Skip to domain reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

222,644
Total Tracked
216,783
VT Detected
93,073
Last Seen Active
129,571
Unavailable at Last Check
Filtered by Scam kit: Token Presale 693 results Clear filters
Fake Token Presale
HIGH THREAT

Understanding and Mitigating Fake Token Presale Threats

Fake Token Presale scams are a prevalent threat with 33 domains detected by PhishDestroy, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

693
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Token Presale scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Token Presale scams often leverage phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED and PDR Ltd. d/b/a PublicDomainRegistry.com. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like PhishDestroy.

Frequently Asked Questions

What is Fake Token Presale?
Fake Token Presale is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Token Presale?
Millions have been lost to Fake Token Presale scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Token Presale?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect phishing attempts.
What should I do if I'm a victim of Fake Token Presale?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like PhishDestroy to help prevent further incidents.
Data sourced from PhishDestroy threat intelligence database — 693 domains tracked for this threat type
Token Presale — Threat Intelligence Kit High Threat
693
Domains
504
Alive
134
Taken Down
6.5
Avg VT
72.7%
Alive Rate
99.1%
Detected
Since Jul 2025 367 domains with VT ≥ 5
Fake Token Presale 693 domains
Screenshot of spxpresale-coinpwire.com
spxpresale-coinpwire.com
6 VTActiveacross
Screenshot of spxpresale-coinpwire.com
spxpresale-coinpwire.com
Screenshot of xai19p.com
xai19p.com
6 VTUnknownEthereum
Screenshot of xai19p.com
xai19p.com
auction-zkp.app
5 VTActiveUnknown
Screenshot of bitcoinhyper.network
bitcoinhyper.network
5 VTActiveEthereum
Screenshot of bitcoinhyper.network
bitcoinhyper.network
Screenshot of bitcoinhyper.us
bitcoinhyper.us
5 VTActiveAngel Drainermetamask
Screenshot of bitcoinhyper.us
bitcoinhyper.us
Screenshot of bitcoinhyperresolves.netlify.app
bitcoinhyperresolves.netlify.app
5 VTActiveMetaMask
Screenshot of bitcoinhyperresolves.netlify.app
bitcoinhyperresolves.netlify.app
Screenshot of blockdag-network-en.web.app
blockdag-network-en.web.app
5 VTActiveWallet Connect Abuseacross
Screenshot of blockdag-network-en.web.app
blockdag-network-en.web.app
Screenshot of blockdagnetwork.io
blockdagnetwork.io
5 VTActiveBlockDAG
Screenshot of blockdagnetwork.io
blockdagnetwork.io
Screenshot of blockdagnetwork.net
blockdagnetwork.net
5 VTActiveMetaMask
Screenshot of blockdagnetwork.net
blockdagnetwork.net
Screenshot of blockdagnetwork.web.app
blockdagnetwork.web.app
5 VTActiveacross
Screenshot of blockdagnetwork.web.app
blockdagnetwork.web.app
Screenshot of btfd.io
btfd.io
5 VTActiveUnknown
Screenshot of btfd.io
btfd.io
Screenshot of cgx.info
cgx.info
5 VTActivebinance
Screenshot of cgx.info
cgx.info
Screenshot of claim-flockerz-com.pages.dev
claim-flockerz-com.pages.dev
5 VTActivemetamask
Screenshot of claim-flockerz-com.pages.dev
claim-flockerz-com.pages.dev
Screenshot of collectfoundation.com
collectfoundation.com
5 VTActiveAngel DrainerUnknown
Screenshot of collectfoundation.com
collectfoundation.com
deelance-token.pages.dev
5 VTActive
Screenshot of flockerzclaim-5cv.pages.dev
flockerzclaim-5cv.pages.dev
5 VTActiveethereum
Screenshot of flockerzclaim-5cv.pages.dev
flockerzclaim-5cv.pages.dev
Screenshot of fulent.xyz
fulent.xyz
5 VTActivePayPal
Screenshot of fulent.xyz
fulent.xyz
Screenshot of gr0k2025.live
gr0k2025.live
5 VTUnknownUnknown
Screenshot of gr0k2025.live
gr0k2025.live
Screenshot of gr0k2025.net
gr0k2025.net
5 VTUnknownUnknown
Screenshot of gr0k2025.net
gr0k2025.net
Screenshot of gro25b-cointelegraph.com
gro25b-cointelegraph.com
5 VTUnknownacross
Screenshot of gro25b-cointelegraph.com
gro25b-cointelegraph.com
Screenshot of gro25b.com
gro25b.com
5 VTUnknownEthereum
Screenshot of gro25b.com
gro25b.com
Screenshot of gro25b.org
gro25b.org
5 VTUnknownEthereum
Screenshot of gro25b.org
gro25b.org
Screenshot of gro39k-cointelegraph.com
gro39k-cointelegraph.com
5 VTActiveUnknown
Screenshot of gro39k-cointelegraph.com
gro39k-cointelegraph.com
Screenshot of gro75k-cointelegraph.com
gro75k-cointelegraph.com
5 VTActiveUnknown
Screenshot of gro75k-cointelegraph.com
gro75k-cointelegraph.com
Screenshot of gro75k.com
gro75k.com
5 VTActiveUnknown
Screenshot of gro75k.com
gro75k.com
Screenshot of gro77z.org
gro77z.org
5 VTActivePayPal
Screenshot of gro77z.org
gro77z.org
Screenshot of grok27n.com
grok27n.com
5 VTUnknownUnknown
Screenshot of grok27n.com
grok27n.com
Screenshot of grok35k.net
grok35k.net
5 VTActiveEthereum
Screenshot of grok35k.net
grok35k.net
Screenshot of grok65glaunch.com
grok65glaunch.com
5 VTUnknownUnknown
Screenshot of grok65glaunch.com
grok65glaunch.com
Screenshot of grok65gsale.com
grok65gsale.com
5 VTUnknownUnknown
Screenshot of grok65gsale.com
grok65gsale.com
grok73k.net
5 VTUnknownUnknown
Screenshot of grok87k.net
grok87k.net
5 VTUnknownUnknown
Screenshot of grok87k.net
grok87k.net
Screenshot of grokvitrium.net
grokvitrium.net
5 VTActiveUnknown
Screenshot of grokvitrium.net
grokvitrium.net
Screenshot of ionixblockchain.com
ionixblockchain.com
5 VTUnknownBlockchain.com
Screenshot of ionixblockchain.com
ionixblockchain.com
Screenshot of kadven.pro
kadven.pro
5 VTActiveUnknown
Screenshot of kadven.pro
kadven.pro
Screenshot of layerbtcais.pages.dev
layerbtcais.pages.dev
5 VTActiveBitcoin
Screenshot of layerbtcais.pages.dev
layerbtcais.pages.dev
Screenshot of littelpepe.com
littelpepe.com
5 VTUnknownAngel Drainerethereum
Screenshot of littelpepe.com
littelpepe.com
Screenshot of littleipepe.xyz
littleipepe.xyz
5 VTUnknownUnknown
Screenshot of littleipepe.xyz
littleipepe.xyz
Screenshot of littlepepe.live
littlepepe.live
5 VTActiveethereum
Screenshot of littlepepe.live
littlepepe.live
Screenshot of meteoracheck.live
meteoracheck.live
5 VTUnknownSolana Drainercurve
Screenshot of meteoracheck.live
meteoracheck.live
Screenshot of miningmai.com
miningmai.com
5 VTActiveSolana
Screenshot of miningmai.com
miningmai.com
Screenshot of monoprotocol.live
monoprotocol.live
5 VTUnknownAngel Draineracross
Screenshot of monoprotocol.live
monoprotocol.live
Screenshot of officialmagacoin.io
officialmagacoin.io
5 VTActiveUnknown
Screenshot of officialmagacoin.io
officialmagacoin.io
Screenshot of opz-io.xyz
opz-io.xyz
5 VTUnknownAngel Draineracross
Screenshot of opz-io.xyz
opz-io.xyz
Screenshot of pepeenode-io.pages.dev
pepeenode-io.pages.dev
5 VTActivemetamask
Screenshot of pepeenode-io.pages.dev
pepeenode-io.pages.dev
Screenshot of pepeheimer-claim.pages.dev
pepeheimer-claim.pages.dev
5 VTActiveacross
Screenshot of pepeheimer-claim.pages.dev
pepeheimer-claim.pages.dev
Screenshot of peperider.com
peperider.com
5 VTActiveWallet Connect Abuseethereum
Screenshot of peperider.com
peperider.com
Screenshot of presale-jesse-9kw.pages.dev
presale-jesse-9kw.pages.dev
5 VTActivebase
Screenshot of presale-jesse-9kw.pages.dev
presale-jesse-9kw.pages.dev
Screenshot of presale-jessecoinvip.pages.dev
presale-jessecoinvip.pages.dev
5 VTActivebase
Screenshot of presale-jessecoinvip.pages.dev
presale-jessecoinvip.pages.dev
Screenshot of presale99bitcoins.pages.dev
presale99bitcoins.pages.dev
5 VTActiveBitcoin
Screenshot of presale99bitcoins.pages.dev
presale99bitcoins.pages.dev
Screenshot of presaleremittix.com
presaleremittix.com
5 VTActiveBitcoin
Screenshot of presaleremittix.com
presaleremittix.com
Screenshot of solanexai-axy.pages.dev
solanexai-axy.pages.dev
5 VTActiveethereum
Screenshot of solanexai-axy.pages.dev
solanexai-axy.pages.dev
solaxy-tokens.pages.dev
5 VTActive
Screenshot of spcx30b.com
spcx30b.com
5 VTActiveUnknown
Screenshot of spcx30b.com
spcx30b.com
Screenshot of spcx30b.net
spcx30b.net
5 VTActiveUnknown
Screenshot of spcx30b.net
spcx30b.net
Screenshot of spx30b.com
spx30b.com
5 VTActiveUnknown
Screenshot of spx30b.com
spx30b.com
Screenshot of spx99x.org
spx99x.org
5 VTUnknownUnknown
Screenshot of spx99x.org
spx99x.org
Screenshot of spxpresale-cryptoslate.com
spxpresale-cryptoslate.com
5 VTActiveacross
Screenshot of spxpresale-cryptoslate.com
spxpresale-cryptoslate.com
Screenshot of spxpresale-fxempire.com
spxpresale-fxempire.com
5 VTActiveacross
Screenshot of spxpresale-fxempire.com
spxpresale-fxempire.com
Screenshot of thetokencentral.com
thetokencentral.com
5 VTUnknown
Screenshot of thetokencentral.com
thetokencentral.com
Screenshot of vro105ry.pages.dev
vro105ry.pages.dev
5 VTActiveUnknown
Screenshot of vro105ry.pages.dev
vro105ry.pages.dev
Screenshot of wallitiqcard.com
wallitiqcard.com
5 VTActiveUnknown
Screenshot of wallitiqcard.com
wallitiqcard.com
Screenshot of wallstreetpepclaim.pages.dev
wallstreetpepclaim.pages.dev
5 VTActiveUnknown
Screenshot of wallstreetpepclaim.pages.dev
wallstreetpepclaim.pages.dev
Screenshot of wallstreetpepesale.pages.dev
wallstreetpepesale.pages.dev
5 VTActivemetamask
Screenshot of wallstreetpepesale.pages.dev
wallstreetpepesale.pages.dev
Screenshot of xa28r.org
xa28r.org
5 VTUnknownUnknown
Screenshot of xa28r.org
xa28r.org
Screenshot of xaicore.net
xaicore.net
5 VTActiveUnknown
Screenshot of xaicore.net
xaicore.net
Screenshot of zcfo2r2.pages.dev
zcfo2r2.pages.dev
5 VTActiveBinance
Screenshot of zcfo2r2.pages.dev
zcfo2r2.pages.dev
Screenshot of bdag.club
bdag.club
4 VTActiveUnknown
Screenshot of bdag.club
bdag.club
Screenshot of bestwallettoken-sales.pages.dev
bestwallettoken-sales.pages.dev
4 VTActiveacross
Screenshot of bestwallettoken-sales.pages.dev
bestwallettoken-sales.pages.dev
Screenshot of bestwallettoken.crescentnetworks.co.ke
bestwallettoken.crescentnetworks.co.ke
4 VTUnknownUnknown
Screenshot of bestwallettoken.crescentnetworks.co.ke
bestwallettoken.crescentnetworks.co.ke
Screenshot of bitcoinhypertoken-ai.web.app
bitcoinhypertoken-ai.web.app
4 VTActiveBitcoin
Screenshot of bitcoinhypertoken-ai.web.app
bitcoinhypertoken-ai.web.app
Screenshot of bitcoins-hyper.pages.dev
bitcoins-hyper.pages.dev
4 VTUnknownEthereum
Screenshot of bitcoins-hyper.pages.dev
bitcoins-hyper.pages.dev
Screenshot of bl0ckdaq.network
bl0ckdaq.network
4 VTUnknownacross
Screenshot of bl0ckdaq.network
bl0ckdaq.network
Screenshot of blastuptoken.github.io
blastuptoken.github.io
4 VTActiveBlast
Screenshot of blastuptoken.github.io
blastuptoken.github.io
blockdag-net.pages.dev
4 VTActiveUnknown
Screenshot of buy-pepeheimer.io
buy-pepeheimer.io
4 VTActiveUnknown
Screenshot of buy-pepeheimer.io
buy-pepeheimer.io
Screenshot of claim.lilpepetoken.dev
claim.lilpepetoken.dev
4 VTActiveWallet Connect AbuseEthereum
Screenshot of claim.lilpepetoken.dev
claim.lilpepetoken.dev
Screenshot of claimflockerz.pages.dev
claimflockerz.pages.dev
4 VTActiveEthereum
Screenshot of claimflockerz.pages.dev
claimflockerz.pages.dev
Screenshot of cloudflare-frontend-9xj.pages.dev
cloudflare-frontend-9xj.pages.dev
4 VTActiveSolana
Screenshot of cloudflare-frontend-9xj.pages.dev
cloudflare-frontend-9xj.pages.dev
Screenshot of cysicpresale.xyz
cysicpresale.xyz
4 VTUnknownacross
Screenshot of cysicpresale.xyz
cysicpresale.xyz
Screenshot of dep48k.com
dep48k.com
4 VTUnknownethereum
Screenshot of dep48k.com
dep48k.com
Screenshot of dep48k.net
dep48k.net
4 VTUnknown
Screenshot of dep48k.net
dep48k.net
Screenshot of donk-meme.pages.dev
donk-meme.pages.dev
4 VTActivebinance
Screenshot of donk-meme.pages.dev
donk-meme.pages.dev
Screenshot of flockerz-dh1.pages.dev
flockerz-dh1.pages.dev
4 VTActiveUnknown
Screenshot of flockerz-dh1.pages.dev
flockerz-dh1.pages.dev
flockerztokenclaim.pages.dev
4 VTActiveMetaMask
god-cio.pages.dev
4 VTActive
Screenshot of gro25b.net
gro25b.net
4 VTUnknownEthereum
Screenshot of gro25b.net
gro25b.net
Screenshot of gro31q.com
gro31q.com
4 VTActiveethereum
Screenshot of gro31q.com
gro31q.com
Screenshot of gro75k.info
gro75k.info
4 VTActiveEthereum
Screenshot of gro75k.info
gro75k.info
Screenshot of gro75k.org
gro75k.org
4 VTActiveEthereum
Screenshot of gro75k.org
gro75k.org
Screenshot of gro79a.com
gro79a.com
4 VTActiveethereum
Screenshot of gro79a.com
gro79a.com
Screenshot of grok20g.net
grok20g.net
4 VTUnknownUnknown
Screenshot of grok20g.net
grok20g.net
Screenshot of grok25h-fxempire.com
grok25h-fxempire.com
4 VTActiveUnknown
Screenshot of grok25h-fxempire.com
grok25h-fxempire.com
Screenshot of grok35k-cointelegraph.com
grok35k-cointelegraph.com
4 VTUnknownacross
Screenshot of grok35k-cointelegraph.com
grok35k-cointelegraph.com
Screenshot of grok35k.com
grok35k.com
4 VTActiveEthereum
Screenshot of grok35k.com
grok35k.com
Screenshot of grok49k-fxempire.com
grok49k-fxempire.com
4 VTActiveUnknown
Screenshot of grok49k-fxempire.com
grok49k-fxempire.com
Screenshot of grok49k.net
grok49k.net
4 VTActiveEthereum
Screenshot of grok49k.net
grok49k.net
Screenshot of grok87k-fxempire.com
grok87k-fxempire.com
4 VTUnknownUnknown
Screenshot of grok87k-fxempire.com
grok87k-fxempire.com
Screenshot of groknetwork.net
groknetwork.net
4 VTUnknownUnknown
Screenshot of groknetwork.net
groknetwork.net
Screenshot of helioschain.net
helioschain.net
4 VTUnknownAngel Drainer
Screenshot of helioschain.net
helioschain.net
« Prev 1 2 3 4 5 6 7 Next » Page 4 of 7

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
Global Vendor Sync— confirmed detections are pushed to 29 partners: