Disclaimer - everything in this article is based on publicly available information and evidence, and is intended for educational and exposé purposes only. This site is in no way affiliated with NiceNic and is in no way impersonating or violating their intellectual property.
NiceNic - enabling cybercrime, one domain at a time
Read to learn about how NiceNic is facilitating cybercrime
Who are they?
NiceNic are a bulletproof domain registrar that have a reputation for providing services to cybercriminals, including hosting phishing sites, malware distribution sites, and other illicit activities. They have a reputation for being unresponsive to abuse reports, and even providing abuse reporters contact information WITH the bad actors.
What are they doing?
NiceNic ignores abuse reports, and even provides contact information of abuse reporters to the bad actors. This allows cybercriminals to continue their activities without fear of being shut down, and also puts abuse reporters at risk of harassment and retaliation.
1. A history of enabling cybercrime
NiceNic has a long history of enabling cybercrime. They have been repeatedly reported for hosting phishing sites, malware distribution sites, and other illicit activities. Despite these reports, NiceNic has consistently failed to take action against these sites, allowing them to continue operating and causing harm to users.
There are plenty of examples of NiceNic's involvement in cybercrime - you can see a lot of them just by looking at their reviews on Trustpilot from just 2026 alone:
2. Forwarding abuse reporter information to bad actors
In addition to ignoring abuse reports, NiceNic has been known to provide contact information of abuse reporters to the bad actors. This is a dangerous practice that puts abuse reporters at risk of harassment and retaliation. It also allows cybercriminals to continue their activities without fear of being shut down, as they can easily identify and target those who are trying to stop them. This has led to abuse reporters receiving harassing emails, phone calls, and even physical threats from the bad actors that NiceNic is enabling. Not only is this a gross violation of privacy, but it also violates GDPR and other data protection laws. This is due to the fact that GDPR requires companies to have a lawful basis to share personal information and, unless I'm mistaken, there is no lawful basis for NiceNic to share the contact information of abuse reporters with the bad actors.
3. Advertising itself as bulletproof
In it's marketing emails and messages, NiceNic openly advertises itself as a "bulletproof" registrar, which is a term used to describe registrars that are known for providing services to cybercriminals and being unresponsive to abuse reports.
They claim this is false and defamatory, but they said those words, not us. Here are some blog posts from other companies that have called them out for this:
- OWN Security: "50 Shades of Bulletproof Hosting"
- Decode Cybercrime: "NiceNIC – The Leading Bulletproof Domain Registrar Enabling Global Cybercrime"
They are even mentioned on BlackHatWorld with users asking for bulletproof registrar suggestions (See here and here).
Closing thoughts
If you are from NiceNic, I would encourage you to consider your business practices and the harm you are enabling. Don't just threaten to take this site down, actually take action to stop enabling cybercrime.