NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,702 Cloudflare 21,456 Dynadot 10,762 PDR Ltd. d/b/a PublicDomainRe... 7,991 Namecheap 7,721 GoDaddy 6,625 Gname.com Pte. Ltd. 6,500 NameSilo 6,456 WebNIC 5,123 Global Domain Group 4,263 Tucows 4,193 Trustname.com 4,171 Wix Studio 4,093 Hostinger 3,379 GitHub, Inc. 2,728 Vercel 2,710 MarkMonitor 2,584 Dominet (HK) Limited 2,181 Spaceship, Inc. 2,119 OwnRegistrar, Inc. 2,007 Netlify 1,909 Hosting Concepts B.V. d/b/a R... 1,722 Cloudflare Pages 1,697 Name.com 1,655 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,438 Key-Systems 1,404 REGRU-RU 1,383 Squarespace Domains II 1,274

Showing 28,702 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,734 genericcrypto 7,716 across 6,799 Google 6,338 Coinbase 4,197 MetaMask 3,727 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,481 Facebook 2,234 cryptoscam 1,805 Cloudflare 1,566 Apple 1,541 x.com 1,439 base 1,426 Microsoft 1,309 Bet365 1,306

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust