Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,477 Cloudflare, Inc. 20,944 GoDaddy.com, LLC 10,311 PDR Ltd. d/b/a PublicD... 8,283 Gname.com Pte. Ltd. 7,808 DYNADOT LLC 7,579 NameSilo, LLC 6,950 Dynadot Inc 5,970 NameCheap, Inc. 5,836 Global Domain Group LLC 4,313 Fewmoretaps OU d/b/a T... 4,281 Web Commerce Communica... 4,145 Tucows Domains Inc. 3,834 HOSTINGER operations, UAB 3,313 Dominet (HK) Limited 2,318 GitHub, Inc. 2,203 MarkMonitor, Inc. 2,142 Spaceship, Inc. 2,017 OwnRegistrar, Inc. 2,007 NameMart Pte. Ltd. 1,872 Vercel Inc. 1,770 CSC Corporate Domains,... 1,636 Cloudflare Pages 1,622 Hosting Concepts B.V. ... 1,574 MAT BAO CORPORATION 1,506 TuringSign Inc. d/b/a ... 1,403 Key-Systems GmbH 1,398 MarkMonitor Inc. 1,335 REGRU-RU 1,316 Ultahost, Inc. 1,299

Showing 13,549 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,437 Solana Drainer 2,643 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 176,260 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,851 Google 5,404 across 5,035 Coinbase 3,923 Solana 2,856 Trezor 2,669 Kraken 2,557 Ethereum 2,535 MetaMask 2,349 Binance 2,244 Facebook 1,555 x.com 1,360 Bet365 1,279 Trust Wallet 1,212 Apple 1,196 Microsoft 1,148 sui 1,093 SushiSwap 1,087 aave 1,076 discord 1,061

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust