Dear reporter,

Thank you for contacting the NiceNIC Legal and Abuse department. We confirm the receipt of your abuse report, it will be reviewed and processed following our policies.

Date: 2026-01-13
Complained domain name(s): ninebet.io
Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED

Please be aware that NiceNIC investigates a large volume of complaints, therefore, we will respond to you only if additional information on the matter is required. However, rest assured that your complaint will be properly evaluated and action will be taken if necessary.

You are welcome to check yourself if the domain is active by searching the domain status via NiceNIC Lookup (https://www.nicenic.net/whois/). If the domain status is in clientHold/serverHold, it means the domain has been suspended and is not available on the internet.

If you wish to contact the domain holder, hosting, or email provider for the domain name in question, you may consider using the RrSG ACID Tool (https://acidtool.com/) to identify their contact details.

IMPORTANT: In order to support the process of investigation, please review the instructions below depending on the type of abuse you are reporting. To help us fully investigate your claim, please ensure your submission includes all the requirements we describe. If you have submitted a complaint and realize that information is missing, please simply reply to this message, including the additional information, and make sure that the complained domain name is kept in the subject so that we can track your replies:

Information required to support our investigation: https://nicenic.net/customer/reportabuse.php
How does NiceNIC investigate Suspected Email Abuse/Spam: https://www.nicenic.net/customer/Email-Abuse-Spam.php

Copyright and Trademark Policies:
https://nicenic.net/customer/copyright_trademark_policies.php
Uniform Rapid Suspension System (URS): https://www.icann.org/urs-en/

In order to learn how to notice different types of incidents, how to report them, and some of the best remedial actions and preventive measures that can be taken, you are welcome to check the following article: https://www.nicenic.net/customer/understanding-fraud-and-abuse-dp.php

Best regards,
NiceNIC Abuse Team
ICANN Accredited Registrar since 2012
Domains | Reseller API | Business Email | SSL Certificates | Servers

>>
>>--- Original Message ---
>>From: "PhishDestroy"'<abuse@phishdestroy.io>
>>Date: 2026-01-13 01:52:33 +08
>>To: abuse@nicenic.net
>>Subject: ?? ESCALATION #9 (1282h active): Phishing - ninebet[.]io
Escalation #9 - Phishing Report - ninebet[.]io
ESCALATION #9

Unresolved Phishing Threat

Domain active 1282h since first report

PhishDestroy
REPORTED DOMAIN ninebet[.]io
REPORT #9
1282 HOURS ACTIVE 9 REPORTS SENT 8 NO RESPONSE

Action Required ― Please Read

This domain is actively stealing money while our reports go unanswered. 9 reports over 1282 hours without action is unacceptable.

If you cannot act: Please forward to your Abuse Department Manager or Trust & Safety Lead immediately.

Dear NICENIC INTERNATIONAL GROUP CO., LIMITED Abuse Team,

This is follow-up #9 regarding the phishing domain above. Our previous 8 report(s) received no response, and the site continues harming users.

THREAT INTELLIGENCE
Domain ninebet[.]io
Target Web3/Crypto
Threat Cryptocurrency Wallet Drainer
Infrastructure 188.114.97.3 | 188.114.96.3
Report View URLScan Analysis →
SECURITY VERIFICATION
VIRUSTOTAL 16/95 BLACKLISTS 0 URLQUERY 0
VISUAL EVIDENCE
Screenshot

Regulatory Compliance

Per ICANN RAA §3.18, registrars must investigate abuse reports expeditiously. This domain violates your AUP.

Non-Response Documentation

9 reports over 1282 hours. May be included in ICANN complaints and public transparency reports.

Required Actions

→  Suspend the domain immediately
→  Audit client account for similar domains
→  Preserve logs for law enforcement
Escalate to Abuse Manager ― 9 reports without action
Why email instead of web forms? Learn more →

REPORT TIMELINE

First: 2025-11-20 07:19:08 UTC
Current: #9 ― 2026-01-12 17:51:51 UTC
2025-11-20 07:20:22 2025-12-16 15:41:21 2025-12-20 18:19:05 2025-12-25 15:02:15 2025-12-29 15:31:51 2025-12-31 11:18:21 2026-01-10 15:34:12

Case ID: PD-1768240311-ninebet.io
Timestamp: 2026-01-12 17:51:51 UTC
Verification: PGP Signed ― Public Key
Record: PhishDestroy Database
PhishDestroy PhishDestroy.io Web X Telegram GitHub
2022-2025 PhishDestroy.io ― Threat Intelligence & Abuse Reporting
email