# MAT BAO CORPORATION — PhishDestroy Threat Report
Source: https://phishdestroy.io/domain/?registrar=MAT+BAO+CORPORATION
Generated: 2026-04-21T15:42:32+00:00

## Registrar profile
Brand: Mat Bao
IANA ID: 1586
Country: VN
Founded: 2002
Website: https://matbao.net

## Threat statistics
- Flagged phishing domains in PhishDestroy DB: 1,266
- Still alive (not yet taken down): 154 (12.2%)
- Taken down: 1,100
- VirusTotal-detected: 1,252 (98.9% detection rate)
- Avg VT detections (non-zero): 7.8
- High-confidence threats (VT ≥ 5): 769
- First flagged: 2025-07-10 07:11:03
- Last flagged: 2026-04-20 14:43:55
- Total domains under registrar (NetAPI): 187,022
- PhishDestroy share of registrar portfolio: 0.677%

## Sample flagged domains (top 50 by VT detections)
- accountspagemain.com  [VT:21, status:alive]  → https://phishdestroy.io/domain/accountspagemain.com/
- powemex.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/powemex.com/
- wurowex.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/wurowex.com/
- authenticate-meta.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/authenticate-meta.com/
- dofwex.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/dofwex.com/
- nodegoai.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/nodegoai.com/
- phantomairdrop.com  [VT:20, status:banned]  → https://phishdestroy.io/domain/phantomairdrop.com/
- regeln-und-vereinbarungen.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/regeln-und-vereinbarungen.com/
- elevon-payment.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/elevon-payment.com/
- germb.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/germb.com/
- neverban.cc  [VT:19, status:dead]  → https://phishdestroy.io/domain/neverban.cc/
- phantomgift.com  [VT:19, status:alive]  → https://phishdestroy.io/domain/phantomgift.com/
- phnto.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/phnto.com/
- stake10719.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/stake10719.com/
- teslaxspin.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/teslaxspin.com/
- app-magmafinance.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/app-magmafinance.com/
- begomex.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/begomex.com/
- coinmultiwallet.com  [VT:18, status:alive]  → https://phishdestroy.io/domain/coinmultiwallet.com/
- inforeserv.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/inforeserv.com/
- jegowex.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/jegowex.com/
- mixwex.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/mixwex.com/
- nimowex.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/nimowex.com/
- rezomex.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/rezomex.com/
- steamcomnunlity.com  [VT:18, status:alive]  → https://phishdestroy.io/domain/steamcomnunlity.com/
- vynbro.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/vynbro.com/
- aml-confirm.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/aml-confirm.com/
- aml-safeusd.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/aml-safeusd.com/
- azewex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/azewex.com/
- bezumex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/bezumex.com/
- birowex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/birowex.com/
- booking.confirmationid-83617.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/booking.confirmationid-83617.com/
- cardmetawithcl.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/cardmetawithcl.com/
- coinpulsex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/coinpulsex.com/
- draslot.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/draslot.com/
- ewcas.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/ewcas.com/
- ezewex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/ezewex.com/
- fixowex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/fixowex.com/
- gorenex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/gorenex.com/
- guscas.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/guscas.com/
- hidowex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/hidowex.com/
- ledgerdeviceguide.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/ledgerdeviceguide.com/
- livetradescoreaxispips.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/livetradescoreaxispips.com/
- merkl-refund.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/merkl-refund.com/
- moregex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/moregex.com/
- peruvo.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/peruvo.com/
- postfinance-user-auth.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/postfinance-user-auth.com/
- rogewex.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/rogewex.com/
- safetystorage-coinbase.com  [VT:17, status:alive]  → https://phishdestroy.io/domain/safetystorage-coinbase.com/
- sicheres-update.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/sicheres-update.com/
- stackrectify.com  [VT:17, status:dead]  → https://phishdestroy.io/domain/stackrectify.com/

## Links
- Full interactive hub: https://phishdestroy.io/domain/?registrar=MAT+BAO+CORPORATION
- Site-wide LLM feed: https://phishdestroy.io/llms.txt
- Report abuse / appeals: https://phishdestroy.io/appeals/