# NiceNIC International Group Co., Limited — PhishDestroy Threat Report Source: https://phishdestroy.io/domain/?registrar=NiceNIC+International+Group+Co.%2C+Limited Generated: 2026-09-05T14:39:52+00:00 ## Registrar profile Brand: NiceNIC IANA ID: 3765 Country: CN Founded: 2006 Website: https://nicenic.net ## ⚠️ BAD-FAITH NOTICE — CRITICAL Victims should preserve the evidence and go directly to law enforcement Do not waste time expecting NiceNIC or ICANN to solve the problem. Preserve the domain, full URL, screenshots, timestamps, transaction or wallet records, and all correspondence, then submit the evidence directly to your local law-enforcement or cybercrime authority. Thank you, ICANN, for the inaction: the accreditation badge remains visible while victims and independent researchers are left to do the accountability work. ### Evidence - NiceNIC investigation: /nicenic-real - Registrar abuse investigation: /registrars-enabling-global-scams ## Threat statistics - Flagged phishing domains in PhishDestroy DB: 29,337 - Last seen active: 8,836 (30.1%) - Unavailable at latest stored check: 2,210 - VirusTotal-detected: 29,172 (99.4% detection rate) - Avg VT detections (non-zero): 7.8 - High-confidence threats (VT ≥ 5): 20,301 - First flagged: 2025-05-30 18:50:39 - Last flagged: 2026-09-05 16:27:57 ## Sample flagged domains (top 50 by VT detections) - 488543-coinbase.com [VT:25, status:unknown] → https://phishdestroy.io/domain/488543-coinbase.com/ - 133750-coinbase.com [VT:24, status:unknown] → https://phishdestroy.io/domain/133750-coinbase.com/ - eng-victoryhub.com [VT:24, status:unknown] → https://phishdestroy.io/domain/eng-victoryhub.com/ - validate-robinhood.com [VT:24, status:unknown] → https://phishdestroy.io/domain/validate-robinhood.com/ - binance-dep30h.com [VT:23, status:unknown] → https://phishdestroy.io/domain/binance-dep30h.com/ - bittrexrecoverydocument.com [VT:23, status:unknown] → https://phishdestroy.io/domain/bittrexrecoverydocument.com/ - citrusocarpetscleaning.com [VT:23, status:alive] → https://phishdestroy.io/domain/citrusocarpetscleaning.com/ - coinbase-lidiya.com [VT:23, status:unknown] → https://phishdestroy.io/domain/coinbase-lidiya.com/ - cptoptious.com [VT:23, status:unknown] → https://phishdestroy.io/domain/cptoptious.com/ - crosshair-x.com [VT:23, status:unknown] → https://phishdestroy.io/domain/crosshair-x.com/ - cs4money.com [VT:23, status:alive] → https://phishdestroy.io/domain/cs4money.com/ - ledgerglobai.com [VT:23, status:unknown] → https://phishdestroy.io/domain/ledgerglobai.com/ - meta-meta.xyz [VT:23, status:unknown] → https://phishdestroy.io/domain/meta-meta.xyz/ - preview-coinbase.com [VT:23, status:unknown] → https://phishdestroy.io/domain/preview-coinbase.com/ - securitycheck-coinbase.com [VT:23, status:unknown] → https://phishdestroy.io/domain/securitycheck-coinbase.com/ - staemcommunnity.cc [VT:23, status:unknown] → https://phishdestroy.io/domain/staemcommunnity.cc/ - teleapru.com [VT:23, status:alive] → https://phishdestroy.io/domain/teleapru.com/ - teleiuaf.com [VT:23, status:alive] → https://phishdestroy.io/domain/teleiuaf.com/ - telewexs.com [VT:23, status:unknown] → https://phishdestroy.io/domain/telewexs.com/ - tgelyyae.shop [VT:23, status:alive] → https://phishdestroy.io/domain/tgelyyae.shop/ - troeyedq.shop [VT:23, status:alive] → https://phishdestroy.io/domain/troeyedq.shop/ - verifytrezor.io [VT:23, status:unknown] → https://phishdestroy.io/domain/verifytrezor.io/ - 121jio.luxemte.cc [VT:22, status:unknown] → https://phishdestroy.io/domain/121jio.luxemte.cc/ - 14735-coinbase.com [VT:22, status:unknown] → https://phishdestroy.io/domain/14735-coinbase.com/ - arthrovia-ai-el.live [VT:22, status:unknown] → https://phishdestroy.io/domain/arthrovia-ai-el.live/ - captioto.com [VT:22, status:alive] → https://phishdestroy.io/domain/captioto.com/ - claim-pengu.live [VT:22, status:unknown] → https://phishdestroy.io/domain/claim-pengu.live/ - docu.sign-platform.app [VT:22, status:unknown] → https://phishdestroy.io/domain/docu.sign-platform.app/ - event-pancakeswap.app [VT:22, status:unknown] → https://phishdestroy.io/domain/event-pancakeswap.app/ - help.useraccountverify.com [VT:22, status:unknown] → https://phishdestroy.io/domain/help.useraccountverify.com/ - l2unity.ltd [VT:22, status:unknown] → https://phishdestroy.io/domain/l2unity.ltd/ - ledger.updatesetup.com [VT:22, status:alive] → https://phishdestroy.io/domain/ledger.updatesetup.com/ - lornumerique.live [VT:22, status:dead] → https://phishdestroy.io/domain/lornumerique.live/ - phtmfoundation.info [VT:22, status:unknown] → https://phishdestroy.io/domain/phtmfoundation.info/ - postfinance.ch-notfallhilfe.com [VT:22, status:unknown] → https://phishdestroy.io/domain/postfinance.ch-notfallhilfe.com/ - potatotf.com [VT:22, status:unknown] → https://phishdestroy.io/domain/potatotf.com/ - swanbitcoinpolicy.info [VT:22, status:unknown] → https://phishdestroy.io/domain/swanbitcoinpolicy.info/ - taoiqsew.shop [VT:22, status:alive] → https://phishdestroy.io/domain/taoiqsew.shop/ - teleefxm.com [VT:22, status:alive] → https://phishdestroy.io/domain/teleefxm.com/ - telefjyr.com [VT:22, status:unknown] → https://phishdestroy.io/domain/telefjyr.com/ - telegozg.com [VT:22, status:alive] → https://phishdestroy.io/domain/telegozg.com/ - telgda.com [VT:22, status:alive] → https://phishdestroy.io/domain/telgda.com/ - toeogmp.shop [VT:22, status:alive] → https://phishdestroy.io/domain/toeogmp.shop/ - trezordevicesupport.com [VT:22, status:unknown] → https://phishdestroy.io/domain/trezordevicesupport.com/ - updateterms.com [VT:22, status:unknown] → https://phishdestroy.io/domain/updateterms.com/ - voteflr.com [VT:22, status:dead] → https://phishdestroy.io/domain/voteflr.com/ - wallnetsonchain.com [VT:22, status:unknown] → https://phishdestroy.io/domain/wallnetsonchain.com/ - activonda.live [VT:21, status:dead] → https://phishdestroy.io/domain/activonda.live/ - aurix-ai-it.live [VT:21, status:dead] → https://phishdestroy.io/domain/aurix-ai-it.live/ - axiomprotocols-rlusd.info [VT:21, status:alive] → https://phishdestroy.io/domain/axiomprotocols-rlusd.info/ ## Links - Full interactive hub: https://phishdestroy.io/domain/?registrar=NiceNIC+International+Group+Co.%2C+Limited - Site-wide LLM feed: https://phishdestroy.io/llms.txt - Report abuse / appeals: https://phishdestroy.io/appeals/