Skip to domain reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

222,644
Total Tracked
216,783
VT Detected
93,073
Last Seen Active
129,571
Unavailable at Last Check
Filtered by Scam kit: Token Presale 693 results Clear filters
Fake Token Presale
HIGH THREAT

Understanding and Mitigating Fake Token Presale Threats

Fake Token Presale scams are a prevalent threat with 33 domains detected by PhishDestroy, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

693
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Token Presale scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Token Presale scams often leverage phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED and PDR Ltd. d/b/a PublicDomainRegistry.com. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like PhishDestroy.

Frequently Asked Questions

What is Fake Token Presale?
Fake Token Presale is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Token Presale?
Millions have been lost to Fake Token Presale scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Token Presale?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect phishing attempts.
What should I do if I'm a victim of Fake Token Presale?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like PhishDestroy to help prevent further incidents.
Data sourced from PhishDestroy threat intelligence database — 693 domains tracked for this threat type
Token Presale — Threat Intelligence Kit High Threat
693
Domains
504
Alive
134
Taken Down
6.5
Avg VT
72.7%
Alive Rate
99.1%
Detected
Since Jul 2025 367 domains with VT ≥ 5
Fake Token Presale 693 domains
Screenshot of binance-dep30h.com
binance-dep30h.com
23 VTUnknownBinance
Screenshot of binance-dep30h.com
binance-dep30h.com
Screenshot of bitcoinhyper.connect-portal.live
bitcoinhyper.connect-portal.live
17 VTActiveBitcoin
Screenshot of bitcoinhyper.connect-portal.live
bitcoinhyper.connect-portal.live
Screenshot of dreamsmart.pl
dreamsmart.pl
17 VTUnknownAngel Drainer
Screenshot of dreamsmart.pl
dreamsmart.pl
Screenshot of liquidchains.info
liquidchains.info
17 VTUnknownAngel Draineracross
Screenshot of liquidchains.info
liquidchains.info
Screenshot of xdnaprotocol.com
xdnaprotocol.com
17 VTActive
Screenshot of xdnaprotocol.com
xdnaprotocol.com
Screenshot of claims-bitcoinhyper.com
claims-bitcoinhyper.com
16 VTUnknownAngel DrainerEthereum
Screenshot of claims-bitcoinhyper.com
claims-bitcoinhyper.com
Screenshot of coiniist-rainbow.xyz
coiniist-rainbow.xyz
16 VTUnknownAngel Draineracross
Screenshot of coiniist-rainbow.xyz
coiniist-rainbow.xyz
Screenshot of llittlepepe.com
llittlepepe.com
16 VTUnknownAngel Drainergenericcrypto
Screenshot of llittlepepe.com
llittlepepe.com
Screenshot of pepeheimer.io
pepeheimer.io
16 VTActiveWallet Connect AbuseUnknown
Screenshot of pepeheimer.io
pepeheimer.io
Screenshot of spcx-network.com
spcx-network.com
16 VTActivebinance
Screenshot of spcx-network.com
spcx-network.com
Screenshot of test-023492023.com
test-023492023.com
16 VTActiveUnknown
Screenshot of test-023492023.com
test-023492023.com
Screenshot of agaricproku.com
agaricproku.com
15 VTUnknown
Screenshot of agaricproku.com
agaricproku.com
Screenshot of blockchainfx.world
blockchainfx.world
15 VTActiveBlockchain.com
Screenshot of blockchainfx.world
blockchainfx.world
Screenshot of blockdag-network-miners.pages.dev
blockdag-network-miners.pages.dev
15 VTActiveacross
Screenshot of blockdag-network-miners.pages.dev
blockdag-network-miners.pages.dev
Screenshot of claim-basedawgz.pages.dev
claim-basedawgz.pages.dev
15 VTActiveBase
Screenshot of claim-basedawgz.pages.dev
claim-basedawgz.pages.dev
Screenshot of claims-snortertoken.com
claims-snortertoken.com
15 VTUnknownWallet Connect Abusedextools
Screenshot of claims-snortertoken.com
claims-snortertoken.com
Screenshot of deepsnitchs-ai.claims
deepsnitchs-ai.claims
15 VTActivebase
Screenshot of deepsnitchs-ai.claims
deepsnitchs-ai.claims
Screenshot of grok18k.info
grok18k.info
15 VTUnknownUnknown
Screenshot of grok18k.info
grok18k.info
Screenshot of grok33k.info
grok33k.info
15 VTUnknownUnknown
Screenshot of grok33k.info
grok33k.info
Screenshot of grokvarum.com
grokvarum.com
15 VTActivebinance
Screenshot of grokvarum.com
grokvarum.com
Screenshot of grokvitrium.com
grokvitrium.com
15 VTActiveUnknown
Screenshot of grokvitrium.com
grokvitrium.com
Screenshot of hotoj.guru
hotoj.guru
15 VTActiveAngel DrainerUnknown
Screenshot of hotoj.guru
hotoj.guru
Screenshot of lunexnetwork.com
lunexnetwork.com
15 VTActiveWallet Connect Abuserevolut
Screenshot of lunexnetwork.com
lunexnetwork.com
Screenshot of moonbagorg.pages.dev
moonbagorg.pages.dev
15 VTActiveacross
Screenshot of moonbagorg.pages.dev
moonbagorg.pages.dev
Screenshot of murad-presale.com
murad-presale.com
15 VTActiveUnknown
Screenshot of murad-presale.com
murad-presale.com
Screenshot of presales-monprotocolapp.pages.dev
presales-monprotocolapp.pages.dev
15 VTActiveUnknown
Screenshot of presales-monprotocolapp.pages.dev
presales-monprotocolapp.pages.dev
Screenshot of prizelink.net
prizelink.net
15 VTUnknown
Screenshot of prizelink.net
prizelink.net
Screenshot of spx88k.com
spx88k.com
15 VTUnknownUnknown
Screenshot of spx88k.com
spx88k.com
Screenshot of xa60zlaunch.com
xa60zlaunch.com
15 VTUnknownEthereum
Screenshot of xa60zlaunch.com
xa60zlaunch.com
Screenshot of xa909k.com
xa909k.com
15 VTUnknownUnknown
Screenshot of xa909k.com
xa909k.com
Screenshot of basedawgz.pages.dev
basedawgz.pages.dev
14 VTActiveBase
Screenshot of basedawgz.pages.dev
basedawgz.pages.dev
Screenshot of blazpay.org
blazpay.org
14 VTUnknownAngel Draineracross
Screenshot of blazpay.org
blazpay.org
Screenshot of claimmoonbag.pages.dev
claimmoonbag.pages.dev
14 VTActive
Screenshot of claimmoonbag.pages.dev
claimmoonbag.pages.dev
Screenshot of coinlist-rainbow.xyz
coinlist-rainbow.xyz
14 VTUnknownAngel Drainergenericcrypto
Screenshot of coinlist-rainbow.xyz
coinlist-rainbow.xyz
Screenshot of cryptoallstars-claimslive.pages.dev
cryptoallstars-claimslive.pages.dev
14 VTActiveacross
Screenshot of cryptoallstars-claimslive.pages.dev
cryptoallstars-claimslive.pages.dev
Screenshot of dep29k-binance.com
dep29k-binance.com
14 VTUnknownBinance
Screenshot of dep29k-binance.com
dep29k-binance.com
Screenshot of evidizayn.com
evidizayn.com
14 VTActiveBitcoin
Screenshot of evidizayn.com
evidizayn.com
Screenshot of grok44k.digital
grok44k.digital
14 VTUnknownUnknown
Screenshot of grok44k.digital
grok44k.digital
Screenshot of littlepepesite.pro
littlepepesite.pro
14 VTUnknownAngel DrainerUnknown
Screenshot of littlepepesite.pro
littlepepesite.pro
Screenshot of monoprotocol.info
monoprotocol.info
14 VTUnknownAngel Draineracross
Screenshot of monoprotocol.info
monoprotocol.info
Screenshot of presale-99bitcoins.pages.dev
presale-99bitcoins.pages.dev
14 VTActiveBitcoin
Screenshot of presale-99bitcoins.pages.dev
presale-99bitcoins.pages.dev
Screenshot of presale-sat0.com
presale-sat0.com
14 VTActivesato
Screenshot of presale-sat0.com
presale-sat0.com
Screenshot of retik-finance-io.pages.dev
retik-finance-io.pages.dev
14 VTActiveretik
Screenshot of retik-finance-io.pages.dev
retik-finance-io.pages.dev
Screenshot of snorterbotclaim.pages.dev
snorterbotclaim.pages.dev
14 VTActivedextools
Screenshot of snorterbotclaim.pages.dev
snorterbotclaim.pages.dev
Screenshot of sonami-so.info
sonami-so.info
14 VTActiveAngel Drainersolana
Screenshot of sonami-so.info
sonami-so.info
Screenshot of spx66x.com
spx66x.com
14 VTActiveUnknown
Screenshot of spx66x.com
spx66x.com
Screenshot of spx88k-centurylink.com
spx88k-centurylink.com
14 VTActiveUnknown
Screenshot of spx88k-centurylink.com
spx88k-centurylink.com
Screenshot of spx88k-fxempire.com
spx88k-fxempire.com
14 VTActiveUnknown
Screenshot of spx88k-fxempire.com
spx88k-fxempire.com
Screenshot of spx98k.com
spx98k.com
14 VTActiveUnknown
Screenshot of spx98k.com
spx98k.com
Screenshot of thecrito.guru
thecrito.guru
14 VTActiveAngel DrainerUnknown
Screenshot of thecrito.guru
thecrito.guru
Screenshot of timwarrencoin.io
timwarrencoin.io
14 VTActiveAngel DrainerUnknown
Screenshot of timwarrencoin.io
timwarrencoin.io
Screenshot of xa20r.com
xa20r.com
14 VTActivegenericcrypto
Screenshot of xa20r.com
xa20r.com
Screenshot of xa40p.net
xa40p.net
14 VTUnknownUnknown
Screenshot of xa40p.net
xa40p.net
Screenshot of xa500k.com
xa500k.com
14 VTUnknownUnknown
Screenshot of xa500k.com
xa500k.com
Screenshot of xa60r.com
xa60r.com
14 VTUnknownUnknown
Screenshot of xa60r.com
xa60r.com
xa90p.com
14 VTActive
Screenshot of xa90p.org
xa90p.org
14 VTActivegenericcrypto
Screenshot of xa90p.org
xa90p.org
Screenshot of zama.sale
zama.sale
14 VTUnknownbinance
Screenshot of zama.sale
zama.sale
Screenshot of 003-bca.net
003-bca.net
13 VTUnknownAngel DrainerApple
Screenshot of 003-bca.net
003-bca.net
Screenshot of appie.shop
appie.shop
13 VTActiveApple
Screenshot of appie.shop
appie.shop
Screenshot of basedawgz-ae.pages.dev
basedawgz-ae.pages.dev
13 VTActiveBase
Screenshot of basedawgz-ae.pages.dev
basedawgz-ae.pages.dev
Screenshot of basedawgz-app.pages.dev
basedawgz-app.pages.dev
13 VTActiveBase
Screenshot of basedawgz-app.pages.dev
basedawgz-app.pages.dev
Screenshot of bestwalletnow.com
bestwalletnow.com
13 VTActivegenericcrypto
Screenshot of bestwalletnow.com
bestwalletnow.com
Screenshot of btchyperapp.pages.dev
btchyperapp.pages.dev
13 VTActiveMetaMask
Screenshot of btchyperapp.pages.dev
btchyperapp.pages.dev
Screenshot of claim-cryptoallstars-cco.pages.dev
claim-cryptoallstars-cco.pages.dev
13 VTActive["revolut"]
Screenshot of claim-cryptoallstars-cco.pages.dev
claim-cryptoallstars-cco.pages.dev
Screenshot of claim-jindocoin.pages.dev
claim-jindocoin.pages.dev
13 VTActiveblast
Screenshot of claim-jindocoin.pages.dev
claim-jindocoin.pages.dev
claim-solaxytoken-io.pages.dev
13 VTActive
Screenshot of cradwin.com
cradwin.com
13 VTUnknownbinance
Screenshot of cradwin.com
cradwin.com
Screenshot of dashboard-bestwallet.firebaseapp.com
dashboard-bestwallet.firebaseapp.com
13 VTActiveWallet Connect Abuseacross
Screenshot of dashboard-bestwallet.firebaseapp.com
dashboard-bestwallet.firebaseapp.com
Screenshot of dep26k-binance.com
dep26k-binance.com
13 VTUnknownBinance
Screenshot of dep26k-binance.com
dep26k-binance.com
Screenshot of getretiksale.pages.dev
getretiksale.pages.dev
13 VTActiveacross
Screenshot of getretiksale.pages.dev
getretiksale.pages.dev
Screenshot of gro82x.org
gro82x.org
13 VTActiveUnknown
Screenshot of gro82x.org
gro82x.org
Screenshot of grok82c-cointelegraph.com
grok82c-cointelegraph.com
13 VTUnknownacross
Screenshot of grok82c-cointelegraph.com
grok82c-cointelegraph.com
Screenshot of grok87k-cointelegraph.com
grok87k-cointelegraph.com
13 VTUnknownUnknown
Screenshot of grok87k-cointelegraph.com
grok87k-cointelegraph.com
Screenshot of grok87k.com
grok87k.com
13 VTUnknownUnknown
Screenshot of grok87k.com
grok87k.com
Screenshot of invest-xai.com
invest-xai.com
13 VTActiveUnknown
Screenshot of invest-xai.com
invest-xai.com
Screenshot of moonbull.io
moonbull.io
13 VTActivecelestia
Screenshot of moonbull.io
moonbull.io
Screenshot of mpeppe-live.pages.dev
mpeppe-live.pages.dev
13 VTActiveacross
Screenshot of mpeppe-live.pages.dev
mpeppe-live.pages.dev
Screenshot of myxaicoin.pages.dev
myxaicoin.pages.dev
13 VTUnknowncryptoscam
Screenshot of myxaicoin.pages.dev
myxaicoin.pages.dev
Screenshot of pepeheimer-claim.com
pepeheimer-claim.com
13 VTUnknownSolana Drainer1inch
Screenshot of pepeheimer-claim.com
pepeheimer-claim.com
Screenshot of pepeheimer-claimlives.pages.dev
pepeheimer-claimlives.pages.dev
13 VTActiveUnknown
Screenshot of pepeheimer-claimlives.pages.dev
pepeheimer-claimlives.pages.dev
Screenshot of purchase2-blockdags-networks.pages.dev
purchase2-blockdags-networks.pages.dev
13 VTUnknownacross
Screenshot of purchase2-blockdags-networks.pages.dev
purchase2-blockdags-networks.pages.dev
Screenshot of ripplecareer.com
ripplecareer.com
13 VTUnknownXRP
Screenshot of ripplecareer.com
ripplecareer.com
Screenshot of spx40k.net
spx40k.net
13 VTActiveUnknown
Screenshot of spx40k.net
spx40k.net
Screenshot of spx80k.com
spx80k.com
13 VTActiveUnknown
Screenshot of spx80k.com
spx80k.com
Screenshot of wallstreetpepe-online-d3n.pages.dev
wallstreetpepe-online-d3n.pages.dev
13 VTActiveUnknown
Screenshot of wallstreetpepe-online-d3n.pages.dev
wallstreetpepe-online-d3n.pages.dev
xa900k.com
13 VTActiveUnknown
Screenshot of xa98b.net
xa98b.net
13 VTUnknownUnknown
Screenshot of xa98b.net
xa98b.net
app-snortertoken.pages.dev
12 VTUnknownOKX
Screenshot of best-wallettoken.com
best-wallettoken.com
12 VTUnknownWallet Connect Abuseacross
Screenshot of best-wallettoken.com
best-wallettoken.com
Screenshot of blockdag-server.web.app
blockdag-server.web.app
12 VTActiveBlockDAG
Screenshot of blockdag-server.web.app
blockdag-server.web.app
Screenshot of btcbullsapp.pages.dev
btcbullsapp.pages.dev
12 VTActiveBitcoin
Screenshot of btcbullsapp.pages.dev
btcbullsapp.pages.dev
claim-asentum.live
12 VTActiveUnknown
Screenshot of claim-pepenode.io
claim-pepenode.io
12 VTUnknownMetaMask
Screenshot of claim-pepenode.io
claim-pepenode.io
claim-snortertoken.live
12 VTActiveUnknown
Screenshot of colnilst.co
colnilst.co
12 VTActiveUnknown
Screenshot of colnilst.co
colnilst.co
Screenshot of cryptoallstarsio-sale.pages.dev
cryptoallstarsio-sale.pages.dev
12 VTActiveacross
Screenshot of cryptoallstarsio-sale.pages.dev
cryptoallstarsio-sale.pages.dev
Screenshot of debraleslie.com
debraleslie.com
12 VTActiveApple
Screenshot of debraleslie.com
debraleslie.com
Screenshot of gro34d-cointelegraph.com
gro34d-cointelegraph.com
12 VTActiveUnknown
Screenshot of gro34d-cointelegraph.com
gro34d-cointelegraph.com
Screenshot of grokai-network.net
grokai-network.net
12 VTActiveUnknown
Screenshot of grokai-network.net
grokai-network.net
1 2 3 4 Next » Page 1 of 7

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
Global Vendor Sync— confirmed detections are pushed to 29 partners: