Domain Security Reports

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 28,611 Cloudflare, Inc. 20,998 GoDaddy.com, LLC 10,519 PDR Ltd. d/b/a PublicD... 8,240 Gname.com Pte. Ltd. 8,069 DYNADOT LLC 7,536 NameSilo, LLC 7,041 NameCheap, Inc. 5,890 Dynadot Inc 5,248 Fewmoretaps OU d/b/a T... 4,379 Global Domain Group LLC 4,298 Web Commerce Communica... 4,145 Tucows Domains Inc. 3,861 HOSTINGER operations, UAB 3,361 Dominet (HK) Limited 2,318 GitHub, Inc. 2,209 MarkMonitor, Inc. 2,147 Spaceship, Inc. 2,039 OwnRegistrar, Inc. 1,988 NameMart Pte. Ltd. 1,881 Vercel Inc. 1,770 MarkMonitor Inc. 1,716 CSC Corporate Domains,... 1,637 Cloudflare Pages 1,579 Hosting Concepts B.V. ... 1,573 MAT BAO CORPORATION 1,506 TuringSign Inc. d/b/a ... 1,440 Key-Systems GmbH 1,420 REGRU-RU 1,317 Ultahost, Inc. 1,282

Showing 4,379 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,438 Solana Drainer 2,643 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,864 Google 5,407 across 5,035 Coinbase 3,921 Solana 2,863 Trezor 2,675 Kraken 2,564 Ethereum 2,538 MetaMask 2,348 Binance 2,244 Facebook 1,555 Microsoft 1,441 x.com 1,360 Bet365 1,327 Trust Wallet 1,224 Apple 1,192 Cloudflare 1,100 sui 1,093 SushiSwap 1,092 aave 1,076

Showing 2,348 domains above

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust