NiceNIC: phishing domains and abuse response

PhishDestroy reported 11,936 phishing domains registered with NiceNIC between 2026-01-02 and 2026-06-18, sending 13,334 abuse reports. Median time from the first report until a domain stopped resolving: 14.6 days (n = 6,410). 3,647 of 10,082 domains were still active 90 days after the first report. The database holds 31,784 NiceNIC domains in total.

11,936
Domains reported (window)
13,334
Abuse reports sent
14.6 days
Median time to unavailable
31,784
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Offline 6,213 (52%); Live 5,496 (46%); Suspended 231 (2%).

90th percentile time to unavailable: 35.6 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

Investigation: NiceNIC verdict

What is registered there

Impersonated brands

  1. MetaMask920
  2. Google788
  3. Kraken675
  4. Solana499
  5. Ethereum468
  6. X.com318
  7. Ledger299
  8. Binance297

Top-level domains

  1. .com12,414
  2. .xyz3,649
  3. .live2,066
  4. .cc1,812
  5. .net1,570
  6. .app1,186
  7. .icu1,022
  8. .org817

Most reported domains

  1. stukcas.com
  2. aveum.cc
  3. meolax.com
  4. 1game.online
  5. icebet.cc

Latest NiceNIC phishing domains

The 30 most recently detected domains at NiceNIC
DomainFirst detectedStatus at last checkRegistrar
bridge-pulsepinata.com2026-10-22OnlineNICENIC
xamvault.info2026-10-22OnlineNICENIC
gerwaldkronberg.com2026-10-22OnlineNICENIC
50yearupromo.com2026-10-22OnlineNICENIC
ichanger.dev2026-10-22OnlineNICENIC
evmaccess.pro2026-10-22OnlineNICENIC
skinveto.com2026-10-22OnlineNICENIC
ceabnc.industries2026-10-22OnlineNICENIC
goodgames.pro2026-10-22OnlineNICENIC
millenniumstudio.net2026-10-22OnlineNICENIC
yogasity.com2026-10-22OnlineNICENIC
1wm.info2026-10-22OnlineNICENIC
trustly.network2026-10-22OnlineNICENIC
stonlklfun.xyz2026-10-22OnlineNICENIC
spinsamurai-au.club2026-10-22OnlineNICENIC
penguinsegg.app2026-10-22OnlineNICENIC
paprertradae.xyz2026-10-22OnlineNICENIC
stashpatrick.run2026-10-22OnlineNICENIC
daeandsin.com2026-10-22OnlineNICENIC
trontrace.xyz2026-10-22OnlineNICENIC
mars-amp12.com2026-10-22OnlineNICENIC
fortgs.com2026-10-22UnknownNICENIC
guncelink-resmitr.com2026-10-22OnlineNICENIC
getbze.info2026-10-22OnlineNICENIC
pay-bitrefill.com-gift-esim-aj04.com2026-10-22OnlineNICENIC
nexo-claim.top2026-10-22OnlineNICENIC
nexo-claim.sbs2026-10-22OnlineNICENIC
bitrefill.com-gift-esim-af04.com2026-10-22OnlineNICENIC
pay-bitrefill.com-gift-esim-ae04.com2026-10-22OnlineNICENIC
bitrefill.com-gift-esim-ak04.com2026-10-22OnlineNICENIC

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.