Look up a domain
How the lookup works
Every domain under a generic ending (.com, .xyz, .app and the like) has a registrar, the company that sold it. Accredited registrars must publish an abuse contact and act on phishing reports. We ask the registry over RDAP, the official successor of WHOIS, which registrar holds the domain and which abuse address it lists. When RDAP gives no address, we fall back to the contacts we checked by hand.
Free subdomains such as name.vercel.app have no registrar of their own. For those we show the hosting platform's abuse contact from our platform list.
Report it here too
A registrar can take days. These reports are free and usually work faster, because they make browsers and wallets warn visitors:
- Google Safe Browsing: Chrome, Firefox and Safari show a red warning page.
- Netcraft: adds confirmed phishing sites to a blocklist that browsers and security tools use.
- Chainabuse: a public database of scam reports that investigators and exchanges search.