Strategic Risk Intelligence

Executive threat landscape with trend analysis and governance-ready narratives

Back to Dashboard
Filters
Clear

Strategic Overview

High-level posture indicators with period-over-period trends

30638
Total Threats
+53.0% vs prior 30d
27855
Active Threats
+55.9% vs prior 30d
9.1%
Neutralized
-2.9pp vs prior 30d
458
Critical Risk
+67.8% vs prior 30d
2144
Emerging (7d)
+2.5% vs prior 30d
Executive Summary

Threat activity has intensified, with total detected threats increasing 53.0% compared to the prior 30-day period. Of 30638 total threats, 458 classified as critical risk and 52.6% are email-capable (impersonation ready). Response posture is a gap requiring attention at 9.1% neutralization, down 2.9pp from the prior period — most identified threats remain unaddressed.

Last updated Apr 09, 2026 05:30
Detection Trends (30 Days)

Threat Composition & Exposure

How mature are detected threats and what systemic exposure do they represent?

Risk Score Distribution
Active High-Risk Domain Age
Threat Lifecycle Funnel

Progression from dormant registration to active threat. Domains can appear in multiple stages.

Dormant
30%
9215
Infrastructure Ready
20%
6226
Active (Live)
38%
11598
Weaponized
21%
6539
Confirmed Phishing
3%
847
Neutralized
9%
2783

Infrastructure Intelligence

Which registrars, nameservers, and TLDs are concentrated in your threat landscape?

Top Registrars
Registrar Count Avg Risk Response Rate
GoDaddy.com, LLC 3932 24
2%
NAMECHEAP INC 1131 57
2%
Dominet (HK) Limited 1046 34
1%
NameSilo, LLC 1042 43
19%
HOSTINGER operations, UAB 724 50
7%
Dynadot Inc 711 21
2%
Cloudflare, Inc. 639 42
1%
Dynadot LLC 618 9
30%
Spaceship, Inc. 609 22
5%
TUCOWS.COM, CO. 524 46
2%
Top Nameservers
Nameserver Count Avg Risk Share
ns7.alidns.com., ns8.alidns.com. 1285 33
ns1.afternic.com., ns2.afternic.com. 857 29
dns1.registrar-servers.com., dns2.registrar-servers.com. 765 59
ns1.dns-parking.com., ns2.dns-parking.com. 632 46
nsg1.namebrightdns.com., nsg2.namebrightdns.com. 580 7
ns1.abovedomains.com., ns2.abovedomains.com. 438 36
ns1.dnsowl.com., ns2.dnsowl.com., ns3.dnsowl.com. 427 38
ns1.dyna-ns.net., ns2.dyna-ns.net. 422 12
curitiba.ns.porkbun.com., fortaleza.ns.porkbun.com., maceio.ns.porkbun.com. 347 41
launch1.spaceship.net., launch2.spaceship.net. 346 16

Active Threats & Response

Response effectiveness, emerging threats, and recent risk changes

Response Effectiveness
1358
Taken Down
1580
Blacklisted
2783
Total Neutralized
Takedown Rate 4.4%
Blacklist Rate 5.2%
Neutralization Rate 9.1%
Discovery Method Breakdown
Emerging Threats (Last 7 Days, Risk 50+)
Lookalike Domain Target Domain Risk Score Registrar Website Detected
binancevipapp.com binance.com 50 Alpha Beta Domains LLC Live 5 days, 11 hours ago
tmobilehr.com t-mobile.com 50 IONOS SE Live 5 days, 21 hours ago
robloxde.com roblox.com 50 NICENIC INTERNATIONAL GROUP CO., LIMITED Live 1 day, 1 hour ago
spotifygratuit.fr spotify.com 50 AMEN / Agence des Médias Numériques Live 1 day, 1 hour ago
Recent Risk Increases
Lookalike Domain Target Domain Previous Current Change What Changed Date
aahomebooking.com booking.com 75 85 +10 +Dangerous Email Provider (10pts) +Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts) Apr 01, 2026
xtrabooking.com booking.com 0 10 +10 - Apr 07, 2026
gogbooking.com booking.com 40 50 +10 +Website Live (10pts) Apr 02, 2026
airbnbfireriskassessment.info airbnb.com 30 40 +10 +Website Live (10pts) Apr 07, 2026
airbnbfireriskassessment.com airbnb.com 40 50 +10 +Website Live (10pts) Apr 08, 2026
airbnbfireriskassessment.store airbnb.com 30 40 +10 +Website Live (10pts) Apr 07, 2026
gbwhatsappr.com whatsapp.com 40 50 +10 +Website Live (10pts) Apr 07, 2026
mcpwhatsapp.com whatsapp.com 10 20 +10 +Website Live (10pts) Apr 01, 2026
noshopify.shop shopify.com 0 10 +10 +Website Live (10pts) Apr 02, 2026
modprotonbus.com proton.me 10 20 +10 +Very Recent Domain (10pts) +Website Live (10pts) Mar 29, 2026
paypai-supp.com paypal.com 10 20 +10 +Website Live (10pts) Apr 04, 2026
paypalbusiness.live BLOCKED paypal.com 20 30 +10 +Blacklisted (30pts) Apr 01, 2026
netflix-tv.one netflix.com 0 10 +10 - Apr 07, 2026
velcloud180.com icloud.com 40 50 +10 +Website Live (10pts) Apr 02, 2026
icloudslocation.sbs icloud.com 40 50 +10 +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts) Apr 02, 2026

Domain-Level Analysis

Which of your brands are most targeted and carry the highest aggregate risk?

Most Targeted Domains
# Legitimate Domain Lookalikes Avg Risk High Risk Threat Level Response Rate
1 booking.com 2391 31 248 Medium
6%
2 icloud.com 2039 32 241 Medium
15%
3 americanexpress.com 1454 32 2 Medium
1%
4 checkout.com 1139 26 44 Medium
7%
5 binance.com 964 23 35 Low
19%
6 whatsapp.com 964 20 22 Low
15%
7 shopify.com 832 23 41 Low
3%
8 schwab.com 732 14 8 Low
32%
9 intuit.com 668 33 65 Medium
5%
10 wise.com 615 27 9 Medium
2%
Domain Protection Status
10/10
DMARC Protected (quarantine/reject)
7/10
BIMI Configured (brand logo in inbox)
# Domain Lookalikes DMARC Policy Protected BIMI
1 booking.com 2391 reject
2 icloud.com 2039 quarantine
3 americanexpress.com 1454 reject
4 checkout.com 1139 reject
5 binance.com 964 quarantine
6 whatsapp.com 964 reject
7 shopify.com 832 reject
8 schwab.com 732 reject
9 intuit.com 668 reject
10 wise.com 615 reject
Highest Average Risk Domains
# Legitimate Domain Avg Risk Max Risk Lookalikes Severity Response Rate
1 payoneer.com 38 90 173 Medium
4%
2 quickbooks.intuit.com 37 95 175 Medium
7%
3 sumup.com 37 85 150 Medium
7%
4 wellsfargo.com 35 95 127 Medium
28%
5 airwallex.com 35 90 101 Medium
14%
6 mashreq.com 35 75 51 Medium
4%
7 morganstanley.com 33 75 20 Medium
15%
8 intuit.com 33 100 668 Medium
5%
9 jpmorgan.com 33 90 87 Medium
13%
10 mizuhogroup.com 32 70 14 Medium
0%