NiceNIC Phishing Domain Reports and Abuse Analysis

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 31,266 Cloudflare 21,912 Dynadot 15,313 Namecheap 9,017 PDR Ltd. d/b/a PublicDomainRe... 8,475 GoDaddy 7,290 NameSilo 7,167 Gname.com Pte. Ltd. 7,119 WebNIC 5,351 Global Domain Group 5,151 Trustname.com 4,735 Tucows 4,434 Wix Studio 4,093 Hostinger 3,583 Vercel 3,380 Spaceship, Inc. 2,955 GitHub, Inc. 2,912 MarkMonitor 2,672 Dominet (HK) Limited 2,537 Cloudflare Pages 2,487 Netlify 2,167 OwnRegistrar, Inc. 2,100 Hosting Concepts B.V. d/b/a R... 2,006 Name.com 1,908 Cosmotown 1,713 CSC Corporate Domains, Inc. 1,635 MAT BAO CORPORATION 1,547 Key-Systems 1,487 REGRU-RU 1,469 Porkbun LLC 1,445

Showing 31,266 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,455 Solana Drainer 2,731 Wallet Connect Abuse 1,677 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 32 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Unknown 42,625 across 9,793 Google 9,057 Ledger 8,574 genericcrypto 7,925 MetaMask 6,666 Coinbase 4,515 Trezor 3,657 Ethereum 3,398 fakeshop 3,236 Solana 3,219 genericcloudflare 2,991 Binance 2,891 Facebook 2,829 Kraken 2,716 Cloudflare 1,986 Apple 1,983 cryptoscam 1,961 base 1,954 x.com 1,528

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:

urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan

Global Vendor Sync— confirmed detections are pushed to 29 partners:

GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust