# Gandi SAS — PhishDestroy Threat Report Source: https://phishdestroy.io/domain/?registrar=Gandi+SAS Generated: 2026-06-06T19:00:46+00:00 ## Threat statistics - Flagged phishing domains in PhishDestroy DB: 289 - Still alive (not yet taken down): 40 (13.8%) - Taken down: 241 - VirusTotal-detected: 261 (90.3% detection rate) - Avg VT detections (non-zero): 10.1 - High-confidence threats (VT ≥ 5): 187 - First flagged: 2025-07-19 05:54:37 - Last flagged: 2026-06-01 17:01:50 ## Sample flagged domains (top 50 by VT detections) - radassociates.dev [VT:26, status:dead] → https://phishdestroy.io/domain/radassociates.dev/ - a-facebook.duckdns.org [VT:24, status:dead] → https://phishdestroy.io/domain/a-facebook.duckdns.org/ - bafybeifpqhyzn73oe4u5fepceonr6hbpvffuxj7vikwnwh3wkrp2v3blei.ipfs.infura-ipfs.io [VT:24, status:dead] → https://phishdestroy.io/domain/bafybeifpqhyzn73oe4u5fepceonr6hbpvffuxj7vikwnwh3wkrp2v3blei.ipfs.infura-ipfs.io/ - bafybeifo2pid4d2xyk7cc2rncpemph3kljg5ylnovhdmdvw4khoq3uzlya.ipfs.infura-ipfs.io [VT:23, status:dead] → https://phishdestroy.io/domain/bafybeifo2pid4d2xyk7cc2rncpemph3kljg5ylnovhdmdvw4khoq3uzlya.ipfs.infura-ipfs.io/ - faceb000k.duckdns.org [VT:23, status:dead] → https://phishdestroy.io/domain/faceb000k.duckdns.org/ - memberscommunitycu.dev [VT:23, status:dead] → https://phishdestroy.io/domain/memberscommunitycu.dev/ - bafybeiej3ntsxyjofgabr7fwsfnasqkcx6gfzocf2ncresca5jlzv4tkzy.ipfs.infura-ipfs.io [VT:21, status:dead] → https://phishdestroy.io/domain/bafybeiej3ntsxyjofgabr7fwsfnasqkcx6gfzocf2ncresca5jlzv4tkzy.ipfs.infura-ipfs.io/ - bafybeigbqwmxazxynaputje3qz5bp5im3grqzyqdzb3r3xb5uuzysijlt4.ipfs.infura-ipfs.io [VT:21, status:dead] → https://phishdestroy.io/domain/bafybeigbqwmxazxynaputje3qz5bp5im3grqzyqdzb3r3xb5uuzysijlt4.ipfs.infura-ipfs.io/ - dojoker.duckdns.org [VT:21, status:dead] → https://phishdestroy.io/domain/dojoker.duckdns.org/ - owa.sarbacame.com [VT:21, status:dead] → https://phishdestroy.io/domain/owa.sarbacame.com/ - sexsoldier.duckdns.org [VT:21, status:dead] → https://phishdestroy.io/domain/sexsoldier.duckdns.org/ - sso-auth.com [VT:21, status:dead] → https://phishdestroy.io/domain/sso-auth.com/ - bafkreihujo3bmunbephpn7m6jfuctzqs4s4o55rhftb3gg3gojv2csr6ue.ipfs.infura-ipfs.io [VT:20, status:dead] → https://phishdestroy.io/domain/bafkreihujo3bmunbephpn7m6jfuctzqs4s4o55rhftb3gg3gojv2csr6ue.ipfs.infura-ipfs.io/ - bafybeibednalgwbl72zf6kml3rrbyabnk2k2nxm6j3szad2lemlagypcda.ipfs.infura-ipfs.io [VT:20, status:dead] → https://phishdestroy.io/domain/bafybeibednalgwbl72zf6kml3rrbyabnk2k2nxm6j3szad2lemlagypcda.ipfs.infura-ipfs.io/ - bafybeibeooncwnjx3amo2o2swthlvsjll5hcqkjxrwslmvsydqd75ukvvy.ipfs.infura-ipfs.io [VT:20, status:dead] → https://phishdestroy.io/domain/bafybeibeooncwnjx3amo2o2swthlvsjll5hcqkjxrwslmvsydqd75ukvvy.ipfs.infura-ipfs.io/ - bafybeibiri6akaf2pabdtm6fnlk2jnkmay5v6a5kaukpfc6mttlflk6oyq.ipfs.infura-ipfs.io [VT:20, status:dead] → https://phishdestroy.io/domain/bafybeibiri6akaf2pabdtm6fnlk2jnkmay5v6a5kaukpfc6mttlflk6oyq.ipfs.infura-ipfs.io/ - bafybeid6cqpwazua4i4xa623imlmlva5jxblgcdstxtdefum6hec72lrxi.ipfs.infura-ipfs.io [VT:20, status:dead] → https://phishdestroy.io/domain/bafybeid6cqpwazua4i4xa623imlmlva5jxblgcdstxtdefum6hec72lrxi.ipfs.infura-ipfs.io/ - bafybeie7lbm2yjucacnbbj5lzuxh7hfqf6v27ohwsnzbsbxm5ikxob3pim.ipfs.infura-ipfs.io [VT:20, status:dead] → https://phishdestroy.io/domain/bafybeie7lbm2yjucacnbbj5lzuxh7hfqf6v27ohwsnzbsbxm5ikxob3pim.ipfs.infura-ipfs.io/ - authentication.ms [VT:19, status:dead] → https://phishdestroy.io/domain/authentication.ms/ - bafybeibifb3diqevxab4h4me2vdv5rtx2tprhqkyay5j3z2x4qytzn7v7e.ipfs.infura-ipfs.io [VT:19, status:dead] → https://phishdestroy.io/domain/bafybeibifb3diqevxab4h4me2vdv5rtx2tprhqkyay5j3z2x4qytzn7v7e.ipfs.infura-ipfs.io/ - bafybeie47r3tvwwvwqdmczsjgf2xir67zimzw2dyu34ck262bryr2wqvha.ipfs.infura-ipfs.io [VT:19, status:dead] → https://phishdestroy.io/domain/bafybeie47r3tvwwvwqdmczsjgf2xir67zimzw2dyu34ck262bryr2wqvha.ipfs.infura-ipfs.io/ - bafybeif3ixjydo2gj7coj7j6tkvqv76l6vp5ckpry4oknuqoucsf4hipc4.ipfs.infura-ipfs.io [VT:19, status:dead] → https://phishdestroy.io/domain/bafybeif3ixjydo2gj7coj7j6tkvqv76l6vp5ckpry4oknuqoucsf4hipc4.ipfs.infura-ipfs.io/ - bafybeigcvw6t2r4kyczarfwggvbiim2leeoluohcle76tymcvvm56tmv4i.ipfs.infura-ipfs.io [VT:19, status:dead] → https://phishdestroy.io/domain/bafybeigcvw6t2r4kyczarfwggvbiim2leeoluohcle76tymcvvm56tmv4i.ipfs.infura-ipfs.io/ - bafybeih6fxh7ch7c4wi2x2jm5m6xteqeogdynpxenl4u4p6vxotkcrruna.ipfs.infura-ipfs.io [VT:19, status:dead] → https://phishdestroy.io/domain/bafybeih6fxh7ch7c4wi2x2jm5m6xteqeogdynpxenl4u4p6vxotkcrruna.ipfs.infura-ipfs.io/ - bafybeihczcpxvywbbj5ntggfaa4tlv25atott5rwtsx2rybahshk3hr4b4.ipfs.infura-ipfs.io [VT:19, status:dead] → https://phishdestroy.io/domain/bafybeihczcpxvywbbj5ntggfaa4tlv25atott5rwtsx2rybahshk3hr4b4.ipfs.infura-ipfs.io/ - dpkg.wujialin.dpdns.org [VT:19, status:dead] → https://phishdestroy.io/domain/dpkg.wujialin.dpdns.org/ - sso-security.com [VT:19, status:dead] → https://phishdestroy.io/domain/sso-security.com/ - tihpyxninxdxaxefsxedwn.duckdns.org [VT:19, status:dead] → https://phishdestroy.io/domain/tihpyxninxdxaxefsxedwn.duckdns.org/ - wordpress.musiclol.me [VT:19, status:dead] → https://phishdestroy.io/domain/wordpress.musiclol.me/ - accounts.bmwweb.me [VT:18, status:dead] → https://phishdestroy.io/domain/accounts.bmwweb.me/ - accounts.marketwebb.me [VT:18, status:dead] → https://phishdestroy.io/domain/accounts.marketwebb.me/ - auth.properties [VT:18, status:dead] → https://phishdestroy.io/domain/auth.properties/ - bafybeibltdvhbav4rq6reiixvypvumf62rgovvrwtspb7cn3ytsfp4gzdq.ipfs.infura-ipfs.io [VT:18, status:dead] → https://phishdestroy.io/domain/bafybeibltdvhbav4rq6reiixvypvumf62rgovvrwtspb7cn3ytsfp4gzdq.ipfs.infura-ipfs.io/ - bafybeicdq67jrqh6e2u2ktpwhyrbwlyj42gwabeazmsfwszdmmqs3fflki.ipfs.infura-ipfs.io [VT:18, status:dead] → https://phishdestroy.io/domain/bafybeicdq67jrqh6e2u2ktpwhyrbwlyj42gwabeazmsfwszdmmqs3fflki.ipfs.infura-ipfs.io/ - bafybeiem2yazbjt55hoak7zgvv6sowkmbzibpk7areyxvgr6hm5gpvuldq.ipfs.infura-ipfs.io [VT:18, status:dead] → https://phishdestroy.io/domain/bafybeiem2yazbjt55hoak7zgvv6sowkmbzibpk7areyxvgr6hm5gpvuldq.ipfs.infura-ipfs.io/ - bafybeieo4yatzqc2xgn26pfjyxk6qhmvevorblcwqvk5pmivmmy254rxj4.ipfs.infura-ipfs.io [VT:18, status:dead] → https://phishdestroy.io/domain/bafybeieo4yatzqc2xgn26pfjyxk6qhmvevorblcwqvk5pmivmmy254rxj4.ipfs.infura-ipfs.io/ - bafybeiepsclswraretbhcy7gnnhw7uggq345s2utwko6uxvwofh7lslxwu.ipfs.infura-ipfs.io [VT:18, status:dead] → https://phishdestroy.io/domain/bafybeiepsclswraretbhcy7gnnhw7uggq345s2utwko6uxvwofh7lslxwu.ipfs.infura-ipfs.io/ - discord-proxy.cedcn.qzz.io [VT:18, status:banned] → https://phishdestroy.io/domain/discord-proxy.cedcn.qzz.io/ - garantifirsatlariyaninda.duckdns.org [VT:18, status:dead] → https://phishdestroy.io/domain/garantifirsatlariyaninda.duckdns.org/ - gateway.lighthouse.storage [VT:18, status:dead] → https://phishdestroy.io/domain/gateway.lighthouse.storage/ - hsbc6.cashanalytics.com [VT:18, status:dead] → https://phishdestroy.io/domain/hsbc6.cashanalytics.com/ - signin.broker [VT:18, status:dead] → https://phishdestroy.io/domain/signin.broker/ - anniversaryclaim.dpdns.org [VT:17, status:alive] → https://phishdestroy.io/domain/anniversaryclaim.dpdns.org/ - bafybeid6wkyhpgyjxckfn3mok2y6qqmbj62bcbra46cex33tlllv66onqu.ipfs.infura-ipfs.io [VT:17, status:dead] → https://phishdestroy.io/domain/bafybeid6wkyhpgyjxckfn3mok2y6qqmbj62bcbra46cex33tlllv66onqu.ipfs.infura-ipfs.io/ - bafybeieslyppdjfmmprcwy5x5q26aldivv27cnabjkzelit57mm2a3ems4.ipfs.infura-ipfs.io [VT:17, status:dead] → https://phishdestroy.io/domain/bafybeieslyppdjfmmprcwy5x5q26aldivv27cnabjkzelit57mm2a3ems4.ipfs.infura-ipfs.io/ - dewa.baaauae.com [VT:17, status:dead] → https://phishdestroy.io/domain/dewa.baaauae.com/ - loginservice.cloud [VT:17, status:dead] → https://phishdestroy.io/domain/loginservice.cloud/ - multi-factor.link [VT:17, status:dead] → https://phishdestroy.io/domain/multi-factor.link/ - random5444.duckdns.org [VT:17, status:dead] → https://phishdestroy.io/domain/random5444.duckdns.org/ - teach.link [VT:17, status:parked] → https://phishdestroy.io/domain/teach.link/ ## Links - Full interactive hub: https://phishdestroy.io/domain/?registrar=Gandi+SAS - Site-wide LLM feed: https://phishdestroy.io/llms.txt - Report abuse / appeals: https://phishdestroy.io/appeals/