NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 28,687 Cloudflare 21,448 Dynadot 10,748 PDR Ltd. d/b/a PublicDomainRe... 7,987 Namecheap 7,704 GoDaddy 6,621 Gname.com Pte. Ltd. 6,495 NameSilo 6,452 WebNIC 5,123 Global Domain Group 4,260 Tucows 4,189 Trustname.com 4,167 Wix Studio 4,093 Hostinger 3,376 GitHub, Inc. 2,720 Vercel 2,710 MarkMonitor 2,582 Dominet (HK) Limited 2,175 Spaceship, Inc. 2,115 OwnRegistrar, Inc. 2,006 Netlify 1,875 Hosting Concepts B.V. d/b/a R... 1,720 Cloudflare Pages 1,696 Name.com 1,650 CSC Corporate Domains, Inc. 1,599 MAT BAO CORPORATION 1,480 Cosmotown 1,436 Key-Systems 1,403 REGRU-RU 1,382 Squarespace Domains II 1,274

Showing 28,687 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,663 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,732 genericcrypto 7,713 across 6,799 Google 6,336 Coinbase 4,195 MetaMask 3,715 Trezor 3,407 Solana 3,004 Ethereum 2,944 genericcloudflare 2,919 Binance 2,574 Kraken 2,480 Facebook 2,233 cryptoscam 1,804 Cloudflare 1,565 Apple 1,541 x.com 1,439 base 1,426 Bet365 1,306 Microsoft 1,304

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust