Skip to content

PhaaS Tracker

Phishing is a product these days. Someone else writes the login page, keeps the branding current, handles the anti-bot check and the code prompt, and rents the whole thing out. The customer brings a domain and a mailing list. That is why the same page turns up on thousands of hosts with nothing changed but the logo, and why burning one domain costs whoever is running it almost nothing.

Hosts added per day

0 200 400 600 Aug 26, 2026: 284 added 284 08/26 Aug 27, 2026: 123 added 123 08/27 Aug 28, 2026: 66 added 66 08/28 Aug 29, 2026: 69 added 69 08/29 Aug 30, 2026: 57 added 57 08/30 Aug 31, 2026: 402 added 402 08/31 Sep 1, 2026: 321 added 321 09/01 Sep 2, 2026: 340 added 340 09/02 Sep 3, 2026: 188 added 188 09/03 Sep 4, 2026: 219 added 219 09/04 Sep 5, 2026: 109 added 109 09/05 Sep 6, 2026: 128 added 128 09/06 Sep 7, 2026: 117 added 117 09/07 Sep 8, 2026: 149 added 149 09/08

Infrastructure

PhaaS Infrastructure Type

Hosting49%(7,810)
Unregistered38%(6,036)
Unknown6%(983)
No DNS4%(625)
ISP3%(465)
live1%(90)
Business0%(3)
Government0%(3)

Hosting Countries

CountryHosts
  1. 1🇺🇸 US5,636
  2. 2🇬🇧 GB551
  3. 3🇭🇰 HK444
  4. 4🇩🇪 DE423
  5. 5🇸🇬 SG268
  6. 6🇫🇮 FI245
  7. 7🇳🇱 NL172
  8. 8🇪🇸 ES117
  9. 9🇨🇦 CA102
  10. 10🇫🇷 FR79

Hosting Providers

ProviderHosts
  1. 1Cloudflare, Inc.1,957
  2. 2DigitalOcean, LLC1,761
  3. 3Amazon.com, Inc.700
  4. 4CTG Server Limited379
  5. 5Google LLC335
  6. 6Wildcard UK Limited294
  7. 7ACE235
  8. 8M/S ROBI TRADERS226
  9. 9IONOS SE209
  10. 10UFO TECHNOLOGIES LIMITED206

Network Fronting

How these hosts are reached, counted once each. A host can carry more than one.

  1. 1 hosting 7,821
  2. 2 anycast 3,093
  3. 3 proxy 5
  4. 4 vpn 1

Recently added domains

PhaaS domains and the date each was added to the feed
Domain Added
157955[.]xyz Sep 8, 2026
2108dkfjxusxkxlolxxisdforxxllp2-endpoint-bkhwhcfnewaabtdh[.]z02[.]azurefd[.]net Sep 8, 2026
3672063365[.]com Sep 8, 2026
8d5o56ehki[.]trustedbusinessstart[.]de Sep 8, 2026
acc-outing-sales[.]top Sep 8, 2026
account-verification-case586[.]vercel[.]app Sep 8, 2026
account-verification-case835[.]vercel[.]app Sep 8, 2026
account-verification-case896[.]vercel[.]app Sep 8, 2026
accounts[.]myschooll[.]icu Sep 8, 2026
allawysallowaccessing[.]online Sep 8, 2026
almoheebco[.]com Sep 8, 2026
angeltemnsihlah[.]blogspot[.]com Sep 8, 2026
annastudios-paros[.]com Sep 8, 2026
anular-peticion-ahora[.]xo[.]je Sep 8, 2026
arrmmy[.]com Sep 8, 2026
at-investimentos[.]ao Sep 8, 2026
at[.]lcnsrqo[.]com Sep 8, 2026
att-bonus[.]com[.]mx Sep 8, 2026
b41dc[.]shop Sep 8, 2026
bafkreicvzk35g3mzmepovjbzmbl7fesavekkr77aeecyayp5mzr34fdfqi[.]ipfs[.]inbrowser[.]link Sep 8, 2026
barduco[.]top Sep 8, 2026
captelind[.]com Sep 8, 2026
closingfilekdkjhf[.]space Sep 8, 2026
comcastcommunicationonline[.]weebly[.]com Sep 8, 2026
comepay-help-line-support25[.]vercel[.]app Sep 8, 2026
diguandaishebei[.]com Sep 8, 2026
eet-lzip--wespack[.]replit[.]app Sep 8, 2026
epic-cashback[.]info Sep 8, 2026
fortnite-give[.]cfd Sep 8, 2026
gogasurguladze[.]com Sep 8, 2026
hesap[.]evergreenfin[.]ltd Sep 8, 2026
hmcargollc[.]com Sep 8, 2026
info-snoprollc[.]s3[.]us-west-2[.]amazonaws[.]com Sep 8, 2026
julieahubbardesq[.]info Sep 8, 2026
kinzini-llc-art-kitchen-design[.]s3[.]ap-northeast-1[.]amazonaws[.]com Sep 8, 2026
lmyravtn[.]xyz Sep 8, 2026
nongqingfz[.]com Sep 8, 2026
obka-le4h-5rj6[.]dromano-iplaysco-com-s-account[.]workers[.]dev Sep 8, 2026
onepumplocker[.]com Sep 8, 2026
order-dpihckhmxrid[.]edgeone[.]dev Sep 8, 2026
pesta-shopee-99[.]blogspot[.]com Sep 8, 2026
pla-logisticlma[.]s3[.]eu-central-1[.]amazonaws[.]com Sep 8, 2026
projectsapp-one[.]vercel[.]app Sep 8, 2026
pt-shope299[.]blogspot[.]com Sep 8, 2026
robinhood-main-dex-xkz[.]netlify[.]app Sep 8, 2026
securedocument[.]kelly-c89[.]workers[.]dev Sep 8, 2026
shopee-jkt517[.]blogspot[.]com Sep 8, 2026
supprtrcb-dpldxysyz96q[.]edgeone[.]dev Sep 8, 2026
trezorzlatovna[.]com Sep 8, 2026
wsaofhs[.]cam Sep 8, 2026

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.