Editorial mirrorBrand mentions redacted to public IDs. Hover to inspect. Everything else is theatre.How it works
THE ENABLERS REGISTRYRegistrar accountability archive
Archive LiveRead-only public record · No ads · No tracking
Case file folder with redacted documents and confidential investigation report.
CASE / HUB_V2.PHP

Domain Security Reports

The Enablers Registry·Editorial mirror·/hub_v2.php

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Investment Scam 3,331 domains
Screenshot of usdt-aml.work
usdt-aml.work
15 VTUnknown
Screenshot of usdt-aml.work
usdt-aml.work
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTLiveWallet Connect AbuseWalletConnect
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
15 VTUnknown
web3-cha.cfd
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
15 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknownGoogle
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
15 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of amlscan.ink
amlscan.ink
14 VTUnknown
Screenshot of amlscan.ink
amlscan.ink
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of app-avaa.cam
app-avaa.cam
14 VTUnknown
Screenshot of app-avaa.cam
app-avaa.cam
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of bundesprofit-ki.de
bundesprofit-ki.de
14 VTUnknown
Screenshot of bundesprofit-ki.de
bundesprofit-ki.de
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownargent
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLiveFacebook
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of cryptocoinsx.cfd
cryptocoinsx.cfd
14 VTLive
Screenshot of cryptocoinsx.cfd
cryptocoinsx.cfd
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownx.com
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of eyewjb.loan
eyewjb.loan
14 VTUnknowntiktok
Screenshot of eyewjb.loan
eyewjb.loan
Screenshot of [REDACTED]
[REDACTED]
14 VTLiveacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of grvt.io-ref.lat
grvt.io-ref.lat
14 VTLive
Screenshot of grvt.io-ref.lat
grvt.io-ref.lat
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of monslead-invest.cfd
monslead-invest.cfd
14 VTUnknown
Screenshot of monslead-invest.cfd
monslead-invest.cfd
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownbackpack
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of pendlee.at
pendlee.at
14 VTLivePendle
Screenshot of pendlee.at
pendlee.at
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of rytowin.gl
rytowin.gl
14 VTUnknown
Screenshot of rytowin.gl
rytowin.gl
Screenshot of savebino.sbs
savebino.sbs
14 VTUnknownEthereum
Screenshot of savebino.sbs
savebino.sbs
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of thea-ve-dex-info.la
thea-ve-dex-info.la
14 VTLive
Screenshot of thea-ve-dex-info.la
thea-ve-dex-info.la
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownGoogle
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknownargent
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of umbra.stakingsrewards.club
umbra.stakingsrewards.club
14 VTUnknownGoogle
Screenshot of umbra.stakingsrewards.club
umbra.stakingsrewards.club
Screenshot of [REDACTED]
[REDACTED]
14 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of vaults-plasma.to
vaults-plasma.to
14 VTUnknown
Screenshot of vaults-plasma.to
vaults-plasma.to
[REDACTED]
14 VTLive
Screenshot of web363.can211.de
web363.can211.de
14 VTUnknown
Screenshot of web363.can211.de
web363.can211.de
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
14 VTLive
Screenshot of [REDACTED]
[REDACTED]
« Prev 1 2 3 4 5 6 Next » Page 3 of 34

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

IANA #3858 ... 27,285 [REDACTED] 20,709 [REDACTED] 8,932 [REDACTED] d/b/a PublicD... 7,872 [REDACTED] 7,287 [REDACTED] 6,103 [REDACTED] 5,470 [REDACTED] 5,364 Web Commerce Communica... 4,110 Fewmoretaps OU d/b/a T... 3,952 [REDACTED] 3,839 [REDACTED] 3,619 IANA #1636 operations, UAB 3,070 [REDACTED] 2,128 [REDACTED] 2,033 [REDACTED] 2,012 [REDACTED] 1,908 [REDACTED] 1,798 [REDACTED] 1,770 IANA #299,... 1,603 [REDACTED] 1,592 IANA #1910 Pages 1,518 IANA #1586 CORPORATION 1,485 [REDACTED] ... 1,347 [REDACTED] 1,333 REGRU-RU 1,311 Netlify 1,121 Webflow 1,115 [REDACTED] 1,071 [REDACTED] 1,046

Browse by Drainer Type

Wallet drainer kits detected on possibly phishing domains.

Angel Drainer 4,391 Solana Drainer 2,260 Wallet Connect Abuse 1,664 Ice Possibly phishing 40 Inferno Drainer 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,920 Airdrop Scam 6,389 Seed Phrase Possibly phishing 926 Wallet Connect Abuse 602 Token Presale 226 Recovery Scam 97 Verification Scam 64 Giveaway Scam 55 NFT Mint 51 Credential Possibly phishing 31 Staking Scam 7 Prize Scam 3 [REDACTED] Possibly phishing 3

Browse by Target Brand

Legitimate brands being impersonated by possibly phishing sites.

[REDACTED] 6,569 Google 5,298 across 5,054 NASDAQ:COIN 3,869 Solana 2,746 [REDACTED] 2,574 Ethereum 2,526 FinCEN MSB #31000023456789 2,495 [REDACTED] 2,307 LEI:5493004F7TI6QBM4WX72 2,159 Facebook 1,468 x.com 1,360 [REDACTED] 1,144 Apple 1,117 sui 1,088 SushiSwap 1,084 aave 1,070 [REDACTED] 1,055 base 1,021 Moonshot 956

Browse by Scam Type

Classification of possibly phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,950 Seed Phrase Theft 18 Airdrop Scam 8,105 Investment Scam 266

Showing 3,331 domains IANA #1086

Continue browsing the ledger

This page is the editorial mirror. Brand names are redacted to public IANA / business identifiers. Use the index to navigate other case files.

Open registrar ledger → All briefings