# NiceNIC: phishing domains and abuse response PhishDestroy reported 11,936 phishing domains registered with NiceNIC between 2026-01-02 and 2026-06-18, sending 13,334 abuse reports. Median time from the first report until a domain stopped resolving: 14.6 days (n = 6,410). 3,647 of 10,082 domains were still active 90 days after the first report. The database holds 31,784 NiceNIC domains in total. 11,936Domains reported (window) 13,334Abuse reports sent 14.6 daysMedian time to unavailable 31,784In the database now ## Abuse-report outcome Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Offline 6,213 (52%); Live 5,496 (46%); Suspended 231 (2%). 90th percentile time to unavailable: 35.6 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action. Investigation: [NiceNIC verdict](https://phishdestroy.io/nicenic-verdict) ## What is registered there ### Impersonated brands - [MetaMask](https://phishdestroy.io/brand/metamask/)920 - [Google](https://phishdestroy.io/brand/google/)788 - [Kraken](https://phishdestroy.io/brand/kraken/)675 - [Solana](https://phishdestroy.io/brand/solana/)499 - [Ethereum](https://phishdestroy.io/brand/ethereum/)468 - [X.com](https://phishdestroy.io/brand/x-com/)318 - [Ledger](https://phishdestroy.io/brand/ledger/)299 - [Binance](https://phishdestroy.io/brand/binance/)297 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)12,414 - [.xyz](https://phishdestroy.io/tld/xyz/)3,649 - [.live](https://phishdestroy.io/tld/live/)2,066 - [.cc](https://phishdestroy.io/tld/cc/)1,812 - [.net](https://phishdestroy.io/tld/net/)1,570 - [.app](https://phishdestroy.io/tld/app/)1,186 - [.icu](https://phishdestroy.io/tld/icu/)1,022 - [.org](https://phishdestroy.io/tld/org/)817 ### Most reported domains - [stukcas.com](https://phishdestroy.io/domain/stukcas.com/) - [aveum.cc](https://phishdestroy.io/domain/aveum.cc/) - [meolax.com](https://phishdestroy.io/domain/meolax.com/) - [1game.online](https://phishdestroy.io/domain/1game.online/) - [icebet.cc](https://phishdestroy.io/domain/icebet.cc/) ## Latest NiceNIC phishing domains The 30 most recently detected domains at NiceNIC Domain | First detected | Status at last check | Registrar | [bridge-pulsepinata.com](https://phishdestroy.io/domain/bridge-pulsepinata.com/) | 2026-10-22 | Online | NICENIC | [xamvault.info](https://phishdestroy.io/domain/xamvault.info/) | 2026-10-22 | Online | NICENIC | [gerwaldkronberg.com](https://phishdestroy.io/domain/gerwaldkronberg.com/) | 2026-10-22 | Online | NICENIC | [50yearupromo.com](https://phishdestroy.io/domain/50yearupromo.com/) | 2026-10-22 | Online | NICENIC | [ichanger.dev](https://phishdestroy.io/domain/ichanger.dev/) | 2026-10-22 | Online | NICENIC | [evmaccess.pro](https://phishdestroy.io/domain/evmaccess.pro/) | 2026-10-22 | Online | NICENIC | [skinveto.com](https://phishdestroy.io/domain/skinveto.com/) | 2026-10-22 | Online | NICENIC | [ceabnc.industries](https://phishdestroy.io/domain/ceabnc.industries/) | 2026-10-22 | Online | NICENIC | [goodgames.pro](https://phishdestroy.io/domain/goodgames.pro/) | 2026-10-22 | Online | NICENIC | [millenniumstudio.net](https://phishdestroy.io/domain/millenniumstudio.net/) | 2026-10-22 | Online | NICENIC | [yogasity.com](https://phishdestroy.io/domain/yogasity.com/) | 2026-10-22 | Online | NICENIC | [1wm.info](https://phishdestroy.io/domain/1wm.info/) | 2026-10-22 | Online | NICENIC | [trustly.network](https://phishdestroy.io/domain/trustly.network/) | 2026-10-22 | Online | NICENIC | [stonlklfun.xyz](https://phishdestroy.io/domain/stonlklfun.xyz/) | 2026-10-22 | Online | NICENIC | [spinsamurai-au.club](https://phishdestroy.io/domain/spinsamurai-au.club/) | 2026-10-22 | Online | NICENIC | [penguinsegg.app](https://phishdestroy.io/domain/penguinsegg.app/) | 2026-10-22 | Online | NICENIC | [paprertradae.xyz](https://phishdestroy.io/domain/paprertradae.xyz/) | 2026-10-22 | Online | NICENIC | [stashpatrick.run](https://phishdestroy.io/domain/stashpatrick.run/) | 2026-10-22 | Online | NICENIC | [daeandsin.com](https://phishdestroy.io/domain/daeandsin.com/) | 2026-10-22 | Online | NICENIC | [trontrace.xyz](https://phishdestroy.io/domain/trontrace.xyz/) | 2026-10-22 | Online | NICENIC | [mars-amp12.com](https://phishdestroy.io/domain/mars-amp12.com/) | 2026-10-22 | Online | NICENIC | [fortgs.com](https://phishdestroy.io/domain/fortgs.com/) | 2026-10-22 | Unknown | NICENIC | [guncelink-resmitr.com](https://phishdestroy.io/domain/guncelink-resmitr.com/) | 2026-10-22 | Online | NICENIC | [getbze.info](https://phishdestroy.io/domain/getbze.info/) | 2026-10-22 | Online | NICENIC | [pay-bitrefill.com-gift-esim-aj04.com](https://phishdestroy.io/domain/pay-bitrefill.com-gift-esim-aj04.com/) | 2026-10-22 | Online | NICENIC | [nexo-claim.top](https://phishdestroy.io/domain/nexo-claim.top/) | 2026-10-22 | Online | NICENIC | [nexo-claim.sbs](https://phishdestroy.io/domain/nexo-claim.sbs/) | 2026-10-22 | Online | NICENIC | [bitrefill.com-gift-esim-af04.com](https://phishdestroy.io/domain/bitrefill.com-gift-esim-af04.com/) | 2026-10-22 | Online | NICENIC | [pay-bitrefill.com-gift-esim-ae04.com](https://phishdestroy.io/domain/pay-bitrefill.com-gift-esim-ae04.com/) | 2026-10-22 | Online | NICENIC | [bitrefill.com-gift-esim-ak04.com](https://phishdestroy.io/domain/bitrefill.com-gift-esim-ak04.com/) | 2026-10-22 | Online | NICENIC | ## Related - [Registrar Scoreboard](https://phishdestroy.io/registrar-accountability/) - [Registrar risk statistics](https://phishdestroy.io/registrar-stats/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Bulletproof hosting](https://phishdestroy.io/glossary/bulletproof-hosting/) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [All registrars](https://phishdestroy.io/registrar/) Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis. Canonical: https://phishdestroy.io/registrar/nicenic/