NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 31,388 Cloudflare 21,922 Dynadot 16,794 Namecheap 9,062 PDR Ltd. d/b/a PublicDomainRe... 8,485 GoDaddy 7,326 NameSilo 7,195 Gname.com Pte. Ltd. 7,153 WebNIC 5,371 Global Domain Group 5,161 Trustname.com 4,748 Tucows 4,448 Wix Studio 4,093 Hostinger 3,594 Vercel 3,380 Spaceship, Inc. 3,006 GitHub, Inc. 2,912 MarkMonitor 2,673 Dominet (HK) Limited 2,545 Cloudflare Pages 2,487 Netlify 2,167 OwnRegistrar, Inc. 2,107 Hosting Concepts B.V. d/b/a R... 2,034 Name.com 1,922 Cosmotown 1,718 CSC Corporate Domains, Inc. 1,635 MAT BAO CORPORATION 1,547 Key-Systems 1,495 REGRU-RU 1,469 Porkbun LLC 1,452

Showing 31,388 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,458 Solana Drainer 2,736 Wallet Connect Abuse 1,677 Inferno Drainer 41 Ice Phishing 40 Wallet drainer 31 Unknown Drainer 7 Known drainer kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Unknown 42,581 across 9,839 Google 9,079 Ledger 8,577 Generic crypto 7,929 MetaMask 6,688 Coinbase 4,526 Trezor 3,662 Ethereum 3,404 Fake shop 3,319 Solana 3,223 genericcloudflare 2,999 Binance 2,896 Facebook 2,845 Kraken 2,723 Apple 2,007 Cloudflare 1,989 base 1,966 cryptoscam 1,963 x.com 1,528

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust