Phishing and scam domains

Every day we download public blocklists — PhishTank (community-verified phishing, with the targeted brand), OpenPhish, Phishing.Database, Phishing Army, the CERT Polska warning list (scams and phishing) and URLhaus (malware distribution, shown separately). A domain counts while at least one list contains it; hostnames of the same registrable domain are merged.

Sites hosted on free platforms and website builders (github.io, blogspot.com, pages.dev...) are counted separately (139,680 hostnames): the platform is not the culprit. The 1,577 most popular websites (Tranco top 100K) are left out: a listing there is almost always a compromised page or a false alarm. The extension rate is shown only where we know the size of the whole zone. The hosting provider is the one serving the domain's own address (we resolved 102,628 of the 274,491 domains).

We do not verify these listings. Lists contain mistakes, outdated entries and legitimate sites that were compromised. If you own a listed domain, ask the list that includes it to review it, or write to contact@xj1.fr. Updated daily.