NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,243 Cloudflare 21,327 Dynadot 10,319 GoDaddy 9,305 PDR Ltd. d/b/a PublicDomainRe... 7,878 Namecheap 7,243 Gname.com Pte. Ltd. 6,390 NameSilo 6,258 WebNIC 5,098 Global Domain Group 4,140 Tucows 4,094 Trustname.com 3,863 Hostinger 3,229 GitHub, Inc. 2,560 MarkMonitor 2,560 Vercel 2,410 Dominet (HK) Limited 2,141 Spaceship, Inc. 1,998 OwnRegistrar, Inc. 1,924 Hosting Concepts B.V. d/b/a R... 1,590 CSC Corporate Domains, Inc. 1,584 Name.com 1,570 Netlify 1,559 MAT BAO CORPORATION 1,475 REGRU-RU 1,380 Key-Systems 1,374 Cosmotown 1,297 Cloudflare Pages 1,284 Ultahost, Inc. 1,106 Porkbun LLC 1,088

Showing 28,243 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,411 Solana Drainer 2,639 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

genericcrypto 7,647 Ledger 7,588 across 6,778 Google 6,269 Coinbase 4,150 MetaMask 3,323 Trezor 3,290 Solana 2,967 Ethereum 2,920 genericcloudflare 2,918 Binance 2,558 Kraken 2,450 Facebook 2,191 cryptoscam 1,756 Apple 1,494 x.com 1,439 base 1,410 Cloudflare 1,305 Bet365 1,300 Microsoft 1,260

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust