Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,052 Cloudflare, Inc. 20,807 GoDaddy.com, LLC 9,567 PDR Ltd. d/b/a PublicD... 8,078 DYNADOT LLC 7,408 Gname.com Pte. Ltd. 7,102 NameSilo, LLC 5,760 NameCheap, Inc. 5,534 Fewmoretaps OU d/b/a T... 4,156 Web Commerce Communica... 4,145 Global Domain Group LLC 3,948 Tucows Domains Inc. 3,676 Dynadot Inc 3,323 HOSTINGER operations, UAB 3,139 GitHub, Inc. 2,171 MarkMonitor, Inc. 2,134 Dominet (HK) Limited 2,032 OwnRegistrar, Inc. 1,845 Spaceship, Inc. 1,799 Vercel Inc. 1,770 CSC Corporate Domains,... 1,619 Cloudflare Pages 1,569 MAT BAO CORPORATION 1,499 Hosting Concepts B.V. ... 1,396 Key-Systems GmbH 1,357 REGRU-RU 1,318 Netlify 1,228 Name.com, Inc. 1,136 NAMECHEAP INC 1,134 Webflow 1,119

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,431 Solana Drainer 2,629 Wallet Connect Abuse 1,682 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 158,577 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,716 Google 5,374 across 5,054 Coinbase 3,906 Solana 2,827 Trezor 2,641 Ethereum 2,531 Kraken 2,517 MetaMask 2,338 Binance 2,210 Facebook 1,528 x.com 1,360 Bet365 1,185 Trust Wallet 1,170 Apple 1,160 sui 1,092 SushiSwap 1,086 aave 1,078 discord 1,059 base 1,039

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust