Why did PhishDestroy flag all NiceNIC domains?

After reviewing NiceNIC's entire domain portfolio (24.7 MB dataset published on GitHub), PhishDestroy found zero legitimate use cases. Combined with 5,000+ unique abuse tickets that were systematically ignored, the statistical conclusion was unavoidable: the registrar itself is the infrastructure enabling crime.

What is the trash.json dataset?

A 24.7 MB public collection of NiceNIC-registered domains published on GitHub at github.com/phishdestroy/destroylist. It contains domain registrations, IPs, registration dates, and expiration dates for independent verification by researchers and law enforcement.

Can you verify NiceNIC domains yourself?

Yes. Download the trash.json dataset from GitHub, use the free API at api.destroy.tools (no API key required) for threat scoring, or browse the interactive tools at phishdestroy.github.io/destroylist/scripts/.

Back to News

NiceNIC Verdict: Every Domain Reviewed, Zero Legit Uses

Share This Investigation

X / Twitter Telegram Reddit LinkedIn

Related Investigations

DEEP INVESTIGATION

NiceNIC Investigation: ICANN Registrar Enabling Cybercrime

INVESTIGATION

NameSilo, Webnic, NiceNic: Registrars Enabling Scams

INVESTIGATION

When Abuse Reports Go Nowhere — Registrar Response Failure

Transparency notice. PhishDestroy is a non-commercial, volunteer-driven project. Our research may reflect an inherent bias against scam infrastructure and the services that enable it. We encourage readers to evaluate all material critically and independently. Read our full transparency statement →