Malicious websites today
6,190
Malicious websites this week
104,134
Malicious websites this month
4,363,318
Total malicious websites
19,275,247
TLD distribution
- .com - 50.7%
- .top - 16.6%
- .xyz - 9.9%
- .cc - 6.2%
- .shop - 3.2%
- .buzz - 3.2%
- .net - 3.2%
- .cn - 2.6%
- .org - 2.4%
- .info - 1.9%
Threat trend
15.4M16.7M18.0M19.3M
Threats27/0702/0808/0813/0819/0825/08
Recent threats
https://support-center.adobesupport.workers.d...
Risk score9/10- The domain is hosted on Cloudflare Workers (workers.dev), which is a free hosting platform frequently abused by threat actors to create convincing phishing pages at no cost.
- The subdomain 'support-center.adobesupport' is designed to impersonate Adobe's official support brand, combining a generic descriptor with a lookalike 'adobesupport' label rather than the legitimate 'adobe.com' domain.
https://amerivintage-jp.com
Risk score9/10- The domain was registered very recently, which is a common trait of fraudulent e-commerce sites that are quickly set up and abandoned.
- The WHOIS registrant information shows a PO Box address, which is frequently used by scam operations to obscure their true location.
https://novabio.shop
Risk score9/10- The website sells research peptides, GLP-based weight loss products, growth peptides, and HGH-related items, which are commonly associated with unregulated or gray-market pharmaceutical sales.
- The site claims to be based at 3800 N Mill Rd, Vineland, NJ 08360, USA, but provides no verifiable business registration, license, or FDA/DEA credentials typical of legitimate peptide or pharmaceutical vendors.
https://thesmokeworld.com
Risk score9/10- The domain was registered very recently, which is a common trait of fraudulent e-commerce sites that are quickly set up and abandoned.
- The site is branded as 'Fuclothingstore' but the domain is 'thesmokeworld.com', a mismatch that is frequently seen in scam operations.
https://video-pro.top/i/i2mb9d5d
Risk score9/10- The domain video-pro.top was registered very recently, which is a common characteristic of malicious or short-lived phishing infrastructure.
- The TLD .top is frequently abused for spam, phishing, and malware distribution campaigns due to its low cost and lax registration policies.
https://dropshippo.shop
Risk score9/10- The domain dropshippo.shop was registered very recently on May 1, 2026, which is only a few months old and consistent with patterns seen in fraudulent or short-lived scam websites.
- The site uses a cheap, low-barrier-to-entry top-level domain (.shop), which is frequently abused by fraudulent e-commerce and dropshipping scam operations.
https://login.microsoftonline.com/common/oaut...
Risk score9/10- The URL path /common/oauth2/authorize is a legitimate Microsoft OAuth endpoint, but the page is being used in a phishing context to harvest Microsoft 365 credentials.
- The domain microsoftonline.com is a legitimate Microsoft-owned domain registered in 2002, which makes the page appear trustworthy and increases the likelihood that victims will enter their credentials.
https://myportal.wncfiber.net
Risk score9/10- The domain wncfiber.net was registered very recently on August 25, 2025, which is a common indicator of newly created domains used for phishing campaigns.
- The page presents a login portal for WNC Fiber LLC that requests a username and password, a classic credential harvesting pattern.
https://keurig-coffee.com
Risk score9/10- The domain keurig-coffee.com is not the official Keurig website, which operates at keurig.com, indicating a likely brand impersonation attempt.
- The WHOIS registrant is listed only as 'Sydney' with no organization name, which is a common pattern for fraudulent or low-effort scam sites.
https://jysk-official.com
Risk score9/10- The domain jysk-official.com is a typosquatting or impersonation attempt targeting the legitimate Danish retail brand JYSK, using the word 'official' to appear legitimate.
- The WHOIS registrant is listed as 'Kentucky', which is inconsistent with a Danish furniture retailer and suggests a potentially fraudulent registration.
https://marimexstore.shop
Risk score9/10- The domain marimexstore.shop was registered very recently on August 20, 2026, which is consistent with the pattern of disposable domains frequently used by fraudulent online stores.
- The site uses a .shop TLD, which is commonly abused for low-cost, short-lived e-commerce scams.
https://svilanit.club
Risk score9/10- The domain svilanit.club uses a .club TLD, which is frequently associated with low-cost, short-lived, or fraudulent e-commerce sites.
- The WHOIS record shows the domain was registered very recently, with a one-year registration period, a common pattern for disposable scam storefronts.
Miễn trừ trách nhiệm: Chúng tôi không đảm bảo kết quả chính xác và không chịu trách nhiệm cho bất cứ điều gì.