Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,404 Cloudflare, Inc. 21,088 GoDaddy.com, LLC 9,271 Gname.com Pte. Ltd. 7,935 PDR Ltd. d/b/a PublicD... 7,744 DYNADOT LLC 7,381 NameSilo, LLC 6,910 NameCheap, Inc. 5,624 Dynadot Inc 4,959 Web Commerce Communica... 4,139 Global Domain Group LLC 3,980 Tucows Domains Inc. 3,668 Fewmoretaps OU d/b/a T... 3,437 HOSTINGER operations, UAB 3,160 Dominet (HK) Limited 2,414 GitHub, Inc. 2,363 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,999 OwnRegistrar, Inc. 1,936 NameMart Pte. Ltd. 1,859 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,454 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,383 REGRU-RU 1,375 NAMECHEAP INC 1,302 Ultahost, Inc. 1,262

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,594 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 26 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 166,439 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,415 across 5,481 Google 5,396 Coinbase 3,989 Trezor 3,062 genericcloudflare 2,862 Solana 2,855 Ethereum 2,623 Kraken 2,418 Binance 2,356 MetaMask 2,347 Facebook 1,973 Microsoft 1,792 cryptoscam 1,694 Bet365 1,604 x.com 1,360 Apple 1,276 Trust Wallet 1,121 base 1,112

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust