Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,512 Cloudflare, Inc. 20,958 GoDaddy.com, LLC 10,419 PDR Ltd. d/b/a PublicD... 8,294 Gname.com Pte. Ltd. 7,916 DYNADOT LLC 7,606 NameSilo, LLC 7,038 Dynadot Inc 6,252 NameCheap, Inc. 5,877 Global Domain Group LLC 4,328 Fewmoretaps OU d/b/a T... 4,287 Web Commerce Communica... 4,145 Tucows Domains Inc. 3,844 HOSTINGER operations, UAB 3,321 Dominet (HK) Limited 2,319 GitHub, Inc. 2,203 MarkMonitor, Inc. 2,146 Spaceship, Inc. 2,096 OwnRegistrar, Inc. 2,011 NameMart Pte. Ltd. 1,951 Vercel Inc. 1,770 CSC Corporate Domains,... 1,641 Cloudflare Pages 1,632 Hosting Concepts B.V. ... 1,578 MAT BAO CORPORATION 1,507 MarkMonitor Inc. 1,482 TuringSign Inc. d/b/a ... 1,409 Key-Systems GmbH 1,404 REGRU-RU 1,316 Ultahost, Inc. 1,305

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,438 Solana Drainer 2,644 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Showing 51 domains above

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,857 Google 5,404 across 5,035 Coinbase 3,923 Solana 2,860 Trezor 2,671 Kraken 2,561 Ethereum 2,535 MetaMask 2,350 Binance 2,244 Facebook 1,555 x.com 1,360 Bet365 1,292 Trust Wallet 1,214 Apple 1,196 Microsoft 1,164 Cloudflare 1,109 sui 1,094 SushiSwap 1,087 aave 1,076

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust