What can I report?
Any domain or URL you believe is malicious — phishing and fake login pages, scam or fraudulent shops, investment and crypto fraud, brand impersonation and lookalike domains, and links that serve malware or command-and-control infrastructure. If you're not certain, report it anyway.