# Amazon Registrar, Inc. — PhishDestroy Threat Report Source: https://phishdestroy.io/domain/?registrar=Amazon+Registrar%2C+Inc. Generated: 2026-06-07T03:32:05+00:00 ## Threat statistics - Flagged phishing domains in PhishDestroy DB: 375 - Still alive (not yet taken down): 78 (20.8%) - Taken down: 293 - VirusTotal-detected: 323 (86.1% detection rate) - Avg VT detections (non-zero): 7.5 - High-confidence threats (VT ≥ 5): 160 - First flagged: 2025-07-19 05:06:06 - Last flagged: 2026-06-01 17:20:26 ## Sample flagged domains (top 50 by VT detections) - accounts.bmwweb.cc [VT:22, status:dead] → https://phishdestroy.io/domain/accounts.bmwweb.cc/ - bridge-trezor.plasmic.run [VT:22, status:alive] → https://phishdestroy.io/domain/bridge-trezor.plasmic.run/ - policy-portal.dev.san.kpmgcdd-fincrime.com [VT:22, status:dead] → https://phishdestroy.io/domain/policy-portal.dev.san.kpmgcdd-fincrime.com/ - accounts.bmwweb.biz [VT:21, status:dead] → https://phishdestroy.io/domain/accounts.bmwweb.biz/ - accounts.bmwweb.systems [VT:21, status:dead] → https://phishdestroy.io/domain/accounts.bmwweb.systems/ - facebook-authentication.secure-datalink.org [VT:21, status:dead] → https://phishdestroy.io/domain/facebook-authentication.secure-datalink.org/ - maga12u.com [VT:21, status:dead] → https://phishdestroy.io/domain/maga12u.com/ - mlcrosoftonline.net [VT:21, status:dead] → https://phishdestroy.io/domain/mlcrosoftonline.net/ - accounts.bmwweb.black [VT:20, status:dead] → https://phishdestroy.io/domain/accounts.bmwweb.black/ - easybank-landing-page-rho.now.sh [VT:20, status:alive] → https://phishdestroy.io/domain/easybank-landing-page-rho.now.sh/ - magaln.com [VT:20, status:dead] → https://phishdestroy.io/domain/magaln.com/ - rogersreplay.com [VT:20, status:dead] → https://phishdestroy.io/domain/rogersreplay.com/ - senecaitjob.ca.hr-organization.com [VT:20, status:dead] → https://phishdestroy.io/domain/senecaitjob.ca.hr-organization.com/ - accounts.usnbweb.mobi [VT:19, status:alive] → https://phishdestroy.io/domain/accounts.usnbweb.mobi/ - acir.postofficeweb.com [VT:19, status:alive] → https://phishdestroy.io/domain/acir.postofficeweb.com/ - barclays-banking.net [VT:19, status:dead] → https://phishdestroy.io/domain/barclays-banking.net/ - e67vm91sgf17.trickle.host [VT:19, status:dead] → https://phishdestroy.io/domain/e67vm91sgf17.trickle.host/ - formation.pr-universe.com [VT:19, status:dead] → https://phishdestroy.io/domain/formation.pr-universe.com/ - h5.innmagalu.com [VT:19, status:alive] → https://phishdestroy.io/domain/h5.innmagalu.com/ - innmaga.com [VT:19, status:dead] → https://phishdestroy.io/domain/innmaga.com/ - it-support-group.com [VT:19, status:dead] → https://phishdestroy.io/domain/it-support-group.com/ - maga6n.com [VT:19, status:alive] → https://phishdestroy.io/domain/maga6n.com/ - s.itsupportorganization.com [VT:19, status:dead] → https://phishdestroy.io/domain/s.itsupportorganization.com/ - ahv3ctpms4e.it-support-group.com [VT:18, status:dead] → https://phishdestroy.io/domain/ahv3ctpms4e.it-support-group.com/ - amcl.now.sh [VT:18, status:dead] → https://phishdestroy.io/domain/amcl.now.sh/ - grouponedeals.com [VT:18, status:dead] → https://phishdestroy.io/domain/grouponedeals.com/ - login.onemilliondrive.com [VT:18, status:dead] → https://phishdestroy.io/domain/login.onemilliondrive.com/ - mgamt.com [VT:18, status:dead] → https://phishdestroy.io/domain/mgamt.com/ - thezombieapocolypse.com [VT:18, status:dead] → https://phishdestroy.io/domain/thezombieapocolypse.com/ - accounts.binanceuz.co [VT:17, status:dead] → https://phishdestroy.io/domain/accounts.binanceuz.co/ - accounts.marketwebb.mobi [VT:17, status:dead] → https://phishdestroy.io/domain/accounts.marketwebb.mobi/ - badging.it-support-group.com [VT:17, status:dead] → https://phishdestroy.io/domain/badging.it-support-group.com/ - celestia-dev.link [VT:17, status:dead] → https://phishdestroy.io/domain/celestia-dev.link/ - charter.it-support-group.com [VT:17, status:dead] → https://phishdestroy.io/domain/charter.it-support-group.com/ - click.pr-universe.com [VT:17, status:dead] → https://phishdestroy.io/domain/click.pr-universe.com/ - deomqvc9jyu3.trickle.host [VT:17, status:dead] → https://phishdestroy.io/domain/deomqvc9jyu3.trickle.host/ - financialalertsystem.com [VT:17, status:dead] → https://phishdestroy.io/domain/financialalertsystem.com/ - humanresources-group.com [VT:17, status:dead] → https://phishdestroy.io/domain/humanresources-group.com/ - learn.bitetea.com [VT:17, status:dead] → https://phishdestroy.io/domain/learn.bitetea.com/ - learn.c-by-bit.com [VT:17, status:dead] → https://phishdestroy.io/domain/learn.c-by-bit.com/ - learn.cbybitapp.com [VT:17, status:dead] → https://phishdestroy.io/domain/learn.cbybitapp.com/ - ledger-support-portal.com [VT:17, status:dead] → https://phishdestroy.io/domain/ledger-support-portal.com/ - magab2.com [VT:17, status:dead] → https://phishdestroy.io/domain/magab2.com/ - read.all-global-hr.com [VT:17, status:dead] → https://phishdestroy.io/domain/read.all-global-hr.com/ - tiktokhosting.net [VT:17, status:dead] → https://phishdestroy.io/domain/tiktokhosting.net/ - trusewallet.com [VT:17, status:dead] → https://phishdestroy.io/domain/trusewallet.com/ - wildcard.humanresources-group.com [VT:17, status:dead] → https://phishdestroy.io/domain/wildcard.humanresources-group.com/ - accounts.bmwweb.ac [VT:16, status:dead] → https://phishdestroy.io/domain/accounts.bmwweb.ac/ - cofensetraining.com [VT:16, status:dead] → https://phishdestroy.io/domain/cofensetraining.com/ - db.safemessaging.org [VT:16, status:dead] → https://phishdestroy.io/domain/db.safemessaging.org/ ## Links - Full interactive hub: https://phishdestroy.io/domain/?registrar=Amazon+Registrar%2C+Inc. - Site-wide LLM feed: https://phishdestroy.io/llms.txt - Report abuse / appeals: https://phishdestroy.io/appeals/