Skip to domain reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

222,644
Total Tracked
216,783
VT Detected
93,073
Last Seen Active
129,571
Unavailable at Last Check
Filtered by Scam kit: Token Presale 693 results Clear filters
Fake Token Presale
HIGH THREAT

Understanding and Mitigating Fake Token Presale Threats

Fake Token Presale scams are a prevalent threat with 33 domains detected by PhishDestroy, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

693
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Token Presale scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Token Presale scams often leverage phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED and PDR Ltd. d/b/a PublicDomainRegistry.com. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like PhishDestroy.

Frequently Asked Questions

What is Fake Token Presale?
Fake Token Presale is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Token Presale?
Millions have been lost to Fake Token Presale scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Token Presale?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect phishing attempts.
What should I do if I'm a victim of Fake Token Presale?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like PhishDestroy to help prevent further incidents.
Data sourced from PhishDestroy threat intelligence database — 693 domains tracked for this threat type
Token Presale — Threat Intelligence Kit High Threat
693
Domains
504
Alive
134
Taken Down
6.5
Avg VT
72.7%
Alive Rate
99.1%
Detected
Since Jul 2025 367 domains with VT ≥ 5
Fake Token Presale 693 domains
Screenshot of groklorum.icu
groklorum.icu
12 VTActiveUnknown
Screenshot of groklorum.icu
groklorum.icu
Screenshot of kwadin.net
kwadin.net
12 VTActiveUnknown
Screenshot of kwadin.net
kwadin.net
labtoken.live
12 VTUnknownOKX
Screenshot of litltlepepe.com
litltlepepe.com
12 VTUnknownAngel Drainergenericcrypto
Screenshot of litltlepepe.com
litltlepepe.com
Screenshot of mbato.guru
mbato.guru
12 VTActiveAngel DrainerUnknown
Screenshot of mbato.guru
mbato.guru
Screenshot of moonbag-5gw.pages.dev
moonbag-5gw.pages.dev
12 VTActiveacross
Screenshot of moonbag-5gw.pages.dev
moonbag-5gw.pages.dev
Screenshot of moonbag-claim.pages.dev
moonbag-claim.pages.dev
12 VTActivecoinbase
Screenshot of moonbag-claim.pages.dev
moonbag-claim.pages.dev
Screenshot of mostgretoko.guru
mostgretoko.guru
12 VTActiveAngel DrainerUnknown
Screenshot of mostgretoko.guru
mostgretoko.guru
Screenshot of myxaiconnects.net
myxaiconnects.net
12 VTUnknownBinance
Screenshot of myxaiconnects.net
myxaiconnects.net
Screenshot of octra.run
octra.run
12 VTUnknownAngel Drainerdiscord
Screenshot of octra.run
octra.run
Screenshot of one.link
one.link
12 VTActiveApple
Screenshot of one.link
one.link
Screenshot of oojusales.com
oojusales.com
12 VTActiveUnknown
Screenshot of oojusales.com
oojusales.com
Screenshot of presale-mylingo.pages.dev
presale-mylingo.pages.dev
12 VTActiveUnknown
Screenshot of presale-mylingo.pages.dev
presale-mylingo.pages.dev
Screenshot of presale.havanaelephant.com
presale.havanaelephant.com
12 VTActiveacross
Screenshot of presale.havanaelephant.com
presale.havanaelephant.com
Screenshot of pump-presale.org
pump-presale.org
12 VTUnknownUnknown
Screenshot of pump-presale.org
pump-presale.org
Screenshot of retikclaim.web.app
retikclaim.web.app
12 VTActiveWallet Connect Abuseacross
Screenshot of retikclaim.web.app
retikclaim.web.app
Screenshot of ruviai.net
ruviai.net
12 VTUnknownUnknown
Screenshot of ruviai.net
ruviai.net
Screenshot of sfxprotocol.online
sfxprotocol.online
12 VTActiveSei
Screenshot of sfxprotocol.online
sfxprotocol.online
Screenshot of trdnetwork.info
trdnetwork.info
12 VTActivegenericcrypto
Screenshot of trdnetwork.info
trdnetwork.info
Screenshot of unilabs.finance
unilabs.finance
12 VTActiveacross
Screenshot of unilabs.finance
unilabs.finance
Screenshot of unisara.guru
unisara.guru
12 VTActiveAngel DrainerUnknown
Screenshot of unisara.guru
unisara.guru
Screenshot of xaionchain.com
xaionchain.com
12 VTActiveacross
Screenshot of xaionchain.com
xaionchain.com
Screenshot of 89324902-28.com
89324902-28.com
11 VTActiveUnknown
Screenshot of 89324902-28.com
89324902-28.com
Screenshot of aegisxrp.com
aegisxrp.com
11 VTActivecoingecko
Screenshot of aegisxrp.com
aegisxrp.com
Screenshot of alphapepe.fans
alphapepe.fans
11 VTActiveUnknown
Screenshot of alphapepe.fans
alphapepe.fans
Screenshot of baforth.guru
baforth.guru
11 VTActiveAngel DrainerUnknown
Screenshot of baforth.guru
baforth.guru
Screenshot of bullecoin.com
bullecoin.com
11 VTActiveSolana
Screenshot of bullecoin.com
bullecoin.com
Screenshot of bullzila.com
bullzila.com
11 VTUnknownAngel Drainergenericcrypto
Screenshot of bullzila.com
bullzila.com
Screenshot of cryptoallstars-hub.pages.dev
cryptoallstars-hub.pages.dev
11 VTActiveUnknown
Screenshot of cryptoallstars-hub.pages.dev
cryptoallstars-hub.pages.dev
Screenshot of cryptoallstars-reward.web.app
cryptoallstars-reward.web.app
11 VTActiveacross
Screenshot of cryptoallstars-reward.web.app
cryptoallstars-reward.web.app
Screenshot of dex-rp.live
dex-rp.live
11 VTActiveUnknown
Screenshot of dex-rp.live
dex-rp.live
goodegg-token.pages.dev
11 VTActive
Screenshot of gro38z.com
gro38z.com
11 VTActiveUnknown
Screenshot of gro38z.com
gro38z.com
Screenshot of grok12ktoken.com
grok12ktoken.com
11 VTActiveUnknown
Screenshot of grok12ktoken.com
grok12ktoken.com
Screenshot of grok49k.org
grok49k.org
11 VTActiveUnknown
Screenshot of grok49k.org
grok49k.org
Screenshot of grok54h-cointelegraph.com
grok54h-cointelegraph.com
11 VTUnknown
Screenshot of grok54h-cointelegraph.com
grok54h-cointelegraph.com
Screenshot of grok83q.icu
grok83q.icu
11 VTActivegenericcrypto
Screenshot of grok83q.icu
grok83q.icu
Screenshot of lunexnetwork-in.web.app
lunexnetwork-in.web.app
11 VTActiveUnknown
Screenshot of lunexnetwork-in.web.app
lunexnetwork-in.web.app
Screenshot of maxidoge-app.pages.dev
maxidoge-app.pages.dev
11 VTActivediscord
Screenshot of maxidoge-app.pages.dev
maxidoge-app.pages.dev
Screenshot of maxidogetoken.vip
maxidogetoken.vip
11 VTActive
Screenshot of maxidogetoken.vip
maxidogetoken.vip
Screenshot of memerreum.pages.dev
memerreum.pages.dev
11 VTActivegenericcrypto
Screenshot of memerreum.pages.dev
memerreum.pages.dev
Screenshot of pepeto-claiming.io
pepeto-claiming.io
11 VTUnknown
Screenshot of pepeto-claiming.io
pepeto-claiming.io
Screenshot of presale99bitcoin.pages.dev
presale99bitcoin.pages.dev
11 VTActiveBitcoin
Screenshot of presale99bitcoin.pages.dev
presale99bitcoin.pages.dev
Screenshot of qaddun.com
qaddun.com
11 VTActivebinance
Screenshot of qaddun.com
qaddun.com
Screenshot of rainbows.run
rainbows.run
11 VTActiveAngel Draineracross
Screenshot of rainbows.run
rainbows.run
Screenshot of retikmiown.pages.dev
retikmiown.pages.dev
11 VTActiveretik
Screenshot of retikmiown.pages.dev
retikmiown.pages.dev
Screenshot of rnbw-coiniist.co
rnbw-coiniist.co
11 VTUnknownacross
Screenshot of rnbw-coiniist.co
rnbw-coiniist.co
Screenshot of spax40r.com
spax40r.com
11 VTActiveUnknown
Screenshot of spax40r.com
spax40r.com
Screenshot of spax50b.org
spax50b.org
11 VTUnknown
Screenshot of spax50b.org
spax50b.org
Screenshot of strovumtoken.com
strovumtoken.com
11 VTActivebinance
Screenshot of strovumtoken.com
strovumtoken.com
Screenshot of subbdtoken.app
subbdtoken.app
11 VTActiverevolut
Screenshot of subbdtoken.app
subbdtoken.app
Screenshot of tetreumtoken.com
tetreumtoken.com
11 VTActiveEthereum
Screenshot of tetreumtoken.com
tetreumtoken.com
Screenshot of w13123sadas.pages.dev
w13123sadas.pages.dev
11 VTActiveTikTok
Screenshot of w13123sadas.pages.dev
w13123sadas.pages.dev
Screenshot of wallet-x.pro
wallet-x.pro
11 VTActiveUnknown
Screenshot of wallet-x.pro
wallet-x.pro
Screenshot of xa20r.net
xa20r.net
11 VTUnknown["ethereum"]
Screenshot of xa20r.net
xa20r.net
Screenshot of xa22k.com
xa22k.com
11 VTUnknownUnknown
Screenshot of xa22k.com
xa22k.com
Screenshot of xa25b.com
xa25b.com
11 VTUnknownUnknown
Screenshot of xa25b.com
xa25b.com
Screenshot of xa70b.info
xa70b.info
11 VTActivegenericcrypto
Screenshot of xa70b.info
xa70b.info
Screenshot of xa90b.net
xa90b.net
11 VTActiveUnknown
Screenshot of xa90b.net
xa90b.net
Screenshot of xa90p.net
xa90p.net
11 VTActiveethereum
Screenshot of xa90p.net
xa90p.net
Screenshot of allpresales.live
allpresales.live
10 VTActiveMetaMask
Screenshot of allpresales.live
allpresales.live
Screenshot of alphapepetokenpresale.online
alphapepetokenpresale.online
10 VTUnknown
Screenshot of alphapepetokenpresale.online
alphapepetokenpresale.online
Screenshot of bitcoinhyper.org
bitcoinhyper.org
10 VTActiveBitcoin
Screenshot of bitcoinhyper.org
bitcoinhyper.org
Screenshot of blazpay.co
blazpay.co
10 VTActiveAngel Draineracross
Screenshot of blazpay.co
blazpay.co
Screenshot of block-dag.live
block-dag.live
10 VTUnknownUnknown
Screenshot of block-dag.live
block-dag.live
Screenshot of blockdagwork.pages.dev
blockdagwork.pages.dev
10 VTActiveacross
Screenshot of blockdagwork.pages.dev
blockdagwork.pages.dev
Screenshot of btcbull-coin.pages.dev
btcbull-coin.pages.dev
10 VTActiveBitcoin
Screenshot of btcbull-coin.pages.dev
btcbull-coin.pages.dev
claim-bitcoin-hyper.pages.dev
10 VTActiveBitcoin
Screenshot of claim-retik-com.pages.dev
claim-retik-com.pages.dev
10 VTActivecoinbase
Screenshot of claim-retik-com.pages.dev
claim-retik-com.pages.dev
Screenshot of claim.snortertokn.live
claim.snortertokn.live
10 VTUnknownUnknown
Screenshot of claim.snortertokn.live
claim.snortertokn.live
claimblockdag.site
10 VTActiveBlockDAG
Screenshot of conilst.co
conilst.co
10 VTActiveacross
Screenshot of conilst.co
conilst.co
Screenshot of crudoprotocol-io.web.app
crudoprotocol-io.web.app
10 VTActiveBinance
Screenshot of crudoprotocol-io.web.app
crudoprotocol-io.web.app
Screenshot of cryptoallstars-sales.pages.dev
cryptoallstars-sales.pages.dev
10 VTActiveGoogle
Screenshot of cryptoallstars-sales.pages.dev
cryptoallstars-sales.pages.dev
Screenshot of deepsnitchal.com
deepsnitchal.com
10 VTActivegenericcrypto
Screenshot of deepsnitchal.com
deepsnitchal.com
Screenshot of eloneln.xyz
eloneln.xyz
10 VTActivebinance
Screenshot of eloneln.xyz
eloneln.xyz
Screenshot of galaxyfox-in.pages.dev
galaxyfox-in.pages.dev
10 VTActiveUnknown
Screenshot of galaxyfox-in.pages.dev
galaxyfox-in.pages.dev
goodegg-tokens.pages.dev
10 VTActiveOKX
Screenshot of gro15k.icu
gro15k.icu
10 VTActivegenericcrypto
Screenshot of gro15k.icu
gro15k.icu
Screenshot of gro37k.com
gro37k.com
10 VTActiveUnknown
Screenshot of gro37k.com
gro37k.com
Screenshot of gro39k.info
gro39k.info
10 VTActiveEthereum
Screenshot of gro39k.info
gro39k.info
Screenshot of gro47k.info
gro47k.info
10 VTActiveUnknown
Screenshot of gro47k.info
gro47k.info
gro82x.net
10 VTActive
Screenshot of gro89k-cointelegraph.com
gro89k-cointelegraph.com
10 VTActiveUnknown
Screenshot of gro89k-cointelegraph.com
gro89k-cointelegraph.com
Screenshot of gro89k-fxempire.com
gro89k-fxempire.com
10 VTActiveUnknown
Screenshot of gro89k-fxempire.com
gro89k-fxempire.com
Screenshot of grok49k-cointelegraph.com
grok49k-cointelegraph.com
10 VTActiveUnknown
Screenshot of grok49k-cointelegraph.com
grok49k-cointelegraph.com
Screenshot of grok76k-fxempire.com
grok76k-fxempire.com
10 VTActive
Screenshot of grok76k-fxempire.com
grok76k-fxempire.com
Screenshot of inqubetai-node.pages.dev
inqubetai-node.pages.dev
10 VTActiveGoogle
Screenshot of inqubetai-node.pages.dev
inqubetai-node.pages.dev
Screenshot of kiranexusreward.pro
kiranexusreward.pro
10 VTUnknownUnknown
Screenshot of kiranexusreward.pro
kiranexusreward.pro
Screenshot of litellpepe.com
litellpepe.com
10 VTUnknownAngel DrainerUnknown
Screenshot of litellpepe.com
litellpepe.com
Screenshot of littleppepe.com
littleppepe.com
10 VTActiveEthereum
Screenshot of littleppepe.com
littleppepe.com
Screenshot of littllepepe.com
littllepepe.com
10 VTActiveethereum
Screenshot of littllepepe.com
littllepepe.com
Screenshot of mpeppe-dashboard.pages.dev
mpeppe-dashboard.pages.dev
10 VTActiveacross
Screenshot of mpeppe-dashboard.pages.dev
mpeppe-dashboard.pages.dev
Screenshot of neexoraa.com
neexoraa.com
10 VTActiveApple
Screenshot of neexoraa.com
neexoraa.com
Screenshot of othersko.guru
othersko.guru
10 VTActiveAngel DrainerUnknown
Screenshot of othersko.guru
othersko.guru
Screenshot of portalbridge.app
portalbridge.app
10 VTActiveAngel DrainerUnknown
Screenshot of portalbridge.app
portalbridge.app
Screenshot of resolvetics.web.app
resolvetics.web.app
10 VTActiveacross
Screenshot of resolvetics.web.app
resolvetics.web.app
Screenshot of reward-snortertoken.com
reward-snortertoken.com
10 VTUnknownWallet Connect Abusedextools
Screenshot of reward-snortertoken.com
reward-snortertoken.com
Screenshot of sale-maxidoge.com
sale-maxidoge.com
10 VTUnknowndiscord
Screenshot of sale-maxidoge.com
sale-maxidoge.com
usdv.free.staging-site.org
10 VTActiveUnknown
« Prev 1 2 3 4 5 Next » Page 2 of 7

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
Global Vendor Sync— confirmed detections are pushed to 29 partners: