Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,407 Cloudflare, Inc. 21,089 GoDaddy.com, LLC 9,271 Gname.com Pte. Ltd. 7,935 PDR Ltd. d/b/a PublicD... 7,746 DYNADOT LLC 7,381 NameSilo, LLC 6,910 NameCheap, Inc. 5,624 Dynadot Inc 4,960 Web Commerce Communica... 4,139 Global Domain Group LLC 3,981 Tucows Domains Inc. 3,668 Fewmoretaps OU d/b/a T... 3,447 HOSTINGER operations, UAB 3,160 Dominet (HK) Limited 2,417 GitHub, Inc. 2,364 MarkMonitor, Inc. 2,146 Spaceship, Inc. 1,999 OwnRegistrar, Inc. 1,936 NameMart Pte. Ltd. 1,859 Vercel Inc. 1,794 CSC Corporate Domains,... 1,597 MarkMonitor Inc. 1,550 Hosting Concepts B.V. ... 1,524 MAT BAO CORPORATION 1,454 TuringSign Inc. d/b/a ... 1,412 Key-Systems GmbH 1,384 REGRU-RU 1,375 NAMECHEAP INC 1,302 Ultahost, Inc. 1,262

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,421 Solana Drainer 2,594 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 27 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 166,468 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,421 across 5,540 Google 5,405 Coinbase 4,002 Trezor 3,062 Solana 2,877 genericcloudflare 2,862 Ethereum 2,643 Kraken 2,424 Binance 2,373 MetaMask 2,348 Facebook 1,984 Microsoft 1,795 cryptoscam 1,694 Bet365 1,605 x.com 1,360 Apple 1,297 Trust Wallet 1,123 base 1,121

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust