NameSilo Abuse Response & Phishing Portfolio Data

NameSilo 🇺🇸

🇺🇸 United States Founded 2009 IANA #1479 namesilo.com

Registrar notice · CRITICAL NameSilo actively retaliated against threat researchers publishing evidence of its clients

After PhishDestroy published documented receipts of NameSilo hosting a Monero drainer operation (xmrwallet.com, $20M+ in thefts, 10+ years of inaction), our @Phish_Destroy X account was reported and suspended — despite X's own automated review clearing the reports. NameSilo then publicly defended the scam operator rather than acting on abuse complaints. Pattern of behaviour is consistent with ICANN RAA 3.18 non-compliance: abuse reports triggered retaliation instead of mitigation.

NameSilo Killed Our Twitter — full report xmrwallet.com / NameSilo exposure

PhishDestroy statement · NameSilo · IANA #1479

NameSilo: a conscious choice to be what it is

NameSilo is the worst registrar, packed with cheap domains purely for volume. It wants phishing and Russian propaganda, and it employs a large number of representatives from Russia. This is a conscious choice by the registrar to be what it is.

NameSilo hates criticism. It loves buying articles about itself, promoting itself on its own domains, and writing one-line reviews about itself.

What this means in human terms:

99.65%of NameSilo's portfolio has
ZERO confirmed traffic

1 : 1.3For every 1 top-million domain,
1.3 phishing domains

387xPhishing domains outnumber
Tranco top-10K by 387x

The "dirty ratio" depends on what you compare against:

vs Total (5.18M):0.43%"barely anything"

vs Live IP (2.3M):0.98%"almost 1%"

vs HTTP alive (958K):2.34%"every 43rd site"

vs Top-million (17.8K):125.6%"more scam than legit"

vs Real business (54.8K):40.9%"1 phishing for every 2.5 businesses"

This is why NameSilo buys phantom domains. When you compare 22,000 malicious domains against 5.18 million total, it's "0.43% — barely anything." But when you strip away the dead weight and compare against domains that actually work, the picture changes completely. The phantom domains are a statistical smokescreen.

No authority. No accountability.

For this registrar there are no authorities. Its abuse department believes it has the right and authority to help clients remove antivirus detections. From the 2018 precedent, we know that ICANN is fine with this. Therefore, we urge victims not to waste time on ICANN or NameSilo's abuse department and to contact local law enforcement directly.

We believe that a registrar relying on an outsourced operation staffed by scammers and employees of Russian state projects needs to understand one basic point: it must respect the laws of every country, not only Russia's. NameSilo presents itself as an American registrar, not as a safe haven for Russian scams and propaganda. We strongly recommend avoiding every NameSilo service, including the services of its sewer-cleaning company, and especially domain registration. These people clearly understand what they are doing and why.

Choose your country for official reporting contacts

Affected domain

Nothing is sent automatically. Review every fact and submit the complaint yourself through an official route.

7,350

Phishing Domains

1,919

Still Alive

5,428

Taken Down

97.4%

Detection Rate

8.1

Avg VT Score

26.1%

Alive Rate

7,350 phishing-domain abuse reports sent: NameSilo

PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 7,350 domains registered through NameSilo, so the primary report total is 7,350. Database coverage starts Jun 30, 2025. 26% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.

97.4% of domains flagged by VirusTotal 4,616 domains with VT ≥ 5

Tracking since Jun 2025 — latest: Oct 18, 2026

NameSilo, LLC 7,350 domains