# BODIS-A (ASN: 16509) — PhishDestroy Threat Report Source: https://phishdestroy.io/domain/?registrar=BODIS-A+%28ASN%3A+16509%29 Generated: 2026-04-21T18:54:13+00:00 ## Threat statistics - Flagged phishing domains in PhishDestroy DB: 36 - Still alive (not yet taken down): 14 (38.9%) - Taken down: 21 - VirusTotal-detected: 36 (100% detection rate) - Avg VT detections (non-zero): 11.4 - High-confidence threats (VT ≥ 5): 27 - First flagged: 2025-10-11 14:41:19 - Last flagged: 2025-11-17 21:23:26 ## Sample flagged domains (top 36 by VT detections) - arb.org.airdropsalert.life [VT:18, status:dead] → https://phishdestroy.io/domain/arb.org.airdropsalert.life/ - arcium.org.airdropsalert.life [VT:17, status:dead] → https://phishdestroy.io/domain/arcium.org.airdropsalert.life/ - abstract.airdropsalert.life [VT:16, status:alive] → https://phishdestroy.io/domain/abstract.airdropsalert.life/ - coinbase.airdropsalert.life [VT:16, status:dead] → https://phishdestroy.io/domain/coinbase.airdropsalert.life/ - cornucopias.airdropsalert.life [VT:16, status:alive] → https://phishdestroy.io/domain/cornucopias.airdropsalert.life/ - flare.airdropsalert.life [VT:16, status:dead] → https://phishdestroy.io/domain/flare.airdropsalert.life/ - nodefoundation.airdropsalert.life [VT:16, status:alive] → https://phishdestroy.io/domain/nodefoundation.airdropsalert.life/ - turtlexyz.airdropsalert.life [VT:16, status:dead] → https://phishdestroy.io/domain/turtlexyz.airdropsalert.life/ - yieldbasis.airdropsalert.life [VT:16, status:dead] → https://phishdestroy.io/domain/yieldbasis.airdropsalert.life/ - zofai.io.airdropsalert.life [VT:16, status:alive] → https://phishdestroy.io/domain/zofai.io.airdropsalert.life/ - aventus.airdropsalert.life [VT:15, status:alive] → https://phishdestroy.io/domain/aventus.airdropsalert.life/ - celestia.airdropsalert.life [VT:15, status:dead] → https://phishdestroy.io/domain/celestia.airdropsalert.life/ - defillama.airdropsalert.life [VT:15, status:dead] → https://phishdestroy.io/domain/defillama.airdropsalert.life/ - klx.airdropsalert.life [VT:15, status:alive] → https://phishdestroy.io/domain/klx.airdropsalert.life/ - legiondotcc.airdropsalert.life [VT:15, status:alive] → https://phishdestroy.io/domain/legiondotcc.airdropsalert.life/ - rabbywallet.airdropsalert.life [VT:15, status:dead] → https://phishdestroy.io/domain/rabbywallet.airdropsalert.life/ - tac.org.airdropsalert.life [VT:15, status:dead] → https://phishdestroy.io/domain/tac.org.airdropsalert.life/ - turbos.airdropsalert.life [VT:15, status:dead] → https://phishdestroy.io/domain/turbos.airdropsalert.life/ - zlp.airdropsalert.life [VT:15, status:alive] → https://phishdestroy.io/domain/zlp.airdropsalert.life/ - aventus.io.airdropsalert.life [VT:14, status:alive] → https://phishdestroy.io/domain/aventus.io.airdropsalert.life/ - barterdefi.airdropsalert.life [VT:14, status:alive] → https://phishdestroy.io/domain/barterdefi.airdropsalert.life/ - node.airdropsalert.life [VT:14, status:dead] → https://phishdestroy.io/domain/node.airdropsalert.life/ - login.alphafinancebank.info [VT:12, status:dead] → https://phishdestroy.io/domain/login.alphafinancebank.info/ - nlefyzij.coinbase.page [VT:12, status:alive] → https://phishdestroy.io/domain/nlefyzij.coinbase.page/ - demo.coinbaseinfo.email [VT:10, status:parked] → https://phishdestroy.io/domain/demo.coinbaseinfo.email/ - login.coinbase.page [VT:7, status:alive] → https://phishdestroy.io/domain/login.coinbase.page/ - ww25.rewards-curvfinance.app [VT:6, status:dead] → https://phishdestroy.io/domain/ww25.rewards-curvfinance.app/ - coinbase.now [VT:4, status:alive] → https://phishdestroy.io/domain/coinbase.now/ - accounts.coinbase.page [VT:3, status:dead] → https://phishdestroy.io/domain/accounts.coinbase.page/ - login.coinbase.deal [VT:3, status:alive] → https://phishdestroy.io/domain/login.coinbase.deal/ - ttnautilus.coinbase.deal [VT:3, status:dead] → https://phishdestroy.io/domain/ttnautilus.coinbase.deal/ - wallet.coinbase.deal [VT:3, status:dead] → https://phishdestroy.io/domain/wallet.coinbase.deal/ - wallet.coinbase.page [VT:3, status:dead] → https://phishdestroy.io/domain/wallet.coinbase.page/ - login.coinbase.now [VT:2, status:dead] → https://phishdestroy.io/domain/login.coinbase.now/ - login.coinbaseinfo.email [VT:2, status:dead] → https://phishdestroy.io/domain/login.coinbaseinfo.email/ - xn--www-2y6a.cryptopunk.dev [VT:1, status:dead] → https://phishdestroy.io/domain/xn--www-2y6a.cryptopunk.dev/ ## Links - Full interactive hub: https://phishdestroy.io/domain/?registrar=BODIS-A+%28ASN%3A+16509%29 - Site-wide LLM feed: https://phishdestroy.io/llms.txt - Report abuse / appeals: https://phishdestroy.io/appeals/