Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,597 Cloudflare, Inc. 20,990 GoDaddy.com, LLC 10,612 PDR Ltd. d/b/a PublicD... 8,308 Gname.com Pte. Ltd. 8,048 DYNADOT LLC 7,622 NameSilo, LLC 7,092 Dynadot Inc 6,702 NameCheap, Inc. 5,952 Global Domain Group LLC 4,350 Fewmoretaps OU d/b/a T... 4,306 Web Commerce Communica... 4,145 Tucows Domains Inc. 3,880 HOSTINGER operations, UAB 3,350 Dominet (HK) Limited 2,326 GitHub, Inc. 2,203 MarkMonitor, Inc. 2,147 Spaceship, Inc. 2,124 OwnRegistrar, Inc. 2,021 NameMart Pte. Ltd. 2,007 Vercel Inc. 1,770 MarkMonitor Inc. 1,707 Cloudflare Pages 1,673 CSC Corporate Domains,... 1,643 Hosting Concepts B.V. ... 1,583 MAT BAO CORPORATION 1,507 Key-Systems GmbH 1,418 TuringSign Inc. d/b/a ... 1,415 REGRU-RU 1,317 Ultahost, Inc. 1,317

Showing 100 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,440 Solana Drainer 2,647 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 180,832 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,875 Google 5,412 across 5,035 Coinbase 3,923 Solana 2,867 Trezor 2,681 Kraken 2,567 Ethereum 2,539 MetaMask 2,351 Binance 2,245 Facebook 1,556 Microsoft 1,436 x.com 1,360 Bet365 1,350 Trust Wallet 1,215 Apple 1,201 Cloudflare 1,167 sui 1,094 SushiSwap 1,088 aave 1,076

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust