TLD Threat Intelligence

Flagged .site Domains

43 domains using the .site extension have been flagged by threat-intelligence feeds. The .site extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure.

43
Flagged Domains
26
Avg Risk Score
Oct 11
Last Flagged

Flagged .site Domains

43 shown
DomainLast Seen
treursuite.square.site Oct 11 kxt8244z.demox.site Oct 11 start-suite.square.site Oct 10 wvvlntermaticohomepersona.site Oct 9 pedagio.digitalecovias.site Jul 3 trezr-home-login.square.site Jun 21 home-100290.square.site Jun 21 i83pv2vx.ravabetensani.site Jun 20 customeraccessmembershipmovie.65-98-5-17.cpanel.site Jun 19 fuv.jbw.temporary.site Jun 19 9fuqcqf6.ravabetensani.site Jun 19 help-trezorr-suit.square.site Jun 17 crsorgi-gov.site Jun 17 author-start-trezor.square.site Jun 17 awesome-sapphire-coyote.31-22-7-7.cpanel.site Jun 16 trzr-io-start.square.site Jun 16 trezor-suite-apps.square.site Jun 16 trezor-login-x-us.square.site Jun 16 starting-trezo-docs.square.site Jun 16 klpiy.mabanimashin.site Jun 16 shrqj.mabanimashin.site Jun 15 xfinityaccounthome.20-228-132-238.cpanel.site Jun 14 o0irv3h9.ravabetensani.site Jun 12 kdphdmr.rahnemayenegaresh.site Jun 12 xlrvvrbvb.mabanimashin.site Jun 12 mbxkw.rahnemayenegaresh.site Jun 12 brrls.rahnemayenegaresh.site Jun 12 usjcx.site Jun 10 1dmaisluzawww.site Jun 8 eycgzaa.jamjahani.site Jun 7 qtcfxojh.mostbetresmi.site Jun 7 parcelhouse.4-222-235-4.cpanel.site Jun 3 lasalleunipa.ucoz.site May 25 messenger-smeta-verification.site May 21 ecortbabylon.site May 21 v3r1fikasi-b4dge.site May 18 uphold-up.square.site May 15 wwroblox.site May 13 uploads.cl10011mngr.site May 13 desenrolabrasil2026.site May 12 sapphire-shannen-90.tiiny.site May 7 protesctinguserid10000.site May 5 freeflowccr.site Apr 27

Frequently Asked Questions

Are all .site websites scams?

No. The .site extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure. Many legitimate sites use .site. This page lists only the specific .site domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .site domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .site site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →