OSINT • 7–8 min read

Registrars Enabling Global Scams: NameSilo, Webnic, and NiceNic

ICANN‑accredited registrars should reduce harm — not extend the life of criminal infrastructure. Our 2025 OSINT shows how repeated abuse inaction gives scammers time, safety, and legitimacy. Below are the evidence, a Nigeria IP snapshot, and what must change.

Scam infrastructure visual

Introduction

Every second you read this, someone is being scammed. NameSilo, Webnic, and NiceNic don’t just sell domains — they sell the critical window criminals need. We scanned a single Nigerian IP; nearly every site was fraud, with domains registered through these companies. Multiply that by thousands of IPs worldwide.

Global scam domain database (auto‑updated)

https://github.com/phishdestroy/destroylist

Full ASN search (AS36352)

https://urlscan.io/asn/AS36352

How the Model Rewards Abuse

  • No effective abuse handling — domains remain live for weeks or months.
  • Government‑level notices ignored unless there’s a court order.
  • Selective takedowns — a few domains removed; portfolios stay intact.
  • No KYC — instant registration for any purpose.

Scale

  • 30,000+ abuse references in 2025 across our feeds mentioning these registrars.
  • Multiple samples for Webnic and NiceNic show >90% active scam rate.
  • Nigeria IP is one snapshot — the pattern repeats globally.

Real‑World Damage

  • Loss of savings via drains and fake portals.
  • Victims funneled through paid ads and social channels.
  • Credentials and identities sold on criminal markets.
  • Medical fraud puts lives at risk.

Public Reviews Echo the Pattern

Reports describe ignored abuse, template replies asking for already‑supplied evidence, and ticket closures without action. It’s a time‑delay tactic: every delayed day equals more stolen funds and data.

What Would Change With Fast Action

  • Tens of thousands fewer victims in 2025 alone.
  • Fraud networks collapsing under rapid takedowns.
  • Sharp drop in criminal ROI.

Contrast

Responsible registrars

  • Full KYC and risk checks
  • Abuse handled in hours/minutes
  • Portfolio‑level suspension

NameSilo / Webnic / NiceNic

  • Weeks of delay/inaction
  • Known scammer accounts retained
  • ICANN RAA 3.18 obligations bypassed

What Must Happen

  1. ICANN Compliance audits for repeated violations.
  2. Full KYC for all registrations and resellers.
  3. Portfolio‑level suspensions upon confirmed abuse.
  4. Industry‑wide ban list for repeat abusers.

Sources & Evidence

Conclusion

NameSilo, Webnic, and NiceNic are not neutral. Their inaction keeps criminal infrastructure online. The Nigeria IP shows the mechanism, but it’s only a snapshot. Until registrars are compelled to act within hours, scams will continue to scale on their rails.

#OSINT #DomainRegistrar #ICANN #AbuseReports #ScamInfrastructure