Malicious websites today
215
Malicious websites this week
126,506
Malicious websites this month
482,368
Total malicious websites
22,221,125
TLD distribution
- .com - 49.8%
- .top - 17.3%
- .xyz - 10.1%
- .cc - 6.3%
- .buzz - 3.4%
- .shop - 3.4%
- .net - 2.9%
- .cn - 2.6%
- .org - 2.3%
- .info - 1.8%
Threat trend
21.8M21.9M22.1M22.2M
Threats17/1023/1029/1003/1109/1115/11
Recent threats
https://interpolofficialportal.online
Risk score9/10- The domain name interpolofficialportal.online impersonates INTERPOL, but INTERPOL operates only on interpol.int, so this is brand impersonation meant to borrow the agency's authority.
- The page copies INTERPOL's descriptive text almost word for word, including the I-24/7 communications system and the criminal databases, then places it under an unrelated private firm called Top-Notch Investigation and Security Firm.
https://kuota-gratis-81gb3.xysbg.top
Risk score9/10- The page promises 81GB of free mobile data tied to Indonesia's 81st Independence Day, a typical too-good-to-be-true lure used in giveaway scams.
- It asks visitors for their phone number, which lets the operator harvest personal data for spam, phishing, or SMS fraud.
https://aeeonmall-markerting-jp.space
Risk score9/10- The domain aeeonmall-markerting-jp.space imitates the AEON MALL brand with a misspelled name ('aeeonmall', 'markerting') and is hosted on a cheap .space TLD rather than an official AEON domain.
- The domain was registered on November 7, 2026, only six days before analysis, which is typical of short-lived phishing and scam infrastructure.
https://talentconnectsmy.com.smartcced.com
Risk score9/10- The page is hosted on a subdomain of an unrelated domain, talentconnectsmy.com.smartcced.com, which imitates the brand domain talentconnectsmy.com listed in the contact email; this is a typical deceptive-subdomain technique.
- The site promotes a task-based work-from-home scheme with unrealistic pay of up to MYR 350 per day or MYR 7,500 per month, with no resume or experience required, which is a hallmark of fake job and task scams.
https://bloodcheat.com
Risk score9/10- The site distributes game cheats, executors, skin changers and unlock tools for dozens of popular games, a category that is widely used to deliver infostealers, loaders and other malware to unsuspecting gamers.
- The downloads are ZIP archives protected by a password ('2026') and users are told to run the program as Administrator. Password-protected archives prevent antivirus and email or web gateway scanners from inspecting the contents, and the admin instruction grants the payload full system access.
https://hyreoperate-inuk.com
Risk score9/10- The site advertises unrealistically high pay of GBP 120-480 per day for vague, beginner-friendly online tasks that need no experience, no interview and no qualifications. This is a classic pattern of task-based job scams.
- The application form collects a WhatsApp number, full name, age, gender and email, and says the operator will make contact only through WhatsApp within 24 hours. Scam operations commonly use this to move victims onto unmonitored chat channels, where they are pressured into paying deposits or fees.
https://dichvucongltlp.vip
Risk score9/10- The page imitates a Google Play Store listing for the Vietnamese Ministry of Public Security public service app, yet it is hosted on the unrelated domain dichvucongltlp.vip rather than play.google.com.
- The .vip domain was registered only about two weeks before the analysis date, which is typical of short-lived phishing and malware distribution infrastructure.
https://flexihirehub.online
Risk score9/10- The site advertises a vague 'flexible part-time' hotel booking job with no experience needed, which matches the typical task or job scam pattern aimed at Hong Kong residents.
- It makes attractive income claims, such as HK$1.5k weekly and HK$35 hourly, with 100% flexibility and 24/7 support, but gives no concrete job description, employer identity or company registration details.
https://capasidy.com
Risk score9/10- The domain capasidy.com was registered on November 6, 2026, only one day before this analysis, which is typical of throwaway domains used for scams and fraud campaigns.
- The footer claims 'Copyright 2016 - 2026' and boasts 300,000+ members, $1,003,851 paid and 500,000+ payments, which contradicts the brand-new domain registration and points to fabricated credibility and social proof.
https://dash.capasidy.com/register.php
Risk score9/10- The page promises a $100 free cash reward for signing up in about 30 seconds, a classic too-good-to-be-true lure used in reward and paid-task scams to harvest credentials.
- The registration form collects a full name, email address, username, and password with confirmation. This builds a profile that can be abused for identity theft and credential stuffing, since many users reuse passwords.
https://shorturl.at/xxzdx
Risk score10/10- The URL is a shorturl.at redirect link that hides its true destination, a technique commonly used to conceal malicious landing pages from users and security filters.
- The page now shows a 404 Not Found error saying the link does not exist, which suggests the short link was removed or disabled, possibly after an abuse report or takedown of the malicious target.
https://mccreditconsultant.com.pt-onlineshop....
Risk score9/10- The scanned URL is a subdomain of an unrelated domain, pt-onlineshop.com, that embeds the brand name mccreditconsultant.com as a prefix. This is a typical way to disguise a malicious host as a legitimate brand.
- The pt-onlineshop.com domain was registered on May 26, 2025, and has no apparent connection to a Malaysian moneylender. This suggests a throwaway domain used to redirect victims to the scam site.
Miễn trừ trách nhiệm: Chúng tôi không đảm bảo kết quả chính xác và không chịu trách nhiệm cho bất cứ điều gì.