Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

0
Total Tracked
0
VT Detected
0
Last Seen Active
0
Unavailable at Last Check
0
VT Pending
Namecheap

Namecheap 🇺🇸

🇺🇸 United States Founded 2000 IANA #1068 namecheap.com
6,912
Phishing Domains
3,352
Still Alive
3,394
Taken Down
89.7%
Detection Rate
7.0
Avg VT Score
48.5%
Alive Rate
2,677 Abuse Reports Sent to Namecheap
PhishDestroy has filed 2,677 abuse reports covering 2,668 phishing domains registered through Namecheap. Reports sent since Jan 2, 2026. 126% of reported domains remain active, suggesting inadequate enforcement of abuse policies.
89.7% of domains flagged by VirusTotal 3,277 domains with VT ≥ 5
Tracking since Jul 2024 — latest: Jul 29, 2026
8/100
Global Risk Score — Low Risk
Based on 342M domains analyzed across 4,154 registrars
Full Analysis
23,150,904
Global Domains
37.5%
1-Year Reg
77.6%
Active IPs

NameCheap, Inc. has a low risk score of 8/100, indicating a relatively clean registrar environment. With 77.6% of domains having active IPs and only 22.4% without, the overall activity level is reassuring.

MetaMask Brand High Threat

2,335 domains tracked
2,335
Total Domains
729
Still Alive
1,597
Taken Down
96.5%
Detection Rate
9.9
Avg VT Score
31.2%
Alive Rate
31.2% of domains still active 1,714 domains with VT ≥ 5
Tracking since Apr 2024 — latest: Jul 28, 2026
NAMECHEAP INC 6,912 domains
support-acctek.com
25 VTLiveMicrosoft
Screenshot of 964-iq-conttact.ubpages.com
964-iq-conttact.ubpages.com
24 VTTaken DownFacebook
Screenshot of 964-iq-conttact.ubpages.com
964-iq-conttact.ubpages.com
Screenshot of mediasync.cv
mediasync.cv
24 VTUnknownyoutube
Screenshot of mediasync.cv
mediasync.cv
Screenshot of 9y2awj2l.wsamoeesth.wefronetma4ms.ink
9y2awj2l.wsamoeesth.wefronetma4ms.ink
23 VTUnknownMicrosoft
Screenshot of 9y2awj2l.wsamoeesth.wefronetma4ms.ink
9y2awj2l.wsamoeesth.wefronetma4ms.ink
mxtestacionamentos.com
23 VTLive
Screenshot of scootwinner.com
scootwinner.com
23 VTUnknownBinance
Screenshot of scootwinner.com
scootwinner.com
Screenshot of wsamoeesth.wefronetma4ms.ink
wsamoeesth.wefronetma4ms.ink
23 VTUnknownGoogle
Screenshot of wsamoeesth.wefronetma4ms.ink
wsamoeesth.wefronetma4ms.ink
Screenshot of 0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
22 VTTaken DownBanco de Venezuela
Screenshot of 0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev
Screenshot of bet365.casinologinonline.com
bet365.casinologinonline.com
22 VTLiveBet365
Screenshot of bet365.casinologinonline.com
bet365.casinologinonline.com
blockex.world
22 VTUnknownPayPal
check02id.com
22 VTLive
Screenshot of facebook-feed7r6h.rollout.site
facebook-feed7r6h.rollout.site
22 VTUnknownFacebook
Screenshot of facebook-feed7r6h.rollout.site
facebook-feed7r6h.rollout.site
Screenshot of instagram-ios-appg39b.rollout.site
instagram-ios-appg39b.rollout.site
22 VTUnknown["instagram"]
Screenshot of instagram-ios-appg39b.rollout.site
instagram-ios-appg39b.rollout.site
Screenshot of konf1rmasi-hadi4h10jut4.help1.site
konf1rmasi-hadi4h10jut4.help1.site
22 VTUnknowndana
Screenshot of konf1rmasi-hadi4h10jut4.help1.site
konf1rmasi-hadi4h10jut4.help1.site
login-web3-coinbase.wstd.io
22 VTUnknownCoinbase
seven7.vip
22 VTLive
Screenshot of 6ps7dukt.wsamoeesth.wefronetma4ms.ink
6ps7dukt.wsamoeesth.wefronetma4ms.ink
21 VTUnknownMicrosoft
Screenshot of 6ps7dukt.wsamoeesth.wefronetma4ms.ink
6ps7dukt.wsamoeesth.wefronetma4ms.ink
Screenshot of aviatronika.online
aviatronika.online
21 VTLive
Screenshot of aviatronika.online
aviatronika.online
Screenshot of bellsouth-att-sign-in-904158.webflow.io
bellsouth-att-sign-in-904158.webflow.io
21 VTTaken Down
Screenshot of bellsouth-att-sign-in-904158.webflow.io
bellsouth-att-sign-in-904158.webflow.io
Screenshot of bingejobs.com
bingejobs.com
21 VTUnknown["netflix"]
Screenshot of bingejobs.com
bingejobs.com
Screenshot of dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
21 VTTaken Down
Screenshot of dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
dd5cea65-8789-4278-9de6-38e02b38d22d-00-8on25l5vyms5.riker.replit.dev
Screenshot of galabetz.com
galabetz.com
21 VTUnknown
Screenshot of galabetz.com
galabetz.com
Screenshot of geldchantix-trade.com
geldchantix-trade.com
21 VTUnknownbinance
Screenshot of geldchantix-trade.com
geldchantix-trade.com
Screenshot of help1.site
help1.site
21 VTUnknown
Screenshot of help1.site
help1.site
Screenshot of mailbox00.pythonanywhere.com
mailbox00.pythonanywhere.com
21 VTTaken Down
Screenshot of mailbox00.pythonanywhere.com
mailbox00.pythonanywhere.com
Screenshot of metamasklogini.webflow.io
metamasklogini.webflow.io
21 VTTaken DownMetaMask
Screenshot of metamasklogini.webflow.io
metamasklogini.webflow.io
Screenshot of phamtom.online
phamtom.online
21 VTUnknownGoogle
Screenshot of phamtom.online
phamtom.online
robloxt.cv
21 VTUnknownRoblox
Screenshot of syriatel.gamefy.io.proxy.openvpn-ssh.com
syriatel.gamefy.io.proxy.openvpn-ssh.com
21 VTUnknownadobe
Screenshot of syriatel.gamefy.io.proxy.openvpn-ssh.com
syriatel.gamefy.io.proxy.openvpn-ssh.com
trixauvex.org
21 VTUnknown
Screenshot of vremyas.com
vremyas.com
21 VTUnknown
Screenshot of vremyas.com
vremyas.com
Screenshot of yourtinyurl.live
yourtinyurl.live
21 VTCloaked · Live
Screenshot of yourtinyurl.live
yourtinyurl.live
Screenshot of 156.67.218.149.sslip.io
156.67.218.149.sslip.io
20 VTUnknownApple
Screenshot of 156.67.218.149.sslip.io
156.67.218.149.sslip.io
Screenshot of alert.casino6868.xyz
alert.casino6868.xyz
20 VTUnknownFacebook
Screenshot of alert.casino6868.xyz
alert.casino6868.xyz
Screenshot of attlink.keepo.bio
attlink.keepo.bio
20 VTUnknowngenericcloudflare
Screenshot of attlink.keepo.bio
attlink.keepo.bio
Screenshot of bellsouth-att-sign-in-850e6d.webflow.io
bellsouth-att-sign-in-850e6d.webflow.io
20 VTTaken Down
Screenshot of bellsouth-att-sign-in-850e6d.webflow.io
bellsouth-att-sign-in-850e6d.webflow.io
Screenshot of bet.ply365.net
bet.ply365.net
20 VTUnknownBet365
Screenshot of bet.ply365.net
bet.ply365.net
Screenshot of bitmartxlogink.webflow.io
bitmartxlogink.webflow.io
20 VTTaken Down["ethereum"]
Screenshot of bitmartxlogink.webflow.io
bitmartxlogink.webflow.io
Screenshot of boltonlittleleague.org
boltonlittleleague.org
20 VTUnknownBooking
Screenshot of boltonlittleleague.org
boltonlittleleague.org
Screenshot of contact-iraq-964.ubpages.com
contact-iraq-964.ubpages.com
20 VTTaken DownFacebook
Screenshot of contact-iraq-964.ubpages.com
contact-iraq-964.ubpages.com
Screenshot of danaaa-paylaateerr.brodhi.me
danaaa-paylaateerr.brodhi.me
20 VTUnknowndana
Screenshot of danaaa-paylaateerr.brodhi.me
danaaa-paylaateerr.brodhi.me
Screenshot of direct-login-update.webflow.io
direct-login-update.webflow.io
20 VTTaken Down
Screenshot of direct-login-update.webflow.io
direct-login-update.webflow.io
domatisc.ink
20 VTUnknown
dospablosca.com
20 VTLive
facebook.hotzxgirl.online
20 VTCloaked · LiveFacebook
Screenshot of futurepulsewire.com
futurepulsewire.com
20 VTLiveCloudflare
Screenshot of futurepulsewire.com
futurepulsewire.com
Screenshot of galabetonline.casino
galabetonline.casino
20 VTLive
Screenshot of galabetonline.casino
galabetonline.casino
Screenshot of grked.online
grked.online
20 VTLive
Screenshot of grked.online
grked.online
Screenshot of housecleaningservicemiramar.com
housecleaningservicemiramar.com
20 VTLive
Screenshot of housecleaningservicemiramar.com
housecleaningservicemiramar.com
Screenshot of icrmoving.com
icrmoving.com
20 VTLivetrustwallet
Screenshot of icrmoving.com
icrmoving.com
Screenshot of kucoinloginc.webflow.io
kucoinloginc.webflow.io
20 VTTaken DownKuCoin
Screenshot of kucoinloginc.webflow.io
kucoinloginc.webflow.io
linkedall.org
20 VTUnknown
linkedwith.org
20 VTUnknown
Screenshot of lloyd-nonexcitative-ping.ngrok-free.dev
lloyd-nonexcitative-ping.ngrok-free.dev
20 VTTaken Down
Screenshot of lloyd-nonexcitative-ping.ngrok-free.dev
lloyd-nonexcitative-ping.ngrok-free.dev
lostmoneyforum.com
20 VTUnknown
Screenshot of lvl99.store
lvl99.store
20 VTLive
Screenshot of lvl99.store
lvl99.store
Screenshot of m-app--start-trezor.webflow.io
m-app--start-trezor.webflow.io
20 VTTaken DownTrezor
Screenshot of m-app--start-trezor.webflow.io
m-app--start-trezor.webflow.io
Screenshot of m.biblesignals.com
m.biblesignals.com
20 VTUnknown
Screenshot of m.biblesignals.com
m.biblesignals.com
Screenshot of meta-mask-template.webflow.io
meta-mask-template.webflow.io
20 VTLiveMetaMask
Screenshot of meta-mask-template.webflow.io
meta-mask-template.webflow.io
Screenshot of metamesklgi.webflow.io
metamesklgi.webflow.io
20 VTTaken DownMetaMask
Screenshot of metamesklgi.webflow.io
metamesklgi.webflow.io
Screenshot of metiiimask-extensio.webflow.io
metiiimask-extensio.webflow.io
20 VTTaken DownMetaMask
Screenshot of metiiimask-extensio.webflow.io
metiiimask-extensio.webflow.io
Screenshot of mut-tamask-wellat.webflow.io
mut-tamask-wellat.webflow.io
20 VTTaken DownMetaMask
Screenshot of mut-tamask-wellat.webflow.io
mut-tamask-wellat.webflow.io
Screenshot of mx648.com
mx648.com
20 VTCloaked · Live
Screenshot of mx648.com
mx648.com
Screenshot of ndrt.ink
ndrt.ink
20 VTLive
Screenshot of ndrt.ink
ndrt.ink
Screenshot of netflixfw54.rollout.site
netflixfw54.rollout.site
20 VTUnknownNetflix
Screenshot of netflixfw54.rollout.site
netflixfw54.rollout.site
Screenshot of ravenstoneconstruction.com
ravenstoneconstruction.com
20 VTLive
Screenshot of ravenstoneconstruction.com
ravenstoneconstruction.com
Screenshot of rblox.me
rblox.me
20 VTUnknownroblox
Screenshot of rblox.me
rblox.me
Screenshot of robinhoodlogin.start.page
robinhoodlogin.start.page
20 VTLiveRobinhood
Screenshot of robinhoodlogin.start.page
robinhoodlogin.start.page
Screenshot of robuxruleonline.vip
robuxruleonline.vip
20 VTCloaked · Live
Screenshot of robuxruleonline.vip
robuxruleonline.vip
Screenshot of salmon-deena-43.tiiny.site
salmon-deena-43.tiiny.site
20 VTTaken DownWeTransfer
Screenshot of salmon-deena-43.tiiny.site
salmon-deena-43.tiiny.site
Screenshot of spotify.servernotification.events
spotify.servernotification.events
20 VTTaken DownGoogle
Screenshot of spotify.servernotification.events
spotify.servernotification.events
Screenshot of sso-uphold-com-cdnn-auth-en-u.webflow.io
sso-uphold-com-cdnn-auth-en-u.webflow.io
20 VTTaken Down
Screenshot of sso-uphold-com-cdnn-auth-en-u.webflow.io
sso-uphold-com-cdnn-auth-en-u.webflow.io
Screenshot of sweeply.my
sweeply.my
20 VTUnknownyoutube
Screenshot of sweeply.my
sweeply.my
Screenshot of tiktok.tnzmedia.com
tiktok.tnzmedia.com
20 VTUnknown["tiktok"]
Screenshot of tiktok.tnzmedia.com
tiktok.tnzmedia.com
Screenshot of w9z1vupcj.localto.net
w9z1vupcj.localto.net
20 VTLive
Screenshot of w9z1vupcj.localto.net
w9z1vupcj.localto.net
Screenshot of wakefieldtz.com
wakefieldtz.com
20 VTCloaked · Live
Screenshot of wakefieldtz.com
wakefieldtz.com
Screenshot of web.amarifirmdynamic-concepts.com
web.amarifirmdynamic-concepts.com
20 VTUnknown
Screenshot of web.amarifirmdynamic-concepts.com
web.amarifirmdynamic-concepts.com
Screenshot of wetransfers.tiiny.site
wetransfers.tiiny.site
20 VTTaken Down
Screenshot of wetransfers.tiiny.site
wetransfers.tiiny.site
Screenshot of winupdate.live
winupdate.live
20 VTLive
Screenshot of winupdate.live
winupdate.live
www.ledgersupport-sync.com
20 VTTaken DownLedger
Screenshot of 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
19 VTTaken Downbancopichincha
Screenshot of 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev
Screenshot of 7x4r.com
7x4r.com
19 VTUnknown
Screenshot of 7x4r.com
7x4r.com
89betlc.com
19 VTLive
ai-like.net
19 VTLive
al-akshaintl.com
19 VTCloaked · Livedocusign
Screenshot of altriglifting.com
altriglifting.com
19 VTLivenetflix
Screenshot of altriglifting.com
altriglifting.com
Screenshot of amarifirmdynamic-concepts.com
amarifirmdynamic-concepts.com
19 VTLiveGoogle
Screenshot of amarifirmdynamic-concepts.com
amarifirmdynamic-concepts.com
Screenshot of americanmovingco.org
americanmovingco.org
19 VTCloaked · Liveadobe
Screenshot of americanmovingco.org
americanmovingco.org
anus-staylard.xyz
19 VTUnknown
Screenshot of app-ledgerrliv-app.webflow.io
app-ledgerrliv-app.webflow.io
19 VTLiveLedger
Screenshot of app-ledgerrliv-app.webflow.io
app-ledgerrliv-app.webflow.io
asteara.org
19 VTUnknown
astryxrix.com
19 VTUnknown
Screenshot of automatordesign.com
automatordesign.com
19 VTLivetrustwallet
Screenshot of automatordesign.com
automatordesign.com
Screenshot of backoffice.myvibe.co
backoffice.myvibe.co
19 VTTaken DownMetaMask
Screenshot of backoffice.myvibe.co
backoffice.myvibe.co
Screenshot of bellsouth-att-signing-verify-48fc56.webflow.io
bellsouth-att-signing-verify-48fc56.webflow.io
19 VTTaken Down
Screenshot of bellsouth-att-signing-verify-48fc56.webflow.io
bellsouth-att-signing-verify-48fc56.webflow.io
Screenshot of blockchainlogin.webflow.io
blockchainlogin.webflow.io
19 VTTaken Down
Screenshot of blockchainlogin.webflow.io
blockchainlogin.webflow.io
Screenshot of boostzrous.us
boostzrous.us
19 VTCloaked · LiveGoogle
Screenshot of boostzrous.us
boostzrous.us
Screenshot of caain.live
caain.live
19 VTTaken Down
Screenshot of caain.live
caain.live
Screenshot of cool-murdock.82-165-96-161.plesk.page
cool-murdock.82-165-96-161.plesk.page
19 VTTaken Down
Screenshot of cool-murdock.82-165-96-161.plesk.page
cool-murdock.82-165-96-161.plesk.page
deep-ai-guard.store
19 VTUnknown
1 2 3 4 Next » Page 1 of 70

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,346 Cloudflare, Inc. 21,083 GoDaddy.com, LLC 9,264 Gname.com Pte. Ltd. 7,932 PDR Ltd. d/b/a PublicD... 7,720 DYNADOT LLC 7,377 NameSilo, LLC 6,896 NameCheap, Inc. 5,624 Dynadot Inc 4,954 Web Commerce Communica... 4,139 Global Domain Group LLC 3,969 Tucows Domains Inc. 3,667 Fewmoretaps OU d/b/a T... 3,335 HOSTINGER operations, UAB 3,156 Dominet (HK) Limited 2,410 GitHub, Inc. 2,335 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,996 OwnRegistrar, Inc. 1,935 NameMart Pte. Ltd. 1,858 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,453 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,382 REGRU-RU 1,374 NAMECHEAP INC 1,288 Ultahost, Inc. 1,261

Showing 6,912 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,593 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,836 Airdrop Scam 6,249 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 230 Recovery Scam 97 Verification Scam 64 Giveaway Scam 55 NFT Mint 51 Credential Phishing 31 Staking Scam 7 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,400 Google 5,357 across 5,108 Coinbase 3,939 Trezor 3,056 genericcloudflare 2,862 Solana 2,849 Ethereum 2,541 Kraken 2,404 MetaMask 2,335 Binance 2,230 Facebook 1,916 Microsoft 1,783 cryptoscam 1,694 Bet365 1,601 x.com 1,360 Apple 1,233 Trust Wallet 1,114 discord 1,078

Showing 2,335 domains above

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,965 Seed Phrase Theft 17 Airdrop Scam 8,029 Investment Scam 310

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust

Site links