Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,390 Cloudflare, Inc. 21,088 GoDaddy.com, LLC 9,271 Gname.com Pte. Ltd. 7,935 PDR Ltd. d/b/a PublicD... 7,739 DYNADOT LLC 7,380 NameSilo, LLC 6,905 NameCheap, Inc. 5,624 Dynadot Inc 4,959 Web Commerce Communica... 4,139 Global Domain Group LLC 3,976 Tucows Domains Inc. 3,668 Fewmoretaps OU d/b/a T... 3,355 HOSTINGER operations, UAB 3,160 Dominet (HK) Limited 2,413 GitHub, Inc. 2,363 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,997 OwnRegistrar, Inc. 1,936 NameMart Pte. Ltd. 1,859 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,454 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,383 REGRU-RU 1,375 NAMECHEAP INC 1,302 Ultahost, Inc. 1,262

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,593 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 25 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 166,324 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,413 across 5,417 Google 5,390 Coinbase 3,975 Trezor 3,062 genericcloudflare 2,862 Solana 2,854 Ethereum 2,606 Kraken 2,415 MetaMask 2,344 Binance 2,331 Facebook 1,963 Microsoft 1,792 cryptoscam 1,694 Bet365 1,604 x.com 1,360 Apple 1,270 Trust Wallet 1,119 discord 1,104

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust