Skip to domain reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

222,644
Total Tracked
216,783
VT Detected
93,073
Last Seen Active
129,571
Unavailable at Last Check
Filtered by Scam kit: Token Presale 693 results Clear filters
Fake Token Presale
HIGH THREAT

Understanding and Mitigating Fake Token Presale Threats

Fake Token Presale scams are a prevalent threat with 33 domains detected by PhishDestroy, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

693
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Token Presale scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Token Presale scams often leverage phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED and PDR Ltd. d/b/a PublicDomainRegistry.com. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like PhishDestroy.

Frequently Asked Questions

What is Fake Token Presale?
Fake Token Presale is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Token Presale?
Millions have been lost to Fake Token Presale scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Token Presale?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect phishing attempts.
What should I do if I'm a victim of Fake Token Presale?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like PhishDestroy to help prevent further incidents.
Data sourced from PhishDestroy threat intelligence database — 693 domains tracked for this threat type
Token Presale — Threat Intelligence Kit High Threat
693
Domains
504
Alive
134
Taken Down
6.5
Avg VT
72.7%
Alive Rate
99.1%
Detected
Since Jul 2025 367 domains with VT ≥ 5
Fake Token Presale 693 domains
Screenshot of wallstreetpepe-ea2.pages.dev
wallstreetpepe-ea2.pages.dev
10 VTActivegenericcrypto
Screenshot of wallstreetpepe-ea2.pages.dev
wallstreetpepe-ea2.pages.dev
Screenshot of xa18p.com
xa18p.com
10 VTUnknownUnknown
Screenshot of xa18p.com
xa18p.com
Screenshot of xaimconnect.net
xaimconnect.net
10 VTUnknownUnknown
Screenshot of xaimconnect.net
xaimconnect.net
Screenshot of zeusai.xyz
zeusai.xyz
10 VTActivetelegram
Screenshot of zeusai.xyz
zeusai.xyz
Screenshot of apemars-claim-presale-launch-oees33-aert0ds.pages.dev
apemars-claim-presale-launch-oees33-aert0ds.pages.dev
9 VTActivecoinmarketcap
Screenshot of apemars-claim-presale-launch-oees33-aert0ds.pages.dev
apemars-claim-presale-launch-oees33-aert0ds.pages.dev
Screenshot of basedbtchyper.fun
basedbtchyper.fun
9 VTActiveUnknown
Screenshot of basedbtchyper.fun
basedbtchyper.fun
Screenshot of claim-harambe.pages.dev
claim-harambe.pages.dev
9 VTActivebinance
Screenshot of claim-harambe.pages.dev
claim-harambe.pages.dev
Screenshot of crudoprotocol-net.web.app
crudoprotocol-net.web.app
9 VTActiveWallet Connect AbuseBinance
Screenshot of crudoprotocol-net.web.app
crudoprotocol-net.web.app
Screenshot of dexrpcoin.pages.dev
dexrpcoin.pages.dev
9 VTActive
Screenshot of dexrpcoin.pages.dev
dexrpcoin.pages.dev
dlicom.xyz
9 VTActiveBase
Screenshot of gro89k.info
gro89k.info
9 VTActiveUnknown
Screenshot of gro89k.info
gro89k.info
Screenshot of grok12k.cfd
grok12k.cfd
9 VTUnknownUnknown
Screenshot of grok12k.cfd
grok12k.cfd
Screenshot of grok25h.com
grok25h.com
9 VTActiveEthereum
Screenshot of grok25h.com
grok25h.com
Screenshot of grok35k-fxempire.com
grok35k-fxempire.com
9 VTActiveacross
Screenshot of grok35k-fxempire.com
grok35k-fxempire.com
grok73k.com
9 VTUnknownUnknown
Screenshot of grokverse.net
grokverse.net
9 VTActiveUnknown
Screenshot of grokverse.net
grokverse.net
Screenshot of kadduntoken.com
kadduntoken.com
9 VTActiveUnknown
Screenshot of kadduntoken.com
kadduntoken.com
Screenshot of nx0b6we.pages.dev
nx0b6we.pages.dev
9 VTActiveGoogle
Screenshot of nx0b6we.pages.dev
nx0b6we.pages.dev
Screenshot of pepeascensionclaim.pages.dev
pepeascensionclaim.pages.dev
9 VTUnknownUnknown
Screenshot of pepeascensionclaim.pages.dev
pepeascensionclaim.pages.dev
solaxytokensclaims.pages.dev
9 VTActive
Screenshot of spaceswallet.net
spaceswallet.net
9 VTUnknownbinance
Screenshot of spaceswallet.net
spaceswallet.net
Screenshot of spax40r-fxempire.com
spax40r-fxempire.com
9 VTActiveUnknown
Screenshot of spax40r-fxempire.com
spax40r-fxempire.com
Screenshot of spx85k.com
spx85k.com
9 VTActiveFake Staking
Screenshot of spx85k.com
spx85k.com
Screenshot of xa50b.net
xa50b.net
9 VTActiveethereum
Screenshot of xa50b.net
xa50b.net
xai-portal.com
9 VTActive
Screenshot of xai-xa20r.com
xai-xa20r.com
9 VTActiveethereum
Screenshot of xai-xa20r.com
xai-xa20r.com
Screenshot of xaifusion.com
xaifusion.com
9 VTUnknown
Screenshot of xaifusion.com
xaifusion.com
Screenshot of alon.sale
alon.sale
8 VTActivebackpack
Screenshot of alon.sale
alon.sale
Screenshot of bestwalletsclaim.live
bestwalletsclaim.live
8 VTUnknownacross
Screenshot of bestwalletsclaim.live
bestwalletsclaim.live
Screenshot of bullzilila.com
bullzilila.com
8 VTActiveAngel Drainermetamask
Screenshot of bullzilila.com
bullzilila.com
Screenshot of gro39k.org
gro39k.org
8 VTActiveEthereum
Screenshot of gro39k.org
gro39k.org
grok73k-cointelegraph.com
8 VTUnknown
Screenshot of limitlesslmts.app
limitlesslmts.app
8 VTActiveAngel Drainermetamask
Screenshot of limitlesslmts.app
limitlesslmts.app
Screenshot of litlelpepe.com
litlelpepe.com
8 VTUnknownAngel Drainerethereum
Screenshot of litlelpepe.com
litlelpepe.com
Screenshot of littepepe.com
littepepe.com
8 VTActiveAngel DrainerEthereum
Screenshot of littepepe.com
littepepe.com
Screenshot of lttlepepe.com
lttlepepe.com
8 VTActiveAngel Drainerethereum
Screenshot of lttlepepe.com
lttlepepe.com
Screenshot of monoprotocol.online
monoprotocol.online
8 VTActiveethereum
Screenshot of monoprotocol.online
monoprotocol.online
Screenshot of qubeticsverification.web.app
qubeticsverification.web.app
8 VTActiveacross
Screenshot of qubeticsverification.web.app
qubeticsverification.web.app
Screenshot of spx15k.com
spx15k.com
8 VTUnknownUnknown
Screenshot of spx15k.com
spx15k.com
Screenshot of tapzi-io.xyz
tapzi-io.xyz
8 VTUnknownAngel Draineracross
Screenshot of tapzi-io.xyz
tapzi-io.xyz
Screenshot of theflockerz.pages.dev
theflockerz.pages.dev
8 VTActiveethereum
Screenshot of theflockerz.pages.dev
theflockerz.pages.dev
Screenshot of vforcecoin.com
vforcecoin.com
8 VTActiveSolana
Screenshot of vforcecoin.com
vforcecoin.com
Screenshot of www-grok-allocation.xyz
www-grok-allocation.xyz
8 VTUnknownAngel Drainercoinbase
Screenshot of www-grok-allocation.xyz
www-grok-allocation.xyz
Screenshot of xdna-dnaprotocol.com
xdna-dnaprotocol.com
8 VTActiveUnknown
Screenshot of xdna-dnaprotocol.com
xdna-dnaprotocol.com
Screenshot of apemars-in.web.app
apemars-in.web.app
7 VTActiveacross
Screenshot of apemars-in.web.app
apemars-in.web.app
Screenshot of basetoken.sale
basetoken.sale
7 VTActivebase
Screenshot of basetoken.sale
basetoken.sale
Screenshot of bestwallettoken-claim.info
bestwallettoken-claim.info
7 VTActivegenericcrypto
Screenshot of bestwallettoken-claim.info
bestwallettoken-claim.info
Screenshot of chanbnb.xyz
chanbnb.xyz
7 VTActiveacross
Screenshot of chanbnb.xyz
chanbnb.xyz
Screenshot of claims-bitcoinhyper-claim.pages.dev
claims-bitcoinhyper-claim.pages.dev
7 VTActiveBitcoin
Screenshot of claims-bitcoinhyper-claim.pages.dev
claims-bitcoinhyper-claim.pages.dev
elon-dzr.pages.dev
7 VTUnknowngenericcrypto
Screenshot of gr0k2025.com
gr0k2025.com
7 VTUnknownUnknown
Screenshot of gr0k2025.com
gr0k2025.com
Screenshot of harambeaiclaim.web.app
harambeaiclaim.web.app
7 VTActiveWallet Connect Abusegenericcrypto
Screenshot of harambeaiclaim.web.app
harambeaiclaim.web.app
Screenshot of ionichain.com
ionichain.com
7 VTUnknownAngel Draineraave
Screenshot of ionichain.com
ionichain.com
Screenshot of kvartox.com
kvartox.com
7 VTActivekvartox
Screenshot of kvartox.com
kvartox.com
Screenshot of m-pepeto.pages.dev
m-pepeto.pages.dev
7 VTActivegenericcrypto
Screenshot of m-pepeto.pages.dev
m-pepeto.pages.dev
Screenshot of magacoin.info
magacoin.info
7 VTActiveAngel DrainerUnknown
Screenshot of magacoin.info
magacoin.info
Screenshot of monproto.pages.dev
monproto.pages.dev
7 VTActive
Screenshot of monproto.pages.dev
monproto.pages.dev
Screenshot of presale-digitap.app
presale-digitap.app
7 VTActivegenericcrypto
Screenshot of presale-digitap.app
presale-digitap.app
Screenshot of solfart.io
solfart.io
7 VTActiveWallet Connect Abuseacross
Screenshot of solfart.io
solfart.io
Screenshot of spax21k.icu
spax21k.icu
7 VTUnknownUnknown
Screenshot of spax21k.icu
spax21k.icu
Screenshot of spx21k.com
spx21k.com
7 VTUnknownUnknown
Screenshot of spx21k.com
spx21k.com
Screenshot of spx80k-cointelegraph.com
spx80k-cointelegraph.com
7 VTActiveUnknown
Screenshot of spx80k-cointelegraph.com
spx80k-cointelegraph.com
Screenshot of spx98k.org
spx98k.org
7 VTActiveUnknown
Screenshot of spx98k.org
spx98k.org
Screenshot of svardin.net
svardin.net
7 VTActiveUnknown
Screenshot of svardin.net
svardin.net
Screenshot of xa70b.com
xa70b.com
7 VTUnknownUnknown
Screenshot of xa70b.com
xa70b.com
Screenshot of bdagnetwork.info
bdagnetwork.info
6 VTUnknowngenericcrypto
Screenshot of bdagnetwork.info
bdagnetwork.info
Screenshot of bestwallet-app.com
bestwallet-app.com
6 VTUnknownUnknown
Screenshot of bestwallet-app.com
bestwallet-app.com
Screenshot of blockdagpresalenetwork.online
blockdagpresalenetwork.online
6 VTActiveAngel DrainerBlockDAG
Screenshot of blockdagpresalenetwork.online
blockdagpresalenetwork.online
Screenshot of btcbullcoin.pages.dev
btcbullcoin.pages.dev
6 VTActiveBitcoin
Screenshot of btcbullcoin.pages.dev
btcbullcoin.pages.dev
Screenshot of defig-8sw.pages.dev
defig-8sw.pages.dev
6 VTActiveApple
Screenshot of defig-8sw.pages.dev
defig-8sw.pages.dev
Screenshot of everlodge-claimv2.pages.dev
everlodge-claimv2.pages.dev
6 VTActiveacross
Screenshot of everlodge-claimv2.pages.dev
everlodge-claimv2.pages.dev
Screenshot of gro11k.com
gro11k.com
6 VTUnknownethereum
Screenshot of gro11k.com
gro11k.com
Screenshot of gro25b-fxempire.com
gro25b-fxempire.com
6 VTActiveacross
Screenshot of gro25b-fxempire.com
gro25b-fxempire.com
Screenshot of gro34d.com
gro34d.com
6 VTActiveUnknown
Screenshot of gro34d.com
gro34d.com
Screenshot of gro47k.net
gro47k.net
6 VTUnknownEthereum
Screenshot of gro47k.net
gro47k.net
Screenshot of gro47k.org
gro47k.org
6 VTUnknownEthereum
Screenshot of gro47k.org
gro47k.org
gro82x-fxempire.com
6 VTActive
Screenshot of gro87x.com
gro87x.com
6 VTUnknownEthereum
Screenshot of gro87x.com
gro87x.com
Screenshot of gro88k.com
gro88k.com
6 VTUnknownEthereum
Screenshot of gro88k.com
gro88k.com
Screenshot of gro88k.net
gro88k.net
6 VTUnknownEthereum
Screenshot of gro88k.net
gro88k.net
Screenshot of grok49k.com
grok49k.com
6 VTActiveEthereum
Screenshot of grok49k.com
grok49k.com
grok73k.org
6 VTUnknownUnknown
grok79t.com
6 VTActiveUnknown
Screenshot of grokvitrium.org
grokvitrium.org
6 VTActiveUnknown
Screenshot of grokvitrium.org
grokvitrium.org
Screenshot of liitlpepe.com
liitlpepe.com
6 VTActiveUnknown
Screenshot of liitlpepe.com
liitlpepe.com
Screenshot of liquidchain.info
liquidchain.info
6 VTUnknownAngel Draineracross
Screenshot of liquidchain.info
liquidchain.info
Screenshot of litletlepepa.com
litletlepepa.com
6 VTActiveAngel DrainerEthereum
Screenshot of litletlepepa.com
litletlepepa.com
Screenshot of polymarketallocation.net
polymarketallocation.net
6 VTUnknownacross
Screenshot of polymarketallocation.net
polymarketallocation.net
Screenshot of port3-lkfs8.pages.dev
port3-lkfs8.pages.dev
6 VTActive
Screenshot of port3-lkfs8.pages.dev
port3-lkfs8.pages.dev
Screenshot of purchase1-blockdag-networks.pages.dev
purchase1-blockdag-networks.pages.dev
6 VTActiveacross
Screenshot of purchase1-blockdag-networks.pages.dev
purchase1-blockdag-networks.pages.dev
Screenshot of spax30t.com
spax30t.com
6 VTActivespax30t
Screenshot of spax30t.com
spax30t.com
Screenshot of spax40b-fxempire.com
spax40b-fxempire.com
6 VTActiveacross
Screenshot of spax40b-fxempire.com
spax40b-fxempire.com
Screenshot of spx21k-centurylink.com
spx21k-centurylink.com
6 VTActivebase
Screenshot of spx21k-centurylink.com
spx21k-centurylink.com
Screenshot of spx21k-fxempire.com
spx21k-fxempire.com
6 VTUnknownUnknown
Screenshot of spx21k-fxempire.com
spx21k-fxempire.com
Screenshot of spx23h.com
spx23h.com
6 VTActive
Screenshot of spx23h.com
spx23h.com
Screenshot of spx40k.com
spx40k.com
6 VTActiveUnknown
Screenshot of spx40k.com
spx40k.com
Screenshot of spx40k.org
spx40k.org
6 VTActiveGoogle
Screenshot of spx40k.org
spx40k.org
Screenshot of spx45k.com
spx45k.com
6 VTActiveUnknown
Screenshot of spx45k.com
spx45k.com
Screenshot of spx80k-fxempire.com
spx80k-fxempire.com
6 VTActiveMicrosoft
Screenshot of spx80k-fxempire.com
spx80k-fxempire.com
Screenshot of spx88k.org
spx88k.org
6 VTActiveUnknown
Screenshot of spx88k.org
spx88k.org
« Prev 1 2 3 4 5 6 Next » Page 3 of 7

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
Global Vendor Sync— confirmed detections are pushed to 29 partners: