Malicious websites today
68,740
Malicious websites this week
513,215
Malicious websites this month
2,518,617
Total malicious websites
14,067,469
TLD distribution
- .com - 50.2%
- .top - 17.3%
- .xyz - 9.7%
- .cc - 6.2%
- .buzz - 3.6%
- .shop - 3.3%
- .cn - 2.7%
- .net - 2.7%
- .org - 2.2%
- .pl - 2.1%
Threat trend
11.6M12.4M13.3M14.1M
Threats17/0623/0629/0604/0710/0716/07
Recent threats
https://www.trada3k.store
Risk score9/10- The website shares Premium accounts (Netflix, ChatGPT, etc.) at low prices, operating under a "student shop" model—violating the copyright and terms of service of the original providers.
- Users are required to message a Facebook Fanpage with the syntax "LAYMA" to receive an access code—this is a technique for harvesting user information and generating fake engagement.
https://s.team-rw.com/p/fhtb-mrgw/nwjrmgwv
Risk score9/10- The URL uses the domain name 'team-rw.com', which is not an official Steam domain (steamcommunity.com or steampowered.com)
- The website simulates the Steam Community interface but shows signs of being a fake (phishing) site
https://lowfast.vn
Risk score9/10- The newly established website (est
- 2025) claims to be an intermediary trading service, providing an "escrow" service to hold funds between buyers and sellers.
https://sites.google.com/view/tuyendungshopee...
Risk score9/10- The page was created on Google Sites (sites.google.com), a free platform frequently used to create phishing sites because it is easy to set up and difficult to verify.
- The URL contains the keyword 'tuyendungshopee2026' (Shopee recruitment 2026), a common sign of recruitment/collaborator scams.
https://app.tickmillplusx.com/login
Risk score9/10- The URL using the domain 'tickmillplusx.com' is not the official Tickmill domain (tickmill.com) and shows signs of brand impersonation.
- The page requires entering a phone number, email, and account number—collecting various sensitive personal information.
https://fb-shares-export.unispy.io
Risk score9/10- The domain unispy.io belongs to the UNISPY project, which specializes in providing Facebook automation tools such as mass messaging, auto-friending, auto-liking, and data extraction—activities that violate Facebook/Meta's Terms of Service.
- The Chrome extension requires manual installation via a ZIP file (fb-share-export-v1.3.0-production.zip) instead of the official Chrome Web Store, allowing it to bypass Google's review process and potentially contain malicious code.
https://modcheer.com/chatgpt-mod-apk
Risk score9/10- The website distributes modified APK files (MOD APK) of the genuine ChatGPT application, advertising 'Premium Unlocked' and 'No subscription'—violating OpenAI's copyright and terms of service.
- The download links use an ambiguous '?download=links' parameter, which may redirect to untrusted external sources or contain malicious code.
https://1xai.app
Risk score9/10- Fake cryptocurrency exchange website mimicking ONEX Exchange at the domain 1xai.app – a newly created domain, not the official domain of any reputable exchanges.
- Use of the brand name 'ONEX' may cause confusion with other exchanges, which is a common sign of a scam.
https://l.facebook.com/l.php?u=https://byboil...
Risk score9/10- The original link leads to byboilusdt.com—a website related to the cryptocurrency USDT, which is frequently used in financial scams.
- Facebook has blocked this link and displays a warning stating, "You won't be able to go to this link from Facebook," along with a notification that the link may violate Community Standards.
https://hackallgamepro.com
Risk score9/10- The domain name 'hackallgamepro.com' suggests game hacking services, which are typically associated with cheating activities or copyright infringement.
- The website requires a login with a username and password, collecting user authentication credentials.
https://kimcuongffx10.com
Risk score9/10- The domain 'kimcuongffx10.com' is not an official Garena domain and shows signs of being a fraudulent top-up service.
- The website impersonates Garena's 'Official Top-up Center' to deceive users.
https://smokeworldvip.com
Risk score9/10- Website sells cigarettes and tobacco products online, which is illegal under Vietnamese law
- Uses WhatsApp as primary contact method (+1 281 904 6450) instead of standard business contact information
Miễn trừ trách nhiệm: Chúng tôi không đảm bảo kết quả chính xác và không chịu trách nhiệm cho bất cứ điều gì.