Skip to domain reports

Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

224,517
Total Tracked
218,643
VT Detected
94,131
Last Seen Active
130,386
Unavailable at Last Check
3
VT Pending

Recent Reports

Research & source reporting

Security news & investigations

All news
Cointelegraph

OCC finalizes GENIUS Act rules for stablecoin issuers and custody

The Office of the Comptroller of the Currency’s final rule covers payment stablecoin issuance and some custody activities, with the GENIUS Act framework taking effect in mid-January.

Read source
BleepingComputer

Microsoft PowerToys adds CursorHide, Button Lock mouse tools

Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. [...]

Read source
Decrypt

Morning Minute: Bitcoin Tops JPMorgan’s Ten-Year Forecast for All Assets

The bank has Bitcoin outperforming all asset classes spanning real estate, stocks and gold over the next 10-15 years.

Read source
CoinDesk

Why centralized exchanges refuse to list legacy crypto tokens without explicit SEC immunity

Vault12 raised $17.45 million selling VGT in 2018 and says it met or dropped every promise, yet the token has never traded on a centralized exchange.

Read source
CoinDesk

Japanese visitors may be able to pay with yen stablecoins in South Korea under Shinhan-SBI pact

The collaboration will explore card-linked merchant payments for Japanese visitors in South Korea and peer-to-peer wallet transfers among broader cross-border trade remittances.

Read source
Cointelegraph

Standard Chartered signs definitive deal to acquire Zodia Custody

The signing follows shareholders’ acceptance of Standard Chartered’s non-binding offer in May, with regulatory approvals still pending.

Read source

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 31,920 Cloudflare 21,989 Dynadot 19,198 Namecheap 9,213 PDR Ltd. d/b/a PublicDomainRe... 8,548 GoDaddy 7,414 NameSilo 7,401 Gname.com Pte. Ltd. 7,232 WebNIC 5,406 Global Domain Group 5,204 Trustname.com 4,756 Tucows 4,479 Wix Studio 4,093 Hostinger 3,619 Vercel 3,430 Spaceship, Inc. 3,392 GitHub, Inc. 2,912 MarkMonitor 2,677 Dominet (HK) Limited 2,592 Cloudflare Pages 2,550 Netlify 2,167 OwnRegistrar, Inc. 2,119 Hosting Concepts B.V. d/b/a R... 2,090 Name.com 1,937 Cosmotown 1,744 CSC Corporate Domains, Inc. 1,642 MAT BAO CORPORATION 1,557 Key-Systems 1,513 Porkbun LLC 1,477 REGRU-RU 1,477

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,458 Solana Drainer 2,758 Wallet Connect Abuse 1,678 Inferno Drainer 41 Ice Phishing 40 Wallet drainer 35 Unknown Drainer 7 Known drainer kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Unknown 28,785 Gambler Scam 10,211 Airdrop Scam 6,465 Seed Phrase Phishing 744 Token Presale 699 Wallet Connect Abuse 598 Giveaway Scam 167 Verification Scam 112 Recovery Scam 100 NFT Mint 62 Staking Scam 41 Credential Phishing 31 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Unknown 35,178 Google 9,391 Ledger 8,826 MetaMask 6,882 Coinbase 4,630 Ethereum 3,749 Trezor 3,734 Solana 3,554 Binance 3,110 Generic crypto 2,921 Kraken 2,757 Apple 2,188 Cloudflare 2,017 x.com 1,558 amazon 1,550 Microsoft 1,524 Facebook 1,430 aave 1,419 Trust Wallet 1,393 Bet365 1,384

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,129 Seed Phrase Theft 20 Airdrop Scam 8,483 Investment Scam 384

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust
What each report can include

What each report can include

VirusTotal Analysis

Stored VirusTotal results show vendor detections when a scan is available for the domain.

Website Screenshots

Stored URLScan or archive screenshots are shown when a capture is available, without requiring a visit to the domain.

Domain Intelligence

Stored registration, IP, DNS, TLS, registrar, and domain-age context is shown when available.

Public Blocklist Check

Reports distinguish the PhishDestroy source dataset from independently observed external blocklist hits.

Evidence Archival

Stored archive links and screenshots are shown when evidence was captured successfully.

Victim Resources

If you were scammed, our reports include links to report the incident to FBI IC3, Europol, Action Fraud, and more.