NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,693 Cloudflare 21,455 Dynadot 10,758 PDR Ltd. d/b/a PublicDomainRe... 7,988 Namecheap 7,715 GoDaddy 6,624 Gname.com Pte. Ltd. 6,496 NameSilo 6,455 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,192 Trustname.com 4,168 Wix Studio 4,093 Hostinger 3,377 GitHub, Inc. 2,721 Vercel 2,710 MarkMonitor 2,584 Dominet (HK) Limited 2,180 Spaceship, Inc. 2,119 OwnRegistrar, Inc. 2,007 Netlify 1,896 Hosting Concepts B.V. d/b/a R... 1,722 Cloudflare Pages 1,697 Name.com 1,655 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,438 Key-Systems 1,404 REGRU-RU 1,383 Squarespace Domains II 1,274

Showing 28,693 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,733 genericcrypto 7,713 across 6,799 Google 6,338 Coinbase 4,197 MetaMask 3,727 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,481 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,566 Apple 1,541 x.com 1,439 base 1,426 Microsoft 1,309 Bet365 1,306

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust