← Back to PhishDestroy

NameSilo: The Fake Portfolio

5,179,405 domains analyzed. 37,375 serial registration groups found. 228,432 domains follow A-B-C-D sequential patterns. 25 days with 10,000+ bulk registrations. 1.3 million junk TLD domains. This is not a registrar portfolio — this is a number factory.

Serial Groups (A-B-C-D)
Bulk Day Spikes
Numeric Spam
Junk TLDs

Serial Domain Groups 37,375 groups, 228,432 domains

Pattern: base + sequential letter. Someone registers 3967a.app, 3967b.app, 3967c.app ... 3967z.app — all 26 in one day, all on the same IP or no IP at all. This is not domain investing. No investor buys azino777-ria.cfd through azino777-riz.cfd. No legitimate business needs alibabacoma.cfd through alibabacomz.cfd. This is automated generation — registrations that exist only to inflate NameSilo's domain count and revenue numbers.

Bulk Registration Spikes 25 days with 10,000+ registrations

Normal registrar daily volume: 500-2,000 domains. NameSilo regularly hits 10,000-17,000 in a single day. The domains registered on these days are gambling sites (2777bet.app, 3777bet.app), serial junk (3967a.app, 3967b.app), and keyword spam (besthealthinsurance.agency). A CSE-listed company reporting these as "managed domains" to investors.

Numeric Spam Domains that are just numbers

Pure numeric domains0003.ai, 0005.ai, 0009.ai, 85920.academy, 85921.academy. Registered in bulk on the same day. Not premium numeric domains (those would be .com). These are junk TLD numerics that will never sell, never be used, never generate revenue — but they count toward the 5.18M portfolio number.

Junk TLD Concentration 1.3M domains on throwaway TLDs

Legitimate registrars have portfolios dominated by .com, .net, .org. NameSilo has 374,910 .sbs domains (a TLD that costs $0.99/year), 365,690 .xyz, 224,745 .cfd, 182,507 .top. These TLDs are used almost exclusively for spam, phishing, and throwaway sites. 1.3 million domains on TLDs that no legitimate business would choose.

Source: 5,179,405 domains from public WHOIS/RDAP data. Serial detection: domains matching pattern base+[a-z].tld grouped by base, filtered to 3+ members. Numeric: domains starting with 4+ digits. Raw data: namesilo-domains-5.1M.csv.gz (54MB) — verify any claim yourself.