NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 31,357 Cloudflare 21,916 Dynadot 15,997 Namecheap 9,044 PDR Ltd. d/b/a PublicDomainRe... 8,480 GoDaddy 7,306 NameSilo 7,178 Gname.com Pte. Ltd. 7,144 WebNIC 5,369 Global Domain Group 5,156 Trustname.com 4,742 Tucows 4,443 Wix Studio 4,093 Hostinger 3,587 Vercel 3,380 Spaceship, Inc. 2,982 GitHub, Inc. 2,912 MarkMonitor 2,673 Dominet (HK) Limited 2,539 Cloudflare Pages 2,487 Netlify 2,167 OwnRegistrar, Inc. 2,103 Hosting Concepts B.V. d/b/a R... 2,022 Name.com 1,917 Cosmotown 1,717 CSC Corporate Domains, Inc. 1,635 MAT BAO CORPORATION 1,547 Key-Systems 1,492 REGRU-RU 1,469 Porkbun LLC 1,449

Showing 31,357 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,458 Solana Drainer 2,733 Wallet Connect Abuse 1,677 Inferno Drainer 41 Ice Phishing 40 Wallet drainer 33 Unknown Drainer 7 Known drainer kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Unknown 42,623 across 9,818 Google 9,061 Ledger 8,576 Generic crypto 7,925 MetaMask 6,687 Coinbase 4,522 Trezor 3,659 Ethereum 3,402 Fake shop 3,250 Solana 3,221 genericcloudflare 2,991 Binance 2,892 Facebook 2,830 Kraken 2,720 Apple 2,000 Cloudflare 1,986 base 1,962 cryptoscam 1,961 x.com 1,528

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust