Strategic Risk Intelligence

Executive threat landscape with trend analysis and governance-ready narratives

Back to Dashboard
Filters
Clear

Strategic Overview

High-level posture indicators with period-over-period trends

28889
Total Threats
-32.0% vs prior 30d
26261
Active Threats
-35.8% vs prior 30d
9.1%
Neutralized
+2.1pp vs prior 30d
422
Critical Risk
+83.2% vs prior 30d
2752
Emerging (7d)
+12.4% vs prior 30d
Executive Summary

Threat activity has decreased, with total detected threats declining 32.0% compared to the prior 30-day period. Of 28889 total threats, 422 classified as critical risk and 53.1% are email-capable (impersonation ready). Response posture is a gap requiring attention at 9.1% neutralization, up 2.1pp from the prior period — most identified threats remain unaddressed.

Last updated Apr 03, 2026 21:33
Detection Trends (30 Days)

Threat Composition & Exposure

How mature are detected threats and what systemic exposure do they represent?

Risk Score Distribution
Active High-Risk Domain Age
Threat Lifecycle Funnel

Progression from dormant registration to active threat. Domains can appear in multiple stages.

Dormant
29%
8518
Infrastructure Ready
20%
5751
Active (Live)
39%
11244
Weaponized
22%
6326
Confirmed Phishing
3%
774
Neutralized
9%
2628

Infrastructure Intelligence

Which registrars, nameservers, and TLDs are concentrated in your threat landscape?

Top Registrars
Registrar Count Avg Risk Response Rate
BB-Online UK Limited 15 34
0%
Aceville Pte. Ltd. 14 13
43%
Gabia, Inc.(http://www.gabia.co.kr) 14 5
0%
abcdomain (ABCDomain LLC) 14 24
0%
Xin Net Technology Corp. 14 27
0%
Tomas 14 11
0%
DonDominio (SCIP) 13 27
0%
Above.au Pty Limited 13 40
0%
INET CORPORATION 13 17
0%
Register.com, Inc. 13 36
0%
Top Nameservers
Nameserver Count Avg Risk Share
ns7.alidns.com., ns8.alidns.com. 925 35
ns1.afternic.com., ns2.afternic.com. 854 29
dns1.registrar-servers.com., dns2.registrar-servers.com. 721 59
ns1.dns-parking.com., ns2.dns-parking.com. 629 46
nsg1.namebrightdns.com., nsg2.namebrightdns.com. 566 7
ns1.abovedomains.com., ns2.abovedomains.com. 436 36
ns1.dyna-ns.net., ns2.dyna-ns.net. 400 12
ns1.dnsowl.com., ns2.dnsowl.com., ns3.dnsowl.com. 368 39
launch1.spaceship.net., launch2.spaceship.net. 338 16
curitiba.ns.porkbun.com., fortaleza.ns.porkbun.com., maceio.ns.porkbun.com. 305 42

Active Threats & Response

Response effectiveness, emerging threats, and recent risk changes

Response Effectiveness
1244
Taken Down
1521
Blacklisted
2628
Total Neutralized
Takedown Rate 4.3%
Blacklist Rate 5.3%
Neutralization Rate 9.1%
Discovery Method Breakdown
Emerging Threats (Last 7 Days, Risk 50+)
Lookalike Domain Target Domain Risk Score Registrar Website Detected
roblox-navi.com roblox.com 50 GMO Internet, Inc. Live 1 day, 17 hours ago
icloudslocation.sbs icloud.com 50 Atak Domain Live 5 days, 17 hours ago
kraken-withdraw.com kraken.com 50 Hosting Concepts B.V. d/b/a Registrar.eu Live 5 days, 17 hours ago
quickbooks-mailto.com quickbooks.intuit.com 50 ENOM, INC. Live 2 hours, 39 minutes ago
protoonmail.com proton.me 50 Gname 078 Inc Live 5 days, 17 hours ago
paypal-pay.xyz BLOCKED paypal.com 50 Go Daddy, LLC Live 2 hours, 41 minutes ago
gogbooking.com booking.com 50 IONOS SE Live 4 days, 18 hours ago
desbloqueos-santander.com BLOCKED santander.com 50 NOMINALIA INTERNET S.L. Live 6 days, 16 hours ago
Recent Risk Increases
Lookalike Domain Target Domain Previous Current Change What Changed Date
shopifysecurityteam.com shopify.com 10 40 +30 +MX Records (15pts) +SPF Records (15pts) Mar 17, 2026
robloxpacks.com roblox.com 20 50 +30 +MX Records (15pts) +SPF Records (15pts) Mar 20, 2026
icloud-id6.top BLOCKED TAKEN DOWN icloud.com 15 45 +30 +Blacklisted (30pts) Mar 19, 2026
quickbooks-payment.com BLOCKED quickbooks.intuit.com 50 80 +30 +Blacklisted (30pts) Mar 20, 2026
automatticcheckout.com BLOCKED checkout.com 10 40 +30 +Blacklisted (30pts) +Very Recent Domain (10pts) Mar 21, 2026
1binance.com binance.com 30 60 +30 +MX Records (15pts) +SPF Records (15pts) Mar 24, 2026
security-slack.com BLOCKED slack.com 55 85 +30 +Blacklisted (30pts) Mar 17, 2026
payoneer-account.com BLOCKED payoneer.com 30 60 +30 +Blacklisted (30pts) +Very Recent Domain (10pts) +Website Phishing (20pts) Mar 14, 2026
chatbotiawhatsapp.com whatsapp.com 20 50 +30 +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts) Mar 12, 2026
netflixteam.com BLOCKED netflix.com 70 100 +30 +Blacklisted (30pts) Mar 19, 2026
indogithubers.net github.com 20 50 +30 +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts) Mar 17, 2026
nobookingfees.online booking.com 10 40 +30 +MX Records (15pts) +SPF Records (15pts) Mar 19, 2026
bookingdyno.com booking.com 45 75 +30 +Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts) Mar 12, 2026
0185-binance.com BLOCKED binance.com 20 50 +30 +Blacklisted (30pts) +Very Recent Domain (10pts) +Website Live (10pts) Mar 14, 2026
binance-inv.com binance.com 20 50 +30 +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts) Mar 13, 2026

Domain-Level Analysis

Which of your brands are most targeted and carry the highest aggregate risk?

Most Targeted Domains
# Legitimate Domain Lookalikes Avg Risk High Risk Threat Level Response Rate
1 booking.com 2220 31 231 Medium
6%
2 icloud.com 1846 31 216 Medium
15%
3 americanexpress.com 1033 34 2 Medium
2%
4 checkout.com 1021 26 43 Medium
8%
5 binance.com 925 23 30 Low
18%
6 whatsapp.com 816 21 20 Low
15%
7 shopify.com 768 22 35 Low
2%
8 schwab.com 726 14 8 Low
32%
9 wise.com 614 27 9 Medium
2%
10 intuit.com 612 32 57 Medium
5%
Domain Protection Status
10/10
DMARC Protected (quarantine/reject)
7/10
BIMI Configured (brand logo in inbox)
# Domain Lookalikes DMARC Policy Protected BIMI
1 booking.com 2220 reject
2 icloud.com 1846 quarantine
3 americanexpress.com 1033 reject
4 checkout.com 1021 reject
5 binance.com 925 quarantine
6 whatsapp.com 816 reject
7 shopify.com 768 reject
8 schwab.com 726 reject
9 wise.com 614 reject
10 intuit.com 612 reject
Highest Average Risk Domains
# Legitimate Domain Avg Risk Max Risk Lookalikes Severity Response Rate
1 payoneer.com 38 90 172 Medium
4%
2 quickbooks.intuit.com 36 95 169 Medium
7%
3 sumup.com 36 85 148 Medium
7%
4 wellsfargo.com 35 95 124 Medium
27%
5 airwallex.com 35 90 101 Medium
14%
6 mashreq.com 35 75 49 Medium
4%
7 americanexpress.com 34 80 1033 Medium
2%
8 morganstanley.com 33 75 20 Medium
15%
9 mizuhogroup.com 32 70 14 Medium
0%
10 intuit.com 32 100 612 Medium
5%