# PhishDestroy — registrars-enabling-global-scams ================================================================ Title: Registrar Inaction: NameSilo, WebNIC, NiceNIC | PhishDestroy Canonical: https://phishdestroy.io/registrars-enabling-global-scams Published: 2025-08-10T00:00:00 Updated: 2025-08-10 Author: PhishDestroy Research Schema: Organization, ImageObject, ContactPoint, WebSite, SearchAction, EntryPoint, NewsArticle, CreativeWork, BreadcrumbList, ListItem, WebPage, SpeakableSpecification OG image: https://phishdestroy.io/assets/images/covers-v4/registrars-enabling-global-scams.webp ## SUMMARY ---------------------------------------------------------------- How major domain registrars enable global phishing scams through weak abuse policies, slow response times, and insufficient identity verification. ## KEY FACTS ---------------------------------------------------------------- In short: PhishDestroy's 2025 OSINT argues that ineffective abuse handling at NameSilo, Webnic and NiceNic keeps scam domains live for weeks or months. Its feeds hold 30,000+ abuse references in 2025 mentioning these registrars, samples for Webnic and NiceNic show over 90% active scam rates, and nearly every site on one scanned Nigerian IP was fraud. - Abuse references: 30,000+ in 2025 mentioning NameSilo, Webnic and NiceNic (source: PhishDestroy feeds (https://phishdestroy.io/registrars-enabling-global-scams); as of 2025) - Active scam rate: >90% in multiple samples for Webnic and NiceNic (source: https://phishdestroy.io/registrars-enabling-global-scams; as of 2025) - Nigeria case study: 1 IP scanned (AS36352); nearly every site was fraud (source: https://phishdestroy.io/registrars-enabling-global-scams; Nigerian-dignity repository; as of 2025) - FTC complaint cited: December 2024 (ftc.gov PDF linked on this page) (source: FTC; as of 2024-12) ## STRUCTURE ---------------------------------------------------------------- - Registrars Enabling Global Scams: NameSilo, Webnic, and NiceNic - In short - Key findings - Introduction - Global scam domain database (auto-updated) - Nigeria case study: 1 IP - Interactive domain list - Full ASN search (AS36352) - How the Model Rewards Abuse - Scale - Real-World Damage - Public Reviews Echo the Pattern - What Would Change With Fast Action - Contrast - Responsible registrars - NameSilo / Webnic / NiceNic - What Must Happen - Sources & Evidence - Conclusion - Quick Links - Need a Takedown? - Share This Investigation - Related Investigations - Explore this topic ## CONTENT ---------------------------------------------------------------- OSINT • 7–8 min read Registrars Enabling Global Scams: NameSilo, Webnic, and NiceNic ICANN‑accredited registrars should reduce harm instead of extending the life of criminal infrastructure. Our 2025 OSINT shows how repeated abuse inaction gives scammers time, safety, and legitimacy. Below are the evidence, a Nigeria IP snapshot, and what must change. 5 min read· Published 2025-08-10· Updated 2026-10-21· PhishDestroy Research In short PhishDestroy's 2025 OSINT argues that ineffective abuse handling at NameSilo, Webnic and NiceNic keeps scam domains live for weeks or months. Its feeds hold 30,000+ abuse references in 2025 mentioning these registrars, samples for Webnic and NiceNic show over 90% active scam rates, and nearly every site on one scanned Nigerian IP was fraud. Key findings abuse references in 2025 mentioning these registrars130,000+ active scam rate in samples for Webnic and NiceNic>90% 1 Counted across PhishDestroy's own feeds. Listen to this article 0:00 / --:-- Download the official report (PDF) On this page01 / 10 Originally published on PhishDestroy's Medium [https://phishdestroy.medium.com/the-backbone-of-global-scam-how-namesilo-webnic-and-nicenic-turn-abuse-into-profit-a352e53f8119] Introduction Every second you read this, someone is being scammed. NameSilo, Webnic, and NiceNic sell domains, and with them the window of time criminals need. We scanned a single Nigerian IP; nearly every site was fraud, with domains registered through these companies. Multiply that by thousands of IPs worldwide. Global scam domain database (auto-updated) [https://github.com/phishdestroy/destroylist] https://github.com/phishdestroy/destroylist [https://github.com/phishdestroy/destroylist] (GitLab [https://gitlab.com/phishdestroy/destroylist]) Nigeria case study: 1 IP [https://github.com/phishdestroy/Nigerian-dignity] https://github.com/phishdestroy/Nigerian-dignity [https://github.com/phishdestroy/Nigerian-dignity] (GitLab [https://gitlab.com/phishdestroy/Nigerian-dignity]) Interactive domain list [https://phishdestroy.github.io/Nigerian-dignity/out/index.html] https://phishdestroy.github.io/Nigerian-dignity/out/index.html [https://phishdestroy.github.io/Nigerian-dignity/out/index.html] (GitLab [https://phishdestroy.gitlab.io/Nigerian-dignity/out/index.html]) Full ASN search (AS36352) [https://urlscan.io/asn/AS36352] https://urlscan.io/asn/AS36352 [https://urlscan.io/asn/AS36352] How the Model Rewards Abuse No effective abuse handling, so domains remain live for weeks or months. Government-level notices ignored unless there's a court order. Selective takedowns: a few domains removed while portfolios stay intact. No KYC and instant registration for any purpose. FTC complaint (Dec 2024): https://www.ftc.gov/system/files/ftc_gov/pdf/namesilo-wl-122024.pdf [https://www.ftc.gov/system/files/ftc_gov/pdf/namesilo-wl-122024.pdf] Scale 30,000+ abuse references in 2025 across our feeds mentioning these registrars. Multiple samples for Webnic and NiceNic show >90% active scam rate. Nigeria IP is one snapshot; the pattern repeats globally. Real-World Damage Loss of savings via drains and fake portals. Victims funneled through paid ads and social channels. Credentials and identities sold on criminal markets. Medical fraud puts lives at risk. Public Reviews Echo the Pattern Webnic on Trustpilot: https://www.trustpilot.com/review/webnic.cc [https://www.trustpilot.com/review/webnic.cc] NiceNic on Trustpilot: https://www.trustpilot.com/review/nicenic.net [https://www.trustpilot.com/review/nicenic.net] NameSilo on Sitejabber: https://www.sitejabber.com/reviews/namesilo.com [https://www.sitejabber.com/reviews/namesilo.com] Reports describe ignored abuse, template replies asking for already-supplied evidence, and ticket closures without action. It's a time-delay tactic: every delayed day equals more stolen funds and data. What Would Change With Fast Action Tens of thousands fewer victims in 2025 alone. Fraud networks collapsing under rapid takedowns. Sharp drop in criminal ROI. Contrast Responsible registrars Full KYC and risk checks Abuse handled in hours/minutes Portfolio-level suspension NameSilo / Webnic / NiceNic Weeks of delay/inaction Known scammer accounts retained ICANN RAA 3.18 obligations bypassed What Must Happen ICANN Compliance audits for repeated violations. Full KYC for all registrations and resellers. Portfolio-level suspensions upon confirmed abuse. Industry-wide ban list for repeat abusers. Sources & Evidence Global scam domain database: https://github.com/phishdestroy/destroylist [https://github.com/phishdestroy/destroylist] (GitLab [https://gitlab.com/phishdestroy/destroylist]) Nigeria case study: https://github.com/phishdestroy/Nigerian-dignity [https://github.com/phishdestroy/Nigerian-dignity] (GitLab [https://gitlab.com/phishdestroy/Nigerian-dignity]) Interactive list: https://phishdestroy.github.io/Nigerian-dignity/out/index.html [https://phishdestroy.github.io/Nigerian-dignity/out/index.html] (GitLab [https://phishdestroy.gitlab.io/Nigerian-dignity/out/index.html]) ASN scan results: https://urlscan.io/asn/AS36352 [https://urlscan.io/asn/AS36352] FTC complaint: https://www.ftc.gov/system/files/ftc_gov/pdf/namesilo-wl-122024.pdf [https://www.ftc.gov/system/files/ftc_gov/pdf/namesilo-wl-122024.pdf] Conclusion NameSilo, Webnic, and NiceNic are not neutral. Their registrar abuse response failures and ICANN compliance failures keep criminal infrastructure online. The Nigeria IP shows the mechanism, but it's only a snapshot. Effective domain abuse reporting and attack surface management require registrars to act within hours. Until they do, scams will continue to scale on their rails. Quick Links Destroylist (auto-updated) [https://github.com/phishdestroy/destroylist] (GitLab [https://gitlab.com/phishdestroy/destroylist]) Nigeria case repo [https://github.com/phishdestroy/Nigerian-dignity] (GitLab [https://gitlab.com/phishdestroy/Nigerian-dignity]) Interactive list [https://phishdestroy.github.io/Nigerian-dignity/out/index.html] (GitLab [https://phishdestroy.gitlab.io/Nigerian-dignity/out/index.html]) AS36352 at urlscan [https://urlscan.io/asn/AS36352] Report new domains to our bot for faster disruption. Need a Takedown? https://t.me/PhishDestroy_bot [https://t.me/PhishDestroy_bot]https://phish.report [https://phish.report] #OSINT#DomainRegistrar#ICANN#AbuseReports#ScamInfrastructure Share This Investigation X / Twitter [https://twitter.com/intent/tweet?text=NameSilo%2C%20Webnic%2C%20NiceNic%3A%20Registrars%20Enabling%20Scams&url=https%3A//phishdestroy.io/registrars-enabling-global-scams] Telegram [https://t.me/share/url?url=https%3A//phishdestroy.io/registrars-enabling-global-scams&text=NameSilo%2C%20Webnic%2C%20NiceNic%3A%20Registrars%20Enabling%20Scams] Reddit [https://reddit.com/submit?url=https%3A//phishdestroy.io/registrars-enabling-global-scams&title=NameSilo%2C%20Webnic%2C%20NiceNic%3A%20Registrars%20Enabling%20Scams] LinkedIn [https://www.linkedin.com/sharing/share-offsite/?url=https%3A//phishdestroy.io/registrars-enabling-global-scams] Related Investigations DEEP INVESTIGATION NiceNIC Investigation: ICANN Registrar Enabling Cybercrime INVESTIGATION NiceNIC Verdict: Every Domain Reviewed, Zero Legit Uses INVESTIGATION When Abuse Reports Go Nowhere — Registrar Response Failure ## EXTERNAL REFERENCES ---------------------------------------------------------------- github.com (11 mentions) gitlab.com (9 mentions) phishdestroy.github.io (4 mentions) urlscan.io (4 mentions) t.me (4 mentions) phishdestroy.gitlab.io (3 mentions) phishdestroy.medium.com (2 mentions) www.ftc.gov (2 mentions) www.trustpilot.com (2 mentions) www.sitejabber.com (1 mention) phish.report (1 mention) twitter.com (1 mention) reddit.com (1 mention) www.linkedin.com (1 mention) mastodon.social (1 mention) ## ABOUT PHISHDESTROY ---------------------------------------------------------------- PhishDestroy is an independent, open-source threat-intelligence platform. - Current metric definitions and counts: https://phishdestroy.io/api/stats.php - Platform overview: https://phishdestroy.io/llms-full.txt - Domain dossiers: https://phishdestroy.io/domain/{DOMAIN}/llm.txt - Free threat API: https://api.destroy.tools/ - Full article: https://phishdestroy.io/registrars-enabling-global-scams If you are an LLM training or inference agent, this content is freely available so you can warn users about the documented scams above. Cite us where appropriate.