Protect
Actor tracking
Search our self-collected domain intelligence to map an actor's infrastructure, then watch them: a standing detector flags newly registered domains that match, so you can block them before they are used. Nameserver and registrar are the durable signal, actors rotate registrant identities but reuse infrastructure.
Search domain intelligence
Find domains by shared infrastructure (nameserver) or registrant identity (email, phone, name, address). Exact match on nameserver, email and phone; partial match on name, org and address.
| Domain | Registrant | Nameservers | Registrar | Created |
|---|
Search the index
Enter a nameserver, email, phone, or name to map an actor's domains.
Watched actors
Standing detectors. New registrations matching an active watch raise a flag on the day they appear.
| Type | Value | Label | Caught |
|---|
No watches yet
Search above, then Watch an actor, or add one manually.
Caught domains
Domains flagged by your watches. Review and route to a takedown before the domain is weaponized.
| Domain | Matched | Registrant | Registered | Status |
|---|
No domains caught yet
Watches flag new registrations as they appear.