Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

186,299
Total Tracked
186,299
Threat Detected
79,738
Last Seen Active
89,333
Unavailable at Last Check
50
VT Pending
Namecheap

Namecheap 🇺🇸

🇺🇸 United States Founded 2000 IANA #1068 namecheap.com
7,247
Phishing Domains
4,328
Still Alive
2,919
Taken Down
98.3%
Detection Rate
7.1
Avg VT Score
59.7%
Alive Rate
7,247 phishing-domain abuse reports sent: Namecheap
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 7,247 domains registered through Namecheap, so the primary report total is 7,247. Database coverage starts Jul 24, 2024. 60% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
98.3% of domains flagged by VirusTotal 3,939 domains with VT ≥ 5
Tracking since Jul 2024 — latest: Aug 12, 2026
8/100
Global Risk Score — Low Risk
Based on 342M domains analyzed across 4,154 registrars
Full Analysis
23,150,904
Global Domains
37.5%
1-Year Reg
77.6%
Active IPs

NameCheap, Inc. has a low risk score of 8/100, indicating a relatively clean registrar environment. With 77.6% of domains having active IPs and only 22.4% without, the overall activity level is reassuring.

NameCheap, Inc. 7,247 domains
support-acctek.com
25 VTActiveMicrosoft
Screenshot of 964-iq-conttact.ubpages.com
964-iq-conttact.ubpages.com
24 VTActiveFacebook
Screenshot of 964-iq-conttact.ubpages.com
964-iq-conttact.ubpages.com
Screenshot of mediasync.cv
mediasync.cv
24 VTTaken Downyoutube
Screenshot of mediasync.cv
mediasync.cv
Screenshot of 9y2awj2l.wsamoeesth.wefronetma4ms.ink
9y2awj2l.wsamoeesth.wefronetma4ms.ink
23 VTTaken DownMicrosoft
Screenshot of 9y2awj2l.wsamoeesth.wefronetma4ms.ink
9y2awj2l.wsamoeesth.wefronetma4ms.ink
Screenshot of scootwinner.com
scootwinner.com
23 VTTaken DownBinance
Screenshot of scootwinner.com
scootwinner.com
Screenshot of updatdmsntfcn.liveblog365.com
updatdmsntfcn.liveblog365.com
23 VTCloaked · Livemicrosoft
Screenshot of updatdmsntfcn.liveblog365.com
updatdmsntfcn.liveblog365.com
Screenshot of wsamoeesth.wefronetma4ms.ink
wsamoeesth.wefronetma4ms.ink
23 VTTaken DownGoogle
Screenshot of wsamoeesth.wefronetma4ms.ink
wsamoeesth.wefronetma4ms.ink
Screenshot of 0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
22 VTTaken DownBanco de Venezuela
Screenshot of 0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
blockex.world
22 VTTaken DownPayPal
check02id.com
22 VTActive
Screenshot of facebook-feed7r6h.rollout.site
facebook-feed7r6h.rollout.site
22 VTTaken DownFacebook
Screenshot of facebook-feed7r6h.rollout.site
facebook-feed7r6h.rollout.site
Screenshot of instagram-ios-appg39b.rollout.site
instagram-ios-appg39b.rollout.site
22 VTTaken Down["instagram"]
Screenshot of instagram-ios-appg39b.rollout.site
instagram-ios-appg39b.rollout.site
Screenshot of konf1rmasi-hadi4h10jut4.help1.site
konf1rmasi-hadi4h10jut4.help1.site
22 VTTaken Downdana
Screenshot of konf1rmasi-hadi4h10jut4.help1.site
konf1rmasi-hadi4h10jut4.help1.site
login-web3-coinbase.wstd.io
22 VTActiveCoinbase
Screenshot of 6ps7dukt.wsamoeesth.wefronetma4ms.ink
6ps7dukt.wsamoeesth.wefronetma4ms.ink
21 VTTaken DownMicrosoft
Screenshot of 6ps7dukt.wsamoeesth.wefronetma4ms.ink
6ps7dukt.wsamoeesth.wefronetma4ms.ink
ajmontblanc.org
21 VTActive
Screenshot of americanmovingco.org
americanmovingco.org
21 VTCloaked · Liveadobe
Screenshot of americanmovingco.org
americanmovingco.org
Screenshot of aviatronika.online
aviatronika.online
21 VTActive
Screenshot of aviatronika.online
aviatronika.online
Screenshot of bellsouth-att-sign-in-904158.webflow.io
bellsouth-att-sign-in-904158.webflow.io
21 VTTaken Down
Screenshot of bellsouth-att-sign-in-904158.webflow.io
bellsouth-att-sign-in-904158.webflow.io
Screenshot of bingejobs.com
bingejobs.com
21 VTTaken Down["netflix"]
Screenshot of bingejobs.com
bingejobs.com
Screenshot of dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
21 VTTaken Down
Screenshot of dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
Screenshot of documentos-online.com
documentos-online.com
21 VTActive
Screenshot of documentos-online.com
documentos-online.com
Screenshot of galabetz.com
galabetz.com
21 VTActive
Screenshot of galabetz.com
galabetz.com
Screenshot of geldchantix-trade.com
geldchantix-trade.com
21 VTTaken Downbinance
Screenshot of geldchantix-trade.com
geldchantix-trade.com
Screenshot of help1.site
help1.site
21 VTTaken Down
Screenshot of help1.site
help1.site
Screenshot of m.biblesignals.com
m.biblesignals.com
21 VTActive
Screenshot of m.biblesignals.com
m.biblesignals.com
Screenshot of mailbox00.pythonanywhere.com
mailbox00.pythonanywhere.com
21 VTActive
Screenshot of mailbox00.pythonanywhere.com
mailbox00.pythonanywhere.com
Screenshot of metamasklogini.webflow.io
metamasklogini.webflow.io
21 VTTaken DownMetaMask
Screenshot of metamasklogini.webflow.io
metamasklogini.webflow.io
Screenshot of phamtom.online
phamtom.online
21 VTTaken DownGoogle
Screenshot of phamtom.online
phamtom.online
robloxt.cv
21 VTTaken DownRoblox
Screenshot of syriatel.gamefy.io.proxy.openvpn-ssh.com
syriatel.gamefy.io.proxy.openvpn-ssh.com
21 VTTaken Downadobe
Screenshot of syriatel.gamefy.io.proxy.openvpn-ssh.com
syriatel.gamefy.io.proxy.openvpn-ssh.com
trixauvex.org
21 VTTaken Down
Screenshot of yourtinyurl.live
yourtinyurl.live
21 VTCloaked · Live
Screenshot of yourtinyurl.live
yourtinyurl.live
Screenshot of yousitedecuidado-ec.infinityfree.me
yousitedecuidado-ec.infinityfree.me
21 VTCloaked · Live
Screenshot of yousitedecuidado-ec.infinityfree.me
yousitedecuidado-ec.infinityfree.me
Screenshot of zimbrastat.com
zimbrastat.com
21 VTActive
Screenshot of zimbrastat.com
zimbrastat.com
Screenshot of 156.67.218.149.sslip.io
156.67.218.149.sslip.io
20 VTTaken DownApple
Screenshot of 156.67.218.149.sslip.io
156.67.218.149.sslip.io
Screenshot of 61oursectionalert-4a77a9.alpha-ai.page
61oursectionalert-4a77a9.alpha-ai.page
20 VTActivemicrosoft
Screenshot of 61oursectionalert-4a77a9.alpha-ai.page
61oursectionalert-4a77a9.alpha-ai.page
Screenshot of alert.casino6868.xyz
alert.casino6868.xyz
20 VTTaken DownFacebook
Screenshot of alert.casino6868.xyz
alert.casino6868.xyz
Screenshot of aruty.com
aruty.com
20 VTActivegoogle
Screenshot of aruty.com
aruty.com
Screenshot of arvax.xyz
arvax.xyz
20 VTActive
Screenshot of arvax.xyz
arvax.xyz
Screenshot of attlink.keepo.bio
attlink.keepo.bio
20 VTUnknowngenericcloudflare
Screenshot of attlink.keepo.bio
attlink.keepo.bio
Screenshot of bellsouth-att-sign-in-850e6d.webflow.io
bellsouth-att-sign-in-850e6d.webflow.io
20 VTTaken Down
Screenshot of bellsouth-att-sign-in-850e6d.webflow.io
bellsouth-att-sign-in-850e6d.webflow.io
Screenshot of bet.ply365.net
bet.ply365.net
20 VTTaken DownBet365
Screenshot of bet.ply365.net
bet.ply365.net
Screenshot of biblesignals.com
biblesignals.com
20 VTActive
Screenshot of biblesignals.com
biblesignals.com
Screenshot of bitmartxlogink.webflow.io
bitmartxlogink.webflow.io
20 VTTaken Down["ethereum"]
Screenshot of bitmartxlogink.webflow.io
bitmartxlogink.webflow.io
Screenshot of boltonlittleleague.org
boltonlittleleague.org
20 VTActiveBooking
Screenshot of boltonlittleleague.org
boltonlittleleague.org
Screenshot of contact-iraq-964.ubpages.com
contact-iraq-964.ubpages.com
20 VTActiveFacebook
Screenshot of contact-iraq-964.ubpages.com
contact-iraq-964.ubpages.com
Screenshot of danaaa-paylaateerr.brodhi.me
danaaa-paylaateerr.brodhi.me
20 VTTaken Downdana
Screenshot of danaaa-paylaateerr.brodhi.me
danaaa-paylaateerr.brodhi.me
Screenshot of direct-login-update.webflow.io
direct-login-update.webflow.io
20 VTTaken Down
Screenshot of direct-login-update.webflow.io
direct-login-update.webflow.io
domatisc.ink
20 VTTaken DownGoogle
Screenshot of fundmyprop.com
fundmyprop.com
20 VTActivetrustwallet
Screenshot of fundmyprop.com
fundmyprop.com
Screenshot of grked.online
grked.online
20 VTActive
Screenshot of grked.online
grked.online
Screenshot of housecleaningservicemiramar.com
housecleaningservicemiramar.com
20 VTActive
Screenshot of housecleaningservicemiramar.com
housecleaningservicemiramar.com
Screenshot of houstontacolover.com
houstontacolover.com
20 VTCloaked · Livedocusign
Screenshot of houstontacolover.com
houstontacolover.com
Screenshot of icrmoving.com
icrmoving.com
20 VTActivetrustwallet
Screenshot of icrmoving.com
icrmoving.com
Screenshot of kucoinloginc.webflow.io
kucoinloginc.webflow.io
20 VTTaken DownKuCoin
Screenshot of kucoinloginc.webflow.io
kucoinloginc.webflow.io
linkedall.org
20 VTActive
linkedwith.org
20 VTActive
Screenshot of lloyd-nonexcitative-ping.ngrok-free.dev
lloyd-nonexcitative-ping.ngrok-free.dev
20 VTActive
Screenshot of lloyd-nonexcitative-ping.ngrok-free.dev
lloyd-nonexcitative-ping.ngrok-free.dev
lostmoneyforum.com
20 VTTaken Down
Screenshot of lvl99.store
lvl99.store
20 VTActive
Screenshot of lvl99.store
lvl99.store
Screenshot of m-app--start-trezor.webflow.io
m-app--start-trezor.webflow.io
20 VTTaken DownTrezor
Screenshot of m-app--start-trezor.webflow.io
m-app--start-trezor.webflow.io
Screenshot of meta-mask-template.webflow.io
meta-mask-template.webflow.io
20 VTActiveMetaMask
Screenshot of meta-mask-template.webflow.io
meta-mask-template.webflow.io
Screenshot of metamesklgi.webflow.io
metamesklgi.webflow.io
20 VTTaken DownMetaMask
Screenshot of metamesklgi.webflow.io
metamesklgi.webflow.io
Screenshot of metiiimask-extensio.webflow.io
metiiimask-extensio.webflow.io
20 VTTaken DownMetaMask
Screenshot of metiiimask-extensio.webflow.io
metiiimask-extensio.webflow.io
Screenshot of mut-tamask-wellat.webflow.io
mut-tamask-wellat.webflow.io
20 VTTaken DownMetaMask
Screenshot of mut-tamask-wellat.webflow.io
mut-tamask-wellat.webflow.io
Screenshot of ndrt.ink
ndrt.ink
20 VTActive
Screenshot of ndrt.ink
ndrt.ink
Screenshot of nestli.pro
nestli.pro
20 VTActive
Screenshot of nestli.pro
nestli.pro
Screenshot of netflixfw54.rollout.site
netflixfw54.rollout.site
20 VTTaken DownNetflix
Screenshot of netflixfw54.rollout.site
netflixfw54.rollout.site
Screenshot of padisahbetwebsayfasi.live
padisahbetwebsayfasi.live
20 VTActive
Screenshot of padisahbetwebsayfasi.live
padisahbetwebsayfasi.live
Screenshot of rblox.me
rblox.me
20 VTTaken Downroblox
Screenshot of rblox.me
rblox.me
Screenshot of robinhoodlogin.start.page
robinhoodlogin.start.page
20 VTActiveRobinhood
Screenshot of robinhoodlogin.start.page
robinhoodlogin.start.page
Screenshot of robuxruleonline.vip
robuxruleonline.vip
20 VTCloaked · Liveroblox
Screenshot of robuxruleonline.vip
robuxruleonline.vip
Screenshot of salmon-deena-43.tiiny.site
salmon-deena-43.tiiny.site
20 VTActiveWeTransfer
Screenshot of salmon-deena-43.tiiny.site
salmon-deena-43.tiiny.site
Screenshot of securebooking.com.ngrok.dev
securebooking.com.ngrok.dev
20 VTActive
Screenshot of securebooking.com.ngrok.dev
securebooking.com.ngrok.dev
Screenshot of spotify.servernotification.events
spotify.servernotification.events
20 VTActiveGoogle
Screenshot of spotify.servernotification.events
spotify.servernotification.events
Screenshot of sso-uphold-com-cdnn-auth-en-u.webflow.io
sso-uphold-com-cdnn-auth-en-u.webflow.io
20 VTTaken Down
Screenshot of sso-uphold-com-cdnn-auth-en-u.webflow.io
sso-uphold-com-cdnn-auth-en-u.webflow.io
Screenshot of sweeply.my
sweeply.my
20 VTTaken Downyoutube
Screenshot of sweeply.my
sweeply.my
Screenshot of tiktok.tnzmedia.com
tiktok.tnzmedia.com
20 VTTaken Down["tiktok"]
Screenshot of tiktok.tnzmedia.com
tiktok.tnzmedia.com
varenie.live
20 VTActive
Screenshot of w9z1vupcj.localto.net
w9z1vupcj.localto.net
20 VTActive
Screenshot of w9z1vupcj.localto.net
w9z1vupcj.localto.net
Screenshot of web.amarifirmdynamic-concepts.com
web.amarifirmdynamic-concepts.com
20 VTTaken Down
Screenshot of web.amarifirmdynamic-concepts.com
web.amarifirmdynamic-concepts.com
Screenshot of wetransfers.tiiny.site
wetransfers.tiiny.site
20 VTActive
Screenshot of wetransfers.tiiny.site
wetransfers.tiiny.site
Screenshot of winupdate.live
winupdate.live
20 VTActive
Screenshot of winupdate.live
winupdate.live
www.ledgersupport-sync.com
20 VTActiveLedger
Screenshot of xalurxojup.cyou
xalurxojup.cyou
20 VTTaken Down
Screenshot of xalurxojup.cyou
xalurxojup.cyou
Screenshot of 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
19 VTTaken Downbancopichincha
Screenshot of 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
Screenshot of 7x4r.com
7x4r.com
19 VTTaken Down
Screenshot of 7x4r.com
7x4r.com
89betlc.com
19 VTActive
ai-like.net
19 VTActive
al-akshaintl.com
19 VTCloaked · Livedocusign
Screenshot of amarifirmdynamic-concepts.com
amarifirmdynamic-concepts.com
19 VTActiveGoogle
Screenshot of amarifirmdynamic-concepts.com
amarifirmdynamic-concepts.com
anus-staylard.xyz
19 VTTaken Down
Screenshot of app-ledgerrliv-app.webflow.io
app-ledgerrliv-app.webflow.io
19 VTActiveLedger
Screenshot of app-ledgerrliv-app.webflow.io
app-ledgerrliv-app.webflow.io
asteara.org
19 VTTaken Down
astryxrix.com
19 VTActive
Screenshot of backoffice.myvibe.co
backoffice.myvibe.co
19 VTActiveMetaMask
Screenshot of backoffice.myvibe.co
backoffice.myvibe.co
Screenshot of bellsouth-att-signing-verify-48fc56.webflow.io
bellsouth-att-signing-verify-48fc56.webflow.io
19 VTTaken Down
Screenshot of bellsouth-att-signing-verify-48fc56.webflow.io
bellsouth-att-signing-verify-48fc56.webflow.io
bersatu.me
19 VTActive
Screenshot of bet365.casinologinonline.com
bet365.casinologinonline.com
19 VTActiveBet365
Screenshot of bet365.casinologinonline.com
bet365.casinologinonline.com
1 2 3 4 Next » Page 1 of 73

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,243 Cloudflare 21,326 Dynadot 10,328 GoDaddy 9,305 PDR Ltd. d/b/a PublicDomainRe... 7,878 Namecheap 7,247 Gname.com Pte. Ltd. 6,391 NameSilo 6,260 WebNIC 5,098 Global Domain Group 4,141 Tucows 4,095 Trustname.com 3,863 Hostinger 3,234 GitHub, Inc. 2,560 MarkMonitor 2,560 Vercel 2,410 Dominet (HK) Limited 2,141 Spaceship, Inc. 1,999 OwnRegistrar, Inc. 1,927 Hosting Concepts B.V. d/b/a R... 1,594 CSC Corporate Domains, Inc. 1,584 Name.com 1,571 Netlify 1,559 MAT BAO CORPORATION 1,475 REGRU-RU 1,380 Key-Systems 1,374 Cosmotown 1,302 Cloudflare Pages 1,284 Ultahost, Inc. 1,106 Porkbun LLC 1,088

Showing 7,247 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,411 Solana Drainer 2,639 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,267 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,647 Ledger 7,589 across 6,778 Google 6,269 Coinbase 4,151 MetaMask 3,323 Trezor 3,290 Solana 2,967 Ethereum 2,920 genericcloudflare 2,918 Binance 2,558 Kraken 2,450 Facebook 2,191 cryptoscam 1,756 Apple 1,494 x.com 1,439 base 1,410 Cloudflare 1,305 Bet365 1,300 Microsoft 1,260

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,003 Seed Phrase Theft 17 Airdrop Scam 8,176 Investment Scam 322

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust