Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,576 Cloudflare, Inc. 20,978 GoDaddy.com, LLC 10,478 PDR Ltd. d/b/a PublicD... 8,302 Gname.com Pte. Ltd. 7,946 DYNADOT LLC 7,615 NameSilo, LLC 7,063 Dynadot Inc 6,520 NameCheap, Inc. 5,915 Global Domain Group LLC 4,342 Fewmoretaps OU d/b/a T... 4,300 Web Commerce Communica... 4,145 Tucows Domains Inc. 3,858 HOSTINGER operations, UAB 3,338 Dominet (HK) Limited 2,323 GitHub, Inc. 2,203 MarkMonitor, Inc. 2,146 Spaceship, Inc. 2,111 OwnRegistrar, Inc. 2,016 NameMart Pte. Ltd. 1,953 Vercel Inc. 1,770 CSC Corporate Domains,... 1,643 Cloudflare Pages 1,633 MarkMonitor Inc. 1,584 Hosting Concepts B.V. ... 1,581 MAT BAO CORPORATION 1,507 TuringSign Inc. d/b/a ... 1,411 Key-Systems GmbH 1,410 REGRU-RU 1,316 Ultahost, Inc. 1,311

Showing 1,311 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,439 Solana Drainer 2,646 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,860 Google 5,411 across 5,035 Coinbase 3,923 Solana 2,863 Trezor 2,672 Kraken 2,564 Ethereum 2,539 MetaMask 2,351 Binance 2,244 Facebook 1,556 Microsoft 1,430 x.com 1,360 Bet365 1,350 Trust Wallet 1,214 Apple 1,201 Cloudflare 1,130 sui 1,094 SushiSwap 1,087 aave 1,076

Showing 2,351 domains above

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust