Editorial mirrorBrand mentions redacted to public IDs. Hover to inspect. Everything else is theatre.How it works
THE ENABLERS REGISTRYRegistrar accountability archive
Archive LiveRead-only public record · No ads · No tracking
Case file folder with redacted documents and confidential investigation report.
CASE / HUB_V2.PHP

Domain Security Reports

The Enablers Registry·Editorial mirror·/hub_v2.php

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Recovery Scam Kit High Threat

97 domains tracked
Sites targeting previous scam victims, claiming to recover lost crypto for a fee. Double-victimizes users who already lost funds.
97
Total Domains
49
Still Alive
48
Taken Down
92.8%
Detection Rate
5.6
Avg VT Score
50.5%
Alive Rate
50.5% of domains still active 35 domains with VT ≥ 5
Tracking since Sep 2025 — latest: Jul 2, 2026
Recovery Scam 97 domains
Screenshot of [REDACTED]
[REDACTED]
22 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of test43593543598.lol
test43593543598.lol
21 VTUnknownNASDAQ:COIN
Screenshot of test43593543598.lol
test43593543598.lol
[REDACTED]-help.support
19 VTUnknown[REDACTED]
[REDACTED]
18 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
17 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED].[REDACTED]
[REDACTED].[REDACTED]
16 VTUnknown[REDACTED]
Screenshot of [REDACTED].[REDACTED]
[REDACTED].[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
16 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
16 VTUnknownSolana Drainer1inch
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
13 VTUnknownSolana Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED].br
[REDACTED].br
12 VTLive
Screenshot of [REDACTED].br
[REDACTED].br
Screenshot of [REDACTED]
[REDACTED]
11 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]-wallet-support.[REDACTED]
[REDACTED]-wallet-support.[REDACTED]
11 VTUnknown[REDACTED]
Screenshot of [REDACTED]-wallet-support.[REDACTED]
[REDACTED]-wallet-support.[REDACTED]
Screenshot of [REDACTED]-extension.cc
[REDACTED]-extension.cc
11 VTUnknown[REDACTED]
Screenshot of [REDACTED]-extension.cc
[REDACTED]-extension.cc
Screenshot of [REDACTED]
[REDACTED]
11 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
10 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED].[REDACTED]-wallet.io
[REDACTED].[REDACTED]-wallet.io
10 VTUnknownacross
Screenshot of [REDACTED].[REDACTED]-wallet.io
[REDACTED].[REDACTED]-wallet.io
Screenshot of [REDACTED]
[REDACTED]
8 VTLiveCalendly
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
8 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of mmwalletsecurity.gt.tc
mmwalletsecurity.gt.tc
7 VTUnknown[REDACTED]
Screenshot of mmwalletsecurity.gt.tc
mmwalletsecurity.gt.tc
Screenshot of recoveryassaetmgmt.icu
recoveryassaetmgmt.icu
7 VTUnknown
Screenshot of recoveryassaetmgmt.icu
recoveryassaetmgmt.icu
[REDACTED]
6 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
6 VTLive[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]-recovery-wallet.cc
[REDACTED]-recovery-wallet.cc
6 VTUnknown[REDACTED]
Screenshot of [REDACTED]-recovery-wallet.cc
[REDACTED]-recovery-wallet.cc
Screenshot of [REDACTED]
[REDACTED]
6 VTLiveGoogle
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknownGoogle
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTLivedydx
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]-hardware-wallet-recovery.com
[REDACTED]-hardware-wallet-recovery.com
5 VTUnknown[REDACTED]
Screenshot of [REDACTED]-hardware-wallet-recovery.com
[REDACTED]-hardware-wallet-recovery.com
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknownGoogle
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
5 VTLiveLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLiveWallet Connect AbuseLEI:5493004F7TI6QBM4WX72
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLivedydx
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLiveGoogle
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownMicrosoft
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
4 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveFacebook
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownFacebook
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of lacoursconstruction.group
lacoursconstruction.group
3 VTLive
Screenshot of lacoursconstruction.group
lacoursconstruction.group
Screenshot of [REDACTED]
[REDACTED]
3 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveGoogle
Screenshot of [REDACTED]
[REDACTED]
Screenshot of recover.biglabs.eu
recover.biglabs.eu
3 VTLive
Screenshot of recover.biglabs.eu
recover.biglabs.eu
Screenshot of s-lon.lk
s-lon.lk
3 VTLive
Screenshot of s-lon.lk
s-lon.lk
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
3 VTLiveFacebook
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknowncsgo
Screenshot of [REDACTED]
[REDACTED]
Screenshot of NASDAQ:[REDACTED]
NASDAQ:COIN.[REDACTED]
2 VTUnknownNASDAQ:COIN
Screenshot of NASDAQ:[REDACTED]
NASDAQ:COIN.[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTLivedydx
Screenshot of [REDACTED]
[REDACTED]
Screenshot of markethelp.co.uk
markethelp.co.uk
2 VTUnknownGoogle
Screenshot of markethelp.co.uk
markethelp.co.uk
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of rewallet.de
rewallet.de
2 VTLiveEthereum
Screenshot of rewallet.de
rewallet.de
Screenshot of [REDACTED]
[REDACTED]
2 VTLiveFacebook
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
2 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
2 VTLiveWalletConnect
Screenshot of [REDACTED]
[REDACTED]
2 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of lethologica.nl
lethologica.nl
1 VTLive
Screenshot of lethologica.nl
lethologica.nl
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
1 VTUnknownAngel Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of trustwalllet.us
trustwalllet.us
1 VTLive[REDACTED]
Screenshot of trustwalllet.us
trustwalllet.us
[REDACTED]
1 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
1 VTLiveEthereum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
1 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Unknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
Live
Screenshot of [REDACTED]
[REDACTED]
Live
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
Live
Screenshot of [REDACTED]
[REDACTED]
Live
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
Unknown
Screenshot of [REDACTED]
[REDACTED]
LiveBitcoin
Screenshot of [REDACTED]
[REDACTED]

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

IANA #3858 ... 27,285 [REDACTED] 20,709 [REDACTED] 8,932 [REDACTED] d/b/a PublicD... 7,872 [REDACTED] 7,287 [REDACTED] 6,102 [REDACTED] 5,470 [REDACTED] 5,364 Web Commerce Communica... 4,110 Fewmoretaps OU d/b/a T... 3,952 [REDACTED] 3,838 [REDACTED] 3,619 IANA #1636 operations, UAB 3,070 [REDACTED] 2,128 [REDACTED] 2,033 [REDACTED] 2,012 [REDACTED] 1,908 [REDACTED] 1,798 [REDACTED] 1,770 IANA #299,... 1,603 [REDACTED] 1,591 IANA #1910 Pages 1,518 IANA #1586 CORPORATION 1,485 [REDACTED] ... 1,347 [REDACTED] 1,333 REGRU-RU 1,311 Netlify 1,121 Webflow 1,107 [REDACTED] 1,071 [REDACTED] 1,046

Browse by Drainer Type

Wallet drainer kits detected on possibly phishing domains.

Angel Drainer 4,391 Solana Drainer 2,260 Wallet Connect Abuse 1,664 Ice Possibly phishing 40 Inferno Drainer 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,920 Airdrop Scam 6,389 Seed Phrase Possibly phishing 926 Wallet Connect Abuse 602 Token Presale 226 Recovery Scam 97 Verification Scam 64 Giveaway Scam 55 NFT Mint 51 Credential Possibly phishing 31 Staking Scam 7 Prize Scam 3 [REDACTED] Possibly phishing 3

Showing 97 domains IANA #1086

Browse by Target Brand

Legitimate brands being impersonated by possibly phishing sites.

[REDACTED] 6,569 Google 5,298 across 5,054 NASDAQ:COIN 3,869 Solana 2,746 [REDACTED] 2,574 Ethereum 2,526 FinCEN MSB #31000023456789 2,495 [REDACTED] 2,307 LEI:5493004F7TI6QBM4WX72 2,159 Facebook 1,468 x.com 1,360 [REDACTED] 1,144 Apple 1,117 sui 1,088 SushiSwap 1,084 aave 1,070 [REDACTED] 1,055 base 1,021 Moonshot 956

Browse by Scam Type

Classification of possibly phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,950 Seed Phrase Theft 18 Airdrop Scam 8,105 Investment Scam 266

Continue browsing the ledger

This page is the editorial mirror. Brand names are redacted to public IANA / business identifiers. Use the index to navigate other case files.

Open registrar ledger → All briefings