets.us
Screenshot of zoomaccess.us
zoomaccess.us
17 VTActiveZoom
Screenshot of zoomaccess.us
zoomaccess.us
Screenshot of zoominvitesmeetingsxy.com
zoominvitesmeetingsxy.com
17 VTTaken Downzoom
Screenshot of zoominvitesmeetingsxy.com
zoominvitesmeetingsxy.com
Screenshot of zoommeetingsinvitees.com
zoommeetingsinvitees.com
17 VTTaken Downzoom
Screenshot of zoommeetingsinvitees.com
zoommeetingsinvitees.com
Screenshot of zoomvideomeeting.work
zoomvideomeeting.work
17 VTActiveZoom
Screenshot of zoomvideomeeting.work
zoomvideomeeting.work
Screenshot of 0365uu.com
0365uu.com
16 VTActiveBet365
Screenshot of 0365uu.com
0365uu.com
Screenshot of 2879ledger.com
2879ledger.com
16 VTUnknownLedger
Screenshot of 2879ledger.com
2879ledger.com
3m.xueba58.com
16 VTActive
50caz.top
16 VTTaken Down
Screenshot of 510xp.com
510xp.com
16 VTActive
Screenshot of 510xp.com
510xp.com
Screenshot of 626945.xyz
626945.xyz
16 VTActive
Screenshot of 626945.xyz
626945.xyz
Screenshot of 626948.xyz
626948.xyz
16 VTActive
Screenshot of 626948.xyz
626948.xyz
Screenshot of 99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live
99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live
16 VTActive
Screenshot of 99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live
99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live
Screenshot of 9googllemeett.live
9googllemeett.live
16 VTActive
Screenshot of 9googllemeett.live
9googllemeett.live
Screenshot of 9mod.cc
9mod.cc
16 VTCloaked Β· Liveblast
Screenshot of 9mod.cc
9mod.cc
accounts.odtdrv.icu
16 VTUnknownGoogle
Screenshot of aevoexchang.cc
aevoexchang.cc
16 VTTaken Down
Screenshot of aevoexchang.cc
aevoexchang.cc
aiglobaltrademarketing.com
16 VTActive
aiinvest-us.com
16 VTActivecoinbase
Screenshot of allocation-suliend.mom
allocation-suliend.mom
16 VTTaken DownSolend
Screenshot of allocation-suliend.mom
allocation-suliend.mom
Screenshot of amar777.net
amar777.net
16 VTActiveRoblox
Screenshot of amar777.net
amar777.net
Screenshot of app-legion.cc
app-legion.cc
16 VTActive
Screenshot of app-legion.cc
app-legion.cc
Screenshot of app.clioudit.com
app.clioudit.com
16 VTTaken DownApple
Screenshot of app.clioudit.com
app.clioudit.com
Screenshot of app.tshoptav.vip
app.tshoptav.vip
16 VTTaken Downbase
Screenshot of app.tshoptav.vip
app.tshoptav.vip
Screenshot of apple.com-l.cloud
apple.com-l.cloud
16 VTTaken DownApple
Screenshot of apple.com-l.cloud
apple.com-l.cloud
Screenshot of arrangehimalayas.com
arrangehimalayas.com
16 VTUnknownwetransfer
Screenshot of arrangehimalayas.com
arrangehimalayas.com
Screenshot of asgdfiasujfg.click
asgdfiasujfg.click
16 VTUnknown
Screenshot of asgdfiasujfg.click
asgdfiasujfg.click
Screenshot of asgxcu-eth-usdc1.top
asgxcu-eth-usdc1.top
16 VTUnknown
Screenshot of asgxcu-eth-usdc1.top
asgxcu-eth-usdc1.top
Screenshot of asiawin168slot.com
asiawin168slot.com
16 VTActive
Screenshot of asiawin168slot.com
asiawin168slot.com
Β« Prev 3 4 5 6 7 8 9 Next Β» Page 6 of 66

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,088 Cloudflare 21,493 Dynadot 10,926 PDR Ltd. d/b/a PublicDomainRe... 8,058 Namecheap 7,875 GoDaddy 6,698 NameSilo 6,559 Gname.com Pte. Ltd. 6,544 WebNIC 5,154 Global Domain Group 4,403 Trustname.com 4,260 Tucows 4,233 Wix Studio 4,093 Hostinger 3,408 Vercel 2,867 GitHub, Inc. 2,772 MarkMonitor 2,588 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,198 OwnRegistrar, Inc. 2,019 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,758 Cloudflare Pages 1,731 Name.com 1,681 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,454 REGRU-RU 1,430 Key-Systems 1,413 Squarespace Domains II 1,299

Showing 6,559 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,750 genericcrypto 7,740 across 6,798 Google 6,377 Coinbase 4,215 MetaMask 4,083 Trezor 3,434 Solana 3,054 Ethereum 2,954 genericcloudflare 2,919 Binance 2,596 Kraken 2,497 Facebook 2,242 cryptoscam 1,833 Cloudflare 1,607 Apple 1,549 x.com 1,439 base 1,432 Microsoft 1,324 Bet365 1,321

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,036 Seed Phrase Theft 19 Airdrop Scam 8,321 Investment Scam 336

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization β†’

Threat Intelligence Checksβ€” every domain is scanned & cross-checked against:
urlscan.ioScreenshot Β· DOM Β· HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS Β· certs Β· categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 Β· AdGuard Β· CleanBrowsingWeb-CheckFull surface scan
Global Vendor Syncβ€” confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust