NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 31,582 Cloudflare 21,942 Dynadot 17,757 Namecheap 9,107 PDR Ltd. d/b/a PublicDomainRe... 8,502 GoDaddy 7,345 NameSilo 7,313 Gname.com Pte. Ltd. 7,187 WebNIC 5,378 Global Domain Group 5,183 Trustname.com 4,754 Tucows 4,458 Wix Studio 4,093 Hostinger 3,602 Vercel 3,430 Spaceship, Inc. 3,081 GitHub, Inc. 2,912 MarkMonitor 2,673 Dominet (HK) Limited 2,561 Cloudflare Pages 2,550 Netlify 2,167 OwnRegistrar, Inc. 2,112 Hosting Concepts B.V. d/b/a R... 2,044 Name.com 1,928 Cosmotown 1,719 CSC Corporate Domains, Inc. 1,642 MAT BAO CORPORATION 1,548 Key-Systems 1,499 REGRU-RU 1,475 Porkbun LLC 1,456

Showing 31,582 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,458 Solana Drainer 2,752 Wallet Connect Abuse 1,678 Inferno Drainer 41 Ice Phishing 40 Wallet drainer 31 Unknown Drainer 7 Known drainer kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Unknown 42,570 across 9,941 Google 9,146 Ledger 8,606 Generic crypto 7,942 MetaMask 6,786 Coinbase 4,535 Trezor 3,663 Fake shop 3,595 Ethereum 3,422 Solana 3,245 genericcloudflare 2,999 Binance 2,909 Facebook 2,858 Kraken 2,727 Apple 2,068 Cloudflare 2,001 base 1,982 cryptoscam 1,973 x.com 1,528

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust