# Sav.com, LLC — PhishDestroy Threat Report
Source: https://phishdestroy.io/domain/?registrar=Sav.com%2C+LLC
Generated: 2026-04-22T00:13:30+00:00

## Registrar profile
Brand: Sav
IANA ID: 609
Country: US
Founded: 2019
Website: https://sav.com

## Threat statistics
- Flagged phishing domains in PhishDestroy DB: 448
- Still alive (not yet taken down): 20 (4.5%)
- Taken down: 412
- VirusTotal-detected: 436 (97.3% detection rate)
- Avg VT detections (non-zero): 8.8
- High-confidence threats (VT ≥ 5): 284
- First flagged: 2025-07-12 10:58:28
- Last flagged: 2026-04-20 15:12:44
- Total domains under registrar (NetAPI): 974,606
- PhishDestroy share of registrar portfolio: 0.046%

## Sample flagged domains (top 50 by VT detections)
- garbeado.click  [VT:27, status:dead]  → https://phishdestroy.io/domain/garbeado.click/
- flamita.click  [VT:24, status:dead]  → https://phishdestroy.io/domain/flamita.click/
- phantom-backup.com  [VT:23, status:alive]  → https://phishdestroy.io/domain/phantom-backup.com/
- gbwhata.app  [VT:22, status:dead]  → https://phishdestroy.io/domain/gbwhata.app/
- eat.ru.com  [VT:21, status:dead]  → https://phishdestroy.io/domain/eat.ru.com/
- lago.click  [VT:21, status:dead]  → https://phishdestroy.io/domain/lago.click/
- location-appl-mape.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/location-appl-mape.com/
- music-premiumpay.com  [VT:20, status:dead]  → https://phishdestroy.io/domain/music-premiumpay.com/
- sabreno.digital  [VT:20, status:dead]  → https://phishdestroy.io/domain/sabreno.digital/
- saintdashboard.com  [VT:20, status:alive]  → https://phishdestroy.io/domain/saintdashboard.com/
- 049734-coinbase.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/049734-coinbase.com/
- applerastreo.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/applerastreo.com/
- delivery.dhldv.agency  [VT:19, status:dead]  → https://phishdestroy.io/domain/delivery.dhldv.agency/
- florina.digital  [VT:19, status:dead]  → https://phishdestroy.io/domain/florina.digital/
- gbwhataa.app  [VT:19, status:dead]  → https://phishdestroy.io/domain/gbwhataa.app/
- gots.specialfor.za.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/gots.specialfor.za.com/
- kraftons.specialfor.za.com  [VT:19, status:dead]  → https://phishdestroy.io/domain/kraftons.specialfor.za.com/
- buscarapple.live  [VT:18, status:dead]  → https://phishdestroy.io/domain/buscarapple.live/
- c4.xkrmec2.click  [VT:18, status:dead]  → https://phishdestroy.io/domain/c4.xkrmec2.click/
- connectwallapp.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/connectwallapp.com/
- h3.autao.ink  [VT:18, status:dead]  → https://phishdestroy.io/domain/h3.autao.ink/
- ledger-update.app  [VT:18, status:dead]  → https://phishdestroy.io/domain/ledger-update.app/
- localizadorapple.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/localizadorapple.com/
- midasx.specialfor.za.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/midasx.specialfor.za.com/
- netlink.ru.com  [VT:18, status:dead]  → https://phishdestroy.io/domain/netlink.ru.com/
- p3.etop.click  [VT:18, status:dead]  → https://phishdestroy.io/domain/p3.etop.click/
- robux.media  [VT:18, status:dead]  → https://phishdestroy.io/domain/robux.media/
- cewymd.app  [VT:17, status:dead]  → https://phishdestroy.io/domain/cewymd.app/
- find-alert-device.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/find-alert-device.click/
- find-device-alert.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/find-device-alert.click/
- getsupport-alert-location.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/getsupport-alert-location.click/
- getsupport-device.info  [VT:17, status:dead]  → https://phishdestroy.io/domain/getsupport-device.info/
- h1.auloax.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/h1.auloax.click/
- h1.olux.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/h1.olux.click/
- h1.onlineautao.ink  [VT:17, status:dead]  → https://phishdestroy.io/domain/h1.onlineautao.ink/
- h1.spendex.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/h1.spendex.click/
- h2.aulovf.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/h2.aulovf.click/
- h2.etop.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/h2.etop.click/
- locate-idevice.info  [VT:17, status:dead]  → https://phishdestroy.io/domain/locate-idevice.info/
- p1.etop.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/p1.etop.click/
- p2.etop.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/p2.etop.click/
- p2.olamna.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/p2.olamna.click/
- p2.planu.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/p2.planu.click/
- p3.okdmca.info  [VT:17, status:dead]  → https://phishdestroy.io/domain/p3.okdmca.info/
- p4.bestrabak.ink  [VT:17, status:dead]  → https://phishdestroy.io/domain/p4.bestrabak.ink/
- p4.olamna.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/p4.olamna.click/
- p5.adca.click  [VT:17, status:dead]  → https://phishdestroy.io/domain/p5.adca.click/
- rabbywallets.app  [VT:17, status:dead]  → https://phishdestroy.io/domain/rabbywallets.app/
- supports-lcloudrecovery.help  [VT:17, status:dead]  → https://phishdestroy.io/domain/supports-lcloudrecovery.help/
- aerocoin.xyz  [VT:16, status:dead]  → https://phishdestroy.io/domain/aerocoin.xyz/

## Links
- Full interactive hub: https://phishdestroy.io/domain/?registrar=Sav.com%2C+LLC
- Site-wide LLM feed: https://phishdestroy.io/llms.txt
- Report abuse / appeals: https://phishdestroy.io/appeals/