NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,769 Cloudflare 21,458 Dynadot 10,765 PDR Ltd. d/b/a PublicDomainRe... 7,992 Namecheap 7,725 GoDaddy 6,628 Gname.com Pte. Ltd. 6,500 NameSilo 6,459 WebNIC 5,124 Global Domain Group 4,263 Tucows 4,198 Trustname.com 4,181 Wix Studio 4,093 Hostinger 3,379 GitHub, Inc. 2,728 Vercel 2,710 MarkMonitor 2,584 Dominet (HK) Limited 2,181 Spaceship, Inc. 2,120 OwnRegistrar, Inc. 2,007 Netlify 1,931 Hosting Concepts B.V. d/b/a R... 1,722 Cloudflare Pages 1,697 Name.com 1,655 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,441 Key-Systems 1,405 REGRU-RU 1,383 Squarespace Domains II 1,274

Showing 28,769 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,735 genericcrypto 7,718 across 6,799 Google 6,338 Coinbase 4,198 MetaMask 3,727 Trezor 3,409 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,483 Facebook 2,236 cryptoscam 1,810 Cloudflare 1,566 Apple 1,542 x.com 1,439 base 1,426 Microsoft 1,311 Bet365 1,307

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust