Phishing sites impersonating Grab

PhishDestroy has recorded 22 phishing domains impersonating Grab since 2026-02-13, 0 of them in the last 30 days. The most used registrars are Tucows Domains and NICENIC; the most common TLDs are .app and .com. Open Grab only from its official app or a saved bookmark.

22
Domains, all time
0
Last 30 days
6
Online at last check
1
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 12026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 12026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 22026-09-01: 02026-09-02: 02026-09-03: 12026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Grab phishing domains detected per day: 5 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Grab site

Words most often added to the brand in reported domains: listed, livegrabs, fishgrab, straitsxgrab, grabway, cryptolist, viagra, buying, viagrabestbuy, grabfree.

  • Type the address yourself or use a bookmark; phishing links for Grab arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Grab does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Grab phishing domains

The 22 most recently detected domains impersonating Grab
DomainFirst detectedStatus at last checkRegistrar
eng-rabby.wasmer.app2026-09-03OfflineWasmer
solgrab.com2026-08-31OfflineMAT BAO
solgraber.com2026-08-31OfflineDominet (HK)
grabixpro.trade2026-08-07OfflineNICENIC
vzgrab.com2026-07-26OnlineNICENIC
rainbetlogin.org2026-07-15OfflineDynadot
cryptograb.io2026-07-13OnlineNAMECHEAP
crypto-grab.io2026-07-13OnlineTUCOWS.COM
suigrab.com2026-07-08UnknownNICENIC
grabway.ai-cryptolist.org2026-06-15OnlineKey-Systems
viagra-buying.com2026-06-15OfflineTrustname.com
grabfree.top2026-06-02OfflineNameSilo
viagrabestbuy.com2026-04-28Taken downTrustname.com
straitsxgrab.com2026-03-23UnknownNICENIC
listed-livegrabs51.vercel.app2026-02-26OfflineTucows Domains
listed-livegrabs22.vercel.app2026-02-26OfflineTucows Domains
listed-livegrabs38.vercel.app2026-02-26OfflineTucows Domains
listed-livegrabs31.vercel.app2026-02-26OfflineTucows Domains
listed-livegrabs13.vercel.app2026-02-26OfflineTucows Domains
listed-livegrabs35.vercel.app2026-02-26OfflineTucows Domains
xa56p.vip2026-02-13UnknownNiceNIC
fishgrab.info2026-02-13OnlineNiceNIC

All 22 Grab reports

Where they are registered and hosted

Top-level domains

  1. .app7
  2. .com7
  3. .org2
  4. .io2
  5. .info1
  6. .vip1
  7. .top1
  8. .trade1

Hosting networks

  1. Cloudflare, Inc.8
  2. Amazon.com, Inc.3
  3. AMAZON-02, US3
  4. AMAZON-02 - Amazon.com, Inc., US3
  5. CLOUDFLARENET - Cloudflare, Inc., US2
  6. AS140227 Hong Kong Communications International 1
  7. DATAFOREST dataforest GmbH, DE1
  8. Scaleway SAS1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Grab; share of all PhishDestroy reports: 0.01%.