Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,679 Cloudflare, Inc. 21,002 GoDaddy.com, LLC 10,650 PDR Ltd. d/b/a PublicD... 8,316 Gname.com Pte. Ltd. 8,113 DYNADOT LLC 7,635 NameSilo, LLC 7,110 Dynadot Inc 6,784 NameCheap, Inc. 5,961 Fewmoretaps OU d/b/a T... 4,377 Global Domain Group LLC 4,362 Web Commerce Communica... 4,145 Tucows Domains Inc. 3,884 HOSTINGER operations, UAB 3,359 Dominet (HK) Limited 2,327 GitHub, Inc. 2,209 MarkMonitor, Inc. 2,147 Spaceship, Inc. 2,128 NameMart Pte. Ltd. 2,081 OwnRegistrar, Inc. 2,027 Vercel Inc. 1,770 MarkMonitor Inc. 1,722 Cloudflare Pages 1,673 CSC Corporate Domains,... 1,644 Hosting Concepts B.V. ... 1,585 MAT BAO CORPORATION 1,507 TuringSign Inc. d/b/a ... 1,448 Key-Systems GmbH 1,421 Ultahost, Inc. 1,318 REGRU-RU 1,317

Showing 3,884 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,440 Solana Drainer 2,649 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,877 Google 5,414 across 5,035 Coinbase 3,924 Solana 2,875 Trezor 2,683 Kraken 2,570 Ethereum 2,539 MetaMask 2,351 Binance 2,246 Facebook 1,560 Microsoft 1,444 Bet365 1,384 x.com 1,360 Trust Wallet 1,228 Apple 1,202 Cloudflare 1,171 sui 1,094 SushiSwap 1,092 aave 1,076

Showing 2,351 domains above

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust