Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

194,955
Total Tracked
194,955
VT Detected
88,193
Last Seen Active
108,704
Unavailable at Last Check
0
VT Pending
Internet Domain Service BS

Internet Domain Service BS

443
Phishing Domains
379
Still Alive
64
Taken Down
99.8%
Detection Rate
8.9
Avg VT Score
85.6%
Alive Rate
443 phishing-domain abuse reports sent: Internet Domain Service BS
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 443 domains registered through Internet Domain Service BS, so the primary report total is 443. Database coverage starts Aug 8, 2025. 86% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.8% of domains flagged by VirusTotal 327 domains with VT ≥ 5
Tracking since Aug 2025 — latest: Aug 25, 2026
Internet Domain Service BS Corp. 443 domains
Screenshot of investment.cs-clientlogin.com
investment.cs-clientlogin.com
22 VTUnknownschwab
Screenshot of investment.cs-clientlogin.com
investment.cs-clientlogin.com
Screenshot of support-v1amz.com
support-v1amz.com
22 VTActiveamazon
Screenshot of support-v1amz.com
support-v1amz.com
Screenshot of web.walletsync-dapp.com
web.walletsync-dapp.com
22 VTActiveWalletConnect
Screenshot of web.walletsync-dapp.com
web.walletsync-dapp.com
Screenshot of newuser-passkey.com
newuser-passkey.com
21 VTActivemicrosoft
Screenshot of newuser-passkey.com
newuser-passkey.com
Screenshot of p2pbybit-audit.com
p2pbybit-audit.com
21 VTActiveBybit
Screenshot of p2pbybit-audit.com
p2pbybit-audit.com
c8575-coinbase.com
20 VTActiveCoinbase
card-mtmask.com
20 VTActive
cs-portalhub.com
19 VTActive
exodus-authorized.com
19 VTCloaked · LiveExodus
Screenshot of signindat.com
signindat.com
19 VTActive
Screenshot of signindat.com
signindat.com
Screenshot of 721928coinbase.com
721928coinbase.com
18 VTUnknownCoinbase
Screenshot of 721928coinbase.com
721928coinbase.com
Screenshot of 80365365.com
80365365.com
18 VTActiveBet365
Screenshot of 80365365.com
80365365.com
Screenshot of allresolved.defisolution.net
allresolved.defisolution.net
18 VTActivegenericcrypto
Screenshot of allresolved.defisolution.net
allresolved.defisolution.net
appswap.org
18 VTActiveMetaMask
Screenshot of ledger-crypto-wallet.org
ledger-crypto-wallet.org
18 VTActiveLedger
Screenshot of ledger-crypto-wallet.org
ledger-crypto-wallet.org
Screenshot of loweii.org
loweii.org
18 VTUnknownbankidno
Screenshot of loweii.org
loweii.org
portfolio-mtmask.com
18 VTActive
Screenshot of urlvanish.com
urlvanish.com
18 VTActive
Screenshot of urlvanish.com
urlvanish.com
Screenshot of app-hyperliquids.org
app-hyperliquids.org
17 VTActiveLedger
Screenshot of app-hyperliquids.org
app-hyperliquids.org
Screenshot of bitcoin-ledger-recover.org
bitcoin-ledger-recover.org
17 VTActiveLedger
Screenshot of bitcoin-ledger-recover.org
bitcoin-ledger-recover.org
Screenshot of criptopayments.com
criptopayments.com
17 VTActive
Screenshot of criptopayments.com
criptopayments.com
cs-clientlogin.com
17 VTTaken Downschwab
Screenshot of hostmaster.metamask-io-online.com
hostmaster.metamask-io-online.com
17 VTUnknownMetaMask
Screenshot of hostmaster.metamask-io-online.com
hostmaster.metamask-io-online.com
Screenshot of jaxx-wallet.cc
jaxx-wallet.cc
17 VTActiveBlockchain.com
Screenshot of jaxx-wallet.cc
jaxx-wallet.cc
passkeydeploy.com
17 VTUnknown
privacnote.com
17 VTUnknownfacebook
Screenshot of retrostress.net
retrostress.net
17 VTActiveminecraft
Screenshot of retrostress.net
retrostress.net
Screenshot of securing-exodus.com
securing-exodus.com
17 VTActiveExodus
Screenshot of securing-exodus.com
securing-exodus.com
springetrade.com
17 VTActive
Screenshot of tetheraudit-bot.com
tetheraudit-bot.com
17 VTTaken Downpolygon
Screenshot of tetheraudit-bot.com
tetheraudit-bot.com
Screenshot of twalletaudit.com.invite-web3-copytrading.app
twalletaudit.com.invite-web3-copytrading.app
17 VTActivegenericcrypto
Screenshot of twalletaudit.com.invite-web3-copytrading.app
twalletaudit.com.invite-web3-copytrading.app
Screenshot of win777gold.com
win777gold.com
17 VTTaken Down
Screenshot of win777gold.com
win777gold.com
Screenshot of zxzaq.com
zxzaq.com
17 VTActive
Screenshot of zxzaq.com
zxzaq.com
amyid.com
16 VTActive
area.murriuspro500.com
16 VTActive
Screenshot of brad-rewards.com
brad-rewards.com
16 VTActive
Screenshot of brad-rewards.com
brad-rewards.com
Screenshot of casibom2212.com
casibom2212.com
16 VTActiveBarclays
Screenshot of casibom2212.com
casibom2212.com
Screenshot of casibom2215.com
casibom2215.com
16 VTActiveBarclays
Screenshot of casibom2215.com
casibom2215.com
coirnsbee.com
16 VTUnknownamazon
criptopayment.com
16 VTActive
fixed-floats.com
16 VTActive
Screenshot of globalseller-tt.com
globalseller-tt.com
16 VTActiveTikTok
Screenshot of globalseller-tt.com
globalseller-tt.com
Screenshot of guncelgirisleri.net
guncelgirisleri.net
16 VTActiveBarclays
Screenshot of guncelgirisleri.net
guncelgirisleri.net
Screenshot of janeiropele.com
janeiropele.com
16 VTUnknown
Screenshot of janeiropele.com
janeiropele.com
Screenshot of metamask.web3dex.cc
metamask.web3dex.cc
16 VTActiveMetaMask
Screenshot of metamask.web3dex.cc
metamask.web3dex.cc
Screenshot of mgxalliance.com
mgxalliance.com
16 VTActivefoundation
Screenshot of mgxalliance.com
mgxalliance.com
Screenshot of nvda-markets.com
nvda-markets.com
16 VTActivemastercard
Screenshot of nvda-markets.com
nvda-markets.com
Screenshot of onwin2025-giris.net
onwin2025-giris.net
16 VTActiveBarclays
Screenshot of onwin2025-giris.net
onwin2025-giris.net
Screenshot of owgirisleri.net
owgirisleri.net
16 VTActiveBarclays
Screenshot of owgirisleri.net
owgirisleri.net
Screenshot of privovte.com
privovte.com
16 VTActive
Screenshot of privovte.com
privovte.com
sdkconnecter.com
16 VTActive
Screenshot of sectechpromos.com
sectechpromos.com
16 VTTaken Down
Screenshot of sectechpromos.com
sectechpromos.com
Screenshot of trxpro.org
trxpro.org
16 VTActivetelegram
Screenshot of trxpro.org
trxpro.org
Screenshot of twalletaudit.com
twalletaudit.com
16 VTActiveAMLBot
Screenshot of twalletaudit.com
twalletaudit.com
Screenshot of xa900k.org
xa900k.org
16 VTActivegenericcrypto
Screenshot of xa900k.org
xa900k.org
Screenshot of 0000000000000000000000000.findyourjacket.com
0000000000000000000000000.findyourjacket.com
15 VTActive
Screenshot of 0000000000000000000000000.findyourjacket.com
0000000000000000000000000.findyourjacket.com
anonflare.com
15 VTActiveGoogle
Screenshot of apkcheats.org
apkcheats.org
15 VTActive
Screenshot of apkcheats.org
apkcheats.org
Screenshot of apkspotify.net
apkspotify.net
15 VTActiveamazon
Screenshot of apkspotify.net
apkspotify.net
Screenshot of apollogroups.tv
apollogroups.tv
15 VTActive
Screenshot of apollogroups.tv
apollogroups.tv
area.nx-rise.org
15 VTActive
area.prodiviagroup.org
15 VTCloaked · Live
Screenshot of bitcoin-ledger-recoveryx.org
bitcoin-ledger-recoveryx.org
15 VTActiveLedger
Screenshot of bitcoin-ledger-recoveryx.org
bitcoin-ledger-recoveryx.org
Screenshot of cazzino.org
cazzino.org
15 VTActivegenericcrypto
Screenshot of cazzino.org
cazzino.org
Screenshot of coloradooutono.com
coloradooutono.com
15 VTActive
Screenshot of coloradooutono.com
coloradooutono.com
Screenshot of cryptorafill.com
cryptorafill.com
15 VTActive
Screenshot of cryptorafill.com
cryptorafill.com
encrypted-exodus.com
15 VTActiveExodus
Screenshot of glovobrains.com
glovobrains.com
15 VTActive
Screenshot of glovobrains.com
glovobrains.com
Screenshot of leap-app.cc
leap-app.cc
15 VTActive
Screenshot of leap-app.cc
leap-app.cc
Screenshot of ledgerstak.dev
ledgerstak.dev
15 VTActiveLedger
Screenshot of ledgerstak.dev
ledgerstak.dev
Screenshot of lucky777winner.com
lucky777winner.com
15 VTActive
Screenshot of lucky777winner.com
lucky777winner.com
Screenshot of onwin-girisleri.net
onwin-girisleri.net
15 VTActiveBarclays
Screenshot of onwin-girisleri.net
onwin-girisleri.net
Screenshot of onwin2433.net
onwin2433.net
15 VTActiveBarclays
Screenshot of onwin2433.net
onwin2433.net
Screenshot of onwin2434.net
onwin2434.net
15 VTActiveBarclays
Screenshot of onwin2434.net
onwin2434.net
Screenshot of onwin2436.net
onwin2436.net
15 VTActiveBarclays
Screenshot of onwin2436.net
onwin2436.net
Screenshot of onwin2449.net
onwin2449.net
15 VTActiveBarclays
Screenshot of onwin2449.net
onwin2449.net
Screenshot of owgir.net
owgir.net
15 VTActiveBarclays
Screenshot of owgir.net
owgir.net
polymarket-miniapp.cc
15 VTActiveTelegram
quantumcorehubledger.com
15 VTActiveLedger
Screenshot of spax80b-cointelegraph.com
spax80b-cointelegraph.com
15 VTCloaked · LiveEthereum
Screenshot of spax80b-cointelegraph.com
spax80b-cointelegraph.com
Screenshot of spx88k.com
spx88k.com
15 VTActive
Screenshot of spx88k.com
spx88k.com
Screenshot of trxlg.org
trxlg.org
15 VTActivetelegram
Screenshot of trxlg.org
trxlg.org
Screenshot of trxue.com
trxue.com
15 VTActivetelegram
Screenshot of trxue.com
trxue.com
Screenshot of wildsatz.com
wildsatz.com
15 VTCloaked · Livegenericcrypto
Screenshot of wildsatz.com
wildsatz.com
xa20r.net
15 VTActive
xa90p.com
15 VTActive
Screenshot of xa90p.org
xa90p.org
15 VTActivegenericcrypto
Screenshot of xa90p.org
xa90p.org
Screenshot of aqrcapitalm.com
aqrcapitalm.com
14 VTActiveacross
Screenshot of aqrcapitalm.com
aqrcapitalm.com
Screenshot of aureogames.com
aureogames.com
14 VTActivegenericcrypto
Screenshot of aureogames.com
aureogames.com
Screenshot of barbados-exchange.cc
barbados-exchange.cc
14 VTActiveEthereum
Screenshot of barbados-exchange.cc
barbados-exchange.cc
Screenshot of bc-game-asia.com
bc-game-asia.com
14 VTActivediscord
Screenshot of bc-game-asia.com
bc-game-asia.com
Screenshot of betaspace.dev
betaspace.dev
14 VTActive
Screenshot of betaspace.dev
betaspace.dev
Screenshot of commercesellerhub.com
commercesellerhub.com
14 VTActiveTikTok
Screenshot of commercesellerhub.com
commercesellerhub.com
Screenshot of d1cpay.com
d1cpay.com
14 VTActiveGoogle
Screenshot of d1cpay.com
d1cpay.com
exodus-control.com
14 VTActiveExodus
Screenshot of faciliteanalise.com
faciliteanalise.com
14 VTActive
Screenshot of faciliteanalise.com
faciliteanalise.com
Screenshot of giris.onwin2448.net
giris.onwin2448.net
14 VTActiveBarclays
Screenshot of giris.onwin2448.net
giris.onwin2448.net
Screenshot of ledger-bitcoin-recovery.org
ledger-bitcoin-recovery.org
14 VTActiveBitcoin
Screenshot of ledger-bitcoin-recovery.org
ledger-bitcoin-recovery.org
Screenshot of ledgerholders.com
ledgerholders.com
14 VTActiveLedger
Screenshot of ledgerholders.com
ledgerholders.com
Screenshot of ledgersholder.com
ledgersholder.com
14 VTActiveLedger
Screenshot of ledgersholder.com
ledgersholder.com
1 2 3 4 Next » Page 1 of 5

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,954 Cloudflare 21,468 Dynadot 10,827 PDR Ltd. d/b/a PublicDomainRe... 8,024 Namecheap 7,798 GoDaddy 6,648 NameSilo 6,518 Gname.com Pte. Ltd. 6,516 WebNIC 5,147 Global Domain Group 4,348 Trustname.com 4,230 Tucows 4,206 Wix Studio 4,093 Hostinger 3,395 Vercel 2,823 GitHub, Inc. 2,751 MarkMonitor 2,585 Dominet (HK) Limited 2,192 Spaceship, Inc. 2,147 OwnRegistrar, Inc. 2,012 Netlify 1,972 Hosting Concepts B.V. d/b/a R... 1,733 Cloudflare Pages 1,715 Name.com 1,663 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,487 Cosmotown 1,446 REGRU-RU 1,427 Key-Systems 1,409 Squarespace Domains II 1,292

Showing 443 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,667 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,739 genericcrypto 7,732 across 6,798 Google 6,355 Coinbase 4,202 MetaMask 3,781 Trezor 3,419 Solana 3,034 Ethereum 2,950 genericcloudflare 2,919 Binance 2,587 Kraken 2,492 Facebook 2,239 cryptoscam 1,821 Cloudflare 1,592 Apple 1,543 x.com 1,439 base 1,427 Microsoft 1,323 Bet365 1,316

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,031 Seed Phrase Theft 19 Airdrop Scam 8,296 Investment Scam 330

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust