Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

198,453
Total Tracked
198,453
VT Detected
91,641
Last Seen Active
108,630
Unavailable at Last Check
0
VT Pending

What each report can include

VirusTotal Analysis

Stored VirusTotal results show vendor detections when a scan is available for the domain.

Website Screenshots

Stored URLScan or archive screenshots are shown when a capture is available, without requiring a visit to the domain.

Domain Intelligence

Stored registration, IP, DNS, TLS, registrar, and domain-age context is shown when available.

Public Blocklist Check

Reports distinguish the PhishDestroy source dataset from independently observed external blocklist hits.

Evidence Archival

Stored archive links and screenshots are shown when evidence was captured successfully.

Victim Resources

If you were scammed, our reports include links to report the incident to FBI IC3, Europol, Action Fraud, and more.

Latest Crypto Threat News

Live feed · latest article 2h ago · 18 stories loaded
1 / 3
Tether sued over frozen ‘pig butcher’ coins, 6,600 students get crypto loans: Asia Express
Cointelegraph · Sep 3
Tether sued over frozen ‘pig butcher’ coins, 6,600 students get crypto loans: Asia Express
Thai businessmen sue Tether over $42M frozen USDT tied to pig butchering scam, Aussie crypto firms face big fines unless they meet licens...
crypto scam defi
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
The Hacker News · Sep 3
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow.” Why bre...
hack phishing malware
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
The Hacker News · Sep 3
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax forms as lures ha...
hack phishing malware
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The Hacker News · Sep 3
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabi...
hack phishing malware
Coldcard hacker swaps stolen Bitcoin for ETH via THORChain
Cointelegraph · Sep 3
Coldcard hacker swaps stolen Bitcoin for ETH via THORChain
The third-wave Coldcard exploiter moved about 10% of stolen funds through THORChain as researchers traced the assets to a new Ethereum ad...
crypto scam defi
Solana Validator Client v1.18 Hits 85% Consensus Stake
Bitcoinist · Sep 4
Solana Validator Client v1.18 Hits 85% Consensus Stake
Read the latest update on Solana Validator Client v1.18 Hits 85% Consensus Stake.
crypto scam
Thai businessmen sue Tether for freezing $42M in $61M pig butchering case
Cointelegraph · Sep 2
Thai businessmen sue Tether for freezing $42M in $61M pig butchering case
The plaintiffs didn’t dispute their involvement in the pig butchering scam, but claimed that Tether did not have the authority to freeze ...
crypto scam defi
Recovery specialists crack $1B crypto wallet... but find just $10
Cointelegraph · Sep 3
Recovery specialists crack $1B crypto wallet... but find just $10
Crypto recovery specialists reveal how lost wallets, passwords and seed phrases can sometimes be recovered — but that’s of no help if the...
crypto scam defi
Ukraine Busts Kyiv Crypto Drainer Ring Moving Up to $1M Monthly
Decrypt · Sep 3
Ukraine Busts Kyiv Crypto Drainer Ring Moving Up to $1M Monthly
Fake investment ads on Telegram channels funneled EU victims to a lookalike exchange that emptied their wallets.
crypto defi scam
Aave Governance Approves Base Parameter Update For v3 Markets
Bitcoinist · Sep 4
Aave Governance Approves Base Parameter Update For v3 Markets
Read the latest update on Aave Governance Approves Base Parameter Update For v3 Markets.
crypto scam
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
The Hacker News · Sep 3
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an ...
hack phishing malware
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
The Hacker News · Sep 3
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. Acc...
hack phishing malware
US officials work with CrowdStrike to fight malware behind crypto theft
Cointelegraph · Sep 2
US officials work with CrowdStrike to fight malware behind crypto theft
Federal authorities and private-sector partners were part of an operation to disrupt malware that redirected about $150,000 in crypto ove...
crypto scam defi
Bitcoin ETFs Rebound as Ethereum and XRP ETFs End Winning Streaks
Decrypt · Sep 3
Bitcoin ETFs Rebound as Ethereum and XRP ETFs End Winning Streaks
Ethereum funds broke a 12-day winning run and XRP snapped an 11-session streak on Wednesday, while Bitcoin ETFs bounced back with $101.15...
crypto defi scam
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
The Hacker News · Sep 2
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances...
hack phishing malware
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
The Hacker News · Sep 2
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthen...
hack phishing malware
OpenAI Releases GPT-6 Astra: The Closest AI Model Yet to AGI
Decrypt · Sep 3
OpenAI Releases GPT-6 Astra: The Closest AI Model Yet to AGI
The model can independently discover and exploit unknown security flaws across hardened systems, triggering a staged rollout and White Ho...
crypto defi scam
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
The Hacker News · Sep 3
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an una...
hack phishing malware

Recent Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,303 Cloudflare 21,537 Dynadot 11,154 PDR Ltd. d/b/a PublicDomainRe... 8,122 Namecheap 7,998 GoDaddy 6,798 NameSilo 6,652 Gname.com Pte. Ltd. 6,603 WebNIC 5,178 Global Domain Group 4,545 Trustname.com 4,284 Tucows 4,273 Wix Studio 4,093 Hostinger 3,438 Vercel 2,968 GitHub, Inc. 2,826 MarkMonitor 2,590 Spaceship, Inc. 2,257 Dominet (HK) Limited 2,241 Netlify 2,047 OwnRegistrar, Inc. 2,030 Hosting Concepts B.V. d/b/a R... 1,786 Cloudflare Pages 1,768 Name.com 1,731 CSC Corporate Domains, Inc. 1,600 MAT BAO CORPORATION 1,496 Cosmotown 1,479 REGRU-RU 1,431 Key-Systems 1,422 Squarespace Domains II 1,304

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,417 Solana Drainer 2,680 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,785 genericcrypto 7,773 across 6,798 Google 6,428 MetaMask 4,341 Coinbase 4,275 Trezor 3,443 Solana 3,093 Ethereum 2,958 genericcloudflare 2,919 Binance 2,619 Kraken 2,509 Facebook 2,262 cryptoscam 1,839 Cloudflare 1,634 Apple 1,557 base 1,439 x.com 1,439 Microsoft 1,341 Bet365 1,336

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,053 Seed Phrase Theft 19 Airdrop Scam 8,353 Investment Scam 336

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust