Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,102 Cloudflare, Inc. 20,827 GoDaddy.com, LLC 9,718 PDR Ltd. d/b/a PublicD... 8,166 DYNADOT LLC 7,425 Gname.com Pte. Ltd. 7,170 NameSilo, LLC 5,982 NameCheap, Inc. 5,603 Fewmoretaps OU d/b/a T... 4,215 Web Commerce Communica... 4,145 Global Domain Group LLC 4,137 Tucows Domains Inc. 3,699 Dynadot Inc 3,689 HOSTINGER operations, UAB 3,164 GitHub, Inc. 2,172 MarkMonitor, Inc. 2,134 Dominet (HK) Limited 2,063 OwnRegistrar, Inc. 1,862 Spaceship, Inc. 1,842 Vercel Inc. 1,770 CSC Corporate Domains,... 1,626 Cloudflare Pages 1,574 MAT BAO CORPORATION 1,503 Hosting Concepts B.V. ... 1,473 Key-Systems GmbH 1,364 REGRU-RU 1,318 Netlify 1,235 Name.com, Inc. 1,146 NAMECHEAP INC 1,141 Porkbun LLC 1,121

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,431 Solana Drainer 2,632 Wallet Connect Abuse 1,682 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 161,586 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,748 Google 5,375 across 5,054 Coinbase 3,912 Solana 2,832 Trezor 2,662 Kraken 2,540 Ethereum 2,533 MetaMask 2,340 Binance 2,217 Facebook 1,538 x.com 1,360 Bet365 1,197 Apple 1,175 Trust Wallet 1,173 sui 1,092 SushiSwap 1,086 aave 1,079 discord 1,059 base 1,039

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust