Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,282 Cloudflare, Inc. 20,719 GoDaddy.com, LLC 9,258 Gname.com Pte. Ltd. 7,927 PDR Ltd. d/b/a PublicD... 7,704 DYNADOT LLC 7,376 NameSilo, LLC 6,867 NameCheap, Inc. 5,614 Dynadot Inc 4,944 Web Commerce Communica... 4,139 Global Domain Group LLC 3,959 Tucows Domains Inc. 3,667 Fewmoretaps OU d/b/a T... 3,321 HOSTINGER operations, UAB 3,155 Dominet (HK) Limited 2,409 GitHub, Inc. 2,220 MarkMonitor, Inc. 2,137 Spaceship, Inc. 1,994 OwnRegistrar, Inc. 1,934 NameMart Pte. Ltd. 1,856 Vercel Inc. 1,770 CSC Corporate Domains,... 1,597 Hosting Concepts B.V. ... 1,521 MarkMonitor Inc. 1,516 MAT BAO CORPORATION 1,452 TuringSign Inc. d/b/a ... 1,412 REGRU-RU 1,317 NAMECHEAP INC 1,276 Ultahost, Inc. 1,261 Netlify 1,201

Showing 3,667 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,420 Solana Drainer 2,574 Wallet Connect Abuse 1,671 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,551 Ledger 7,362 Google 5,342 across 5,043 Coinbase 3,931 Trezor 3,053 genericcloudflare 2,862 Solana 2,822 Ethereum 2,525 Kraken 2,399 MetaMask 2,330 Binance 2,216 Facebook 1,907 Microsoft 1,782 cryptoscam 1,694 Bet365 1,601 x.com 1,360 Apple 1,218 Trust Wallet 1,112 discord 1,060

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust