A snapshot from ScamRadar's threat-feed pipeline on April 24, 2026 identifies 985 unique phishing hostnames currently published on the seven major free site-builder platforms we track. Phishing-kit operators have quietly migrated to free static-hosting providers because the platforms ship valid HTTPS certificates instantly, are trusted by upstream URL filters, and require no payment trail. We fingerprint three distinct kit-deployment clusters by hostname pattern, brand target, and platform.
ScamRadar maintains a continuously refreshed local mirror of three public threat-intelligence feeds — PhishTank (community-validated phishing URLs), OpenPhish (commercial machine-validated feed), and Abuse.ch URLhaus (malware distribution URLs). On April 24, 2026 we filtered the union of these feeds for hostnames matching the seven free site-builder TLD patterns above, deduplicated to unique hostnames, and required cross-confirmation in at least two of the three sources before counting a host toward the published total.
The 985-host count is a single-day snapshot of an actively rotating phenomenon: free-host phishing sites are typically taken down within 24–72 hours of being reported to the host, but new ones appear continuously. We make no attribution claim about the operators' identity, jurisdiction, or affiliation — the term "cluster" refers strictly to deployment fingerprint similarity, not common ownership. Brand counts reflect what we observed in the feeds and are likely undercounts of total active phishing infrastructure for any given brand.
A reproducible methodology dataset documenting the exact hostname list, source-feed attribution, and cluster assignments was generated as a CSV at the time of publication for editorial verification. The CSV is not publicly distributed; researchers and journalists who need access for verification can request it via press@thescamradar.com. Related ScamRadar resources: browse the public scam database, report a phishing site, and read our full detection methodology.
ScamRadar · Blog · Scam Database · Is It Legit? · About