Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,236 Cloudflare, Inc. 20,716 GoDaddy.com, LLC 9,245 Gname.com Pte. Ltd. 7,779 PDR Ltd. d/b/a PublicD... 7,687 DYNADOT LLC 7,376 NameSilo, LLC 6,826 NameCheap, Inc. 5,566 Dynadot Inc 4,926 Web Commerce Communica... 4,139 Global Domain Group LLC 3,949 Tucows Domains Inc. 3,660 Fewmoretaps OU d/b/a T... 3,304 HOSTINGER operations, UAB 3,149 GitHub, Inc. 2,220 Dominet (HK) Limited 2,174 MarkMonitor, Inc. 2,137 Spaceship, Inc. 1,957 OwnRegistrar, Inc. 1,934 NameMart Pte. Ltd. 1,855 Vercel Inc. 1,770 CSC Corporate Domains,... 1,592 Hosting Concepts B.V. ... 1,517 MarkMonitor Inc. 1,515 MAT BAO CORPORATION 1,451 TuringSign Inc. d/b/a ... 1,410 REGRU-RU 1,317 NAMECHEAP INC 1,275 Ultahost, Inc. 1,260 Netlify 1,183

Showing 7,687 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,419 Solana Drainer 2,572 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,346 Google 5,335 across 5,035 genericcrypto 4,079 Coinbase 3,920 Trezor 3,049 Solana 2,806 Ethereum 2,519 genericcloudflare 2,471 Kraken 2,396 MetaMask 2,324 Binance 2,212 Facebook 1,857 Microsoft 1,632 Bet365 1,534 x.com 1,360 cryptoscam 1,264 Apple 1,214 Trust Wallet 1,110 discord 1,059

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust