Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,406 Cloudflare, Inc. 21,088 GoDaddy.com, LLC 9,271 Gname.com Pte. Ltd. 7,935 PDR Ltd. d/b/a PublicD... 7,744 DYNADOT LLC 7,381 NameSilo, LLC 6,910 NameCheap, Inc. 5,624 Dynadot Inc 4,959 Web Commerce Communica... 4,139 Global Domain Group LLC 3,980 Tucows Domains Inc. 3,668 Fewmoretaps OU d/b/a T... 3,447 HOSTINGER operations, UAB 3,160 Dominet (HK) Limited 2,415 GitHub, Inc. 2,363 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,999 OwnRegistrar, Inc. 1,936 NameMart Pte. Ltd. 1,859 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,454 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,384 REGRU-RU 1,375 NAMECHEAP INC 1,302 Ultahost, Inc. 1,262

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,594 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 27 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 166,455 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,419 across 5,505 Google 5,401 Coinbase 3,994 Trezor 3,062 Solana 2,877 genericcloudflare 2,862 Ethereum 2,629 Kraken 2,421 Binance 2,365 MetaMask 2,348 Facebook 1,981 Microsoft 1,795 cryptoscam 1,694 Bet365 1,605 x.com 1,360 Apple 1,292 Trust Wallet 1,123 base 1,117

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust