Skip to domain reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

222,644
Total Tracked
216,784
VT Detected
93,073
Last Seen Active
129,571
Unavailable at Last Check
Filtered by Scam kit: Token Presale 693 results Clear filters
Fake Token Presale
HIGH THREAT

Understanding and Mitigating Fake Token Presale Threats

Fake Token Presale scams are a prevalent threat with 33 domains detected by PhishDestroy, 13 of which are currently active. Top TLDs include .com, .xyz, and .co.

693
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Token Presale scams trick victims into believing they are investing in legitimate cryptocurrency projects. Here's how the scam typically unfolds:

STEP 1
Create Fake Websites
Scammers set up realistic-looking websites mimicking legitimate token presale portals.
STEP 2
Promote Presale on Social Media
Using social media and fake endorsements, scammers attract potential investors.
STEP 3
Collect Cryptocurrency
Victims are prompted to send cryptocurrency to a specified address under the guise of buying tokens.
STEP 4
Disappear with Funds
Once funds are collected, scammers shut down the site and disappear, leaving victims without recourse.

Technical Analysis

Fake Token Presale scams often leverage phishing tactics combined with cryptocurrency-specific techniques. Attackers use homograph attacks to create URLs that closely resemble legitimate sites, often registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED and PDR Ltd. d/b/a PublicDomainRegistry.com. They exploit the decentralized nature of blockchain networks, utilizing smart contracts that mimic legitimate presale contracts but are programmed to divert funds to the attacker’s wallet. The infrastructure often involves cloud-based hosting services to quickly deploy and dismantle sites, minimizing the chance of detection. HTML and JavaScript are commonly used to create dynamic, convincing interfaces that reassure potential victims of the site’s legitimacy. Additionally, attackers might deploy SEO techniques to improve the visibility of their fraudulent sites in search engine results, further increasing their reach.

Real Cases

CryptoX Presale Scam (2024)
$2 million stolen
A fake presale for a non-existent token, CryptoX, duped investors into contributing significant sums.
TokenLaunch Fraud (2023)
$1.5 million stolen
Victims were lured into a fake token launch with promises of high returns, only for the site to vanish post-collection.
QuickCoin Deception (2024)
$3 million stolen
Scammers created a sophisticated site mimicking a known exchange, leading to substantial financial losses.

How to Detect

Check for slight misspellings in domain names.
Look for inconsistent branding or layout compared to legitimate sites.
Be wary of unsolicited investment opportunities via social media.
Verify presale details on official project channels.
Beware of high-pressure tactics urging immediate investment.

How to Protect Yourself

1 Always verify URLs before entering personal information.
2 Use browser extensions to detect phishing attempts.
3 Consult official project websites or channels for presale information.
4 Enable two-factor authentication on cryptocurrency exchanges.
5 Report suspicious sites to authorities and platforms like PhishDestroy.

Frequently Asked Questions

What is Fake Token Presale?
Fake Token Presale is a scam where attackers create fraudulent cryptocurrency presale websites to deceive investors into sending funds for non-existent tokens.
How much money has been stolen through Fake Token Presale?
Millions have been lost to Fake Token Presale scams, with documented cases like CryptoX and QuickCoin resulting in over $6 million in damages.
How do I protect myself from Fake Token Presale?
Verify presale details on official channels, scrutinize website URLs for discrepancies, and use security tools to detect phishing attempts.
What should I do if I'm a victim of Fake Token Presale?
Report the scam to law enforcement, notify your cryptocurrency exchange, and share information with platforms like PhishDestroy to help prevent further incidents.
Data sourced from PhishDestroy threat intelligence database — 693 domains tracked for this threat type
Token Presale — Threat Intelligence Kit High Threat
693
Domains
504
Alive
134
Taken Down
6.5
Avg VT
72.7%
Alive Rate
99.1%
Detected
Since Jul 2025 367 domains with VT ≥ 5
Fake Token Presale 693 domains
Screenshot of grokr-allocations.xyz
grokr-allocations.xyz
3 VTActivecoinbase
Screenshot of grokr-allocations.xyz
grokr-allocations.xyz
Screenshot of healixprotocol-in.pages.dev
healixprotocol-in.pages.dev
3 VTActiveargent
Screenshot of healixprotocol-in.pages.dev
healixprotocol-in.pages.dev
Screenshot of hfggdfgj.pages.dev
hfggdfgj.pages.dev
3 VTActiveacross
Screenshot of hfggdfgj.pages.dev
hfggdfgj.pages.dev
Screenshot of ionixchain.org
ionixchain.org
3 VTUnknownAngel Draineraave
Screenshot of ionixchain.org
ionixchain.org
Screenshot of kadven.io
kadven.io
3 VTUnknownbinance
Screenshot of kadven.io
kadven.io
Screenshot of kuadintoken.net
kuadintoken.net
3 VTActiveUnknown
Screenshot of kuadintoken.net
kuadintoken.net
Screenshot of layerbtcai.pages.dev
layerbtcai.pages.dev
3 VTActiveBitcoin
Screenshot of layerbtcai.pages.dev
layerbtcai.pages.dev
Screenshot of liitlepepe.pages.dev
liitlepepe.pages.dev
3 VTActiveethereum
Screenshot of liitlepepe.pages.dev
liitlepepe.pages.dev
Screenshot of litlepepe.com
litlepepe.com
3 VTActiveEthereum
Screenshot of litlepepe.com
litlepepe.com
Screenshot of littlepepe-com.pages.dev
littlepepe-com.pages.dev
3 VTActiveethereum
Screenshot of littlepepe-com.pages.dev
littlepepe-com.pages.dev
Screenshot of littlepepe.com
littlepepe.com
3 VTActiveUnknown
Screenshot of littlepepe.com
littlepepe.com
Screenshot of littlepepeof.pro
littlepepeof.pro
3 VTActivegenericcrypto
Screenshot of littlepepeof.pro
littlepepeof.pro
Screenshot of magacoinsfinance.pages.dev
magacoinsfinance.pages.dev
3 VTActiveUnknown
Screenshot of magacoinsfinance.pages.dev
magacoinsfinance.pages.dev
Screenshot of maxidogeofficial.info
maxidogeofficial.info
3 VTActiveUnknown
Screenshot of maxidogeofficial.info
maxidogeofficial.info
megadicetoken-5gy.pages.dev
3 VTActiveGoogle
Screenshot of memeindex-ie.web.app
memeindex-ie.web.app
3 VTActiveAngel Draineracross
Screenshot of memeindex-ie.web.app
memeindex-ie.web.app
Screenshot of mememarket.info
mememarket.info
3 VTActiveUnknown
Screenshot of mememarket.info
mememarket.info
Screenshot of memesreum-net.pages.dev
memesreum-net.pages.dev
3 VTActiveacross
Screenshot of memesreum-net.pages.dev
memesreum-net.pages.dev
Screenshot of mindofpepecoin.pages.dev
mindofpepecoin.pages.dev
3 VTActiveUnknown
Screenshot of mindofpepecoin.pages.dev
mindofpepecoin.pages.dev
Screenshot of mindsoffpepe.com
mindsoffpepe.com
3 VTActiveUnknown
Screenshot of mindsoffpepe.com
mindsoffpepe.com
Screenshot of nexc-hain.live
nexc-hain.live
3 VTActiveUnknown
Screenshot of nexc-hain.live
nexc-hain.live
Screenshot of nexchainai.live
nexchainai.live
3 VTActiveUnknown
Screenshot of nexchainai.live
nexchainai.live
noomez.com
3 VTActivecoinbase
Screenshot of nshflv.pages.dev
nshflv.pages.dev
3 VTActiveGoogle
Screenshot of nshflv.pages.dev
nshflv.pages.dev
Screenshot of officialsoluai.live
officialsoluai.live
3 VTUnknownUnknown
Screenshot of officialsoluai.live
officialsoluai.live
Screenshot of pep-nodesale.live
pep-nodesale.live
3 VTActivegenericcrypto
Screenshot of pep-nodesale.live
pep-nodesale.live
pepe-nodeio.pages.dev
3 VTActive
Screenshot of pepeascension.com
pepeascension.com
3 VTUnknown
Screenshot of pepeascension.com
pepeascension.com
Screenshot of pepeheimer-claimlive.pages.dev
pepeheimer-claimlive.pages.dev
3 VTActiveUnknown
Screenshot of pepeheimer-claimlive.pages.dev
pepeheimer-claimlive.pages.dev
Screenshot of pexebel.com
pexebel.com
3 VTActiveWallet Connect Abuseacross
Screenshot of pexebel.com
pexebel.com
Screenshot of pexebel.us
pexebel.us
3 VTUnknownAngel Draineracross
Screenshot of pexebel.us
pexebel.us
Screenshot of pikachusub.pages.dev
pikachusub.pages.dev
3 VTActiveUnknown
Screenshot of pikachusub.pages.dev
pikachusub.pages.dev
project-grok.com
3 VTActivegrok
Screenshot of qadden.com
qadden.com
3 VTActiveUnknown
Screenshot of qadden.com
qadden.com
Screenshot of qubetics-com-claim.pages.dev
qubetics-com-claim.pages.dev
3 VTActiveacross
Screenshot of qubetics-com-claim.pages.dev
qubetics-com-claim.pages.dev
Screenshot of rainbows.bet
rainbows.bet
3 VTActiveAngel Draineracross
Screenshot of rainbows.bet
rainbows.bet
Screenshot of rnbw.rainsbow.xyz
rnbw.rainsbow.xyz
3 VTUnknownAngel Draineracross
Screenshot of rnbw.rainsbow.xyz
rnbw.rainsbow.xyz
Screenshot of sale-monprotocol.pages.dev
sale-monprotocol.pages.dev
3 VTActive
Screenshot of sale-monprotocol.pages.dev
sale-monprotocol.pages.dev
Screenshot of scapemaniaclaim.pages.dev
scapemaniaclaim.pages.dev
3 VTActivebase
Screenshot of scapemaniaclaim.pages.dev
scapemaniaclaim.pages.dev
Screenshot of sealana-dashboard.pages.dev
sealana-dashboard.pages.dev
3 VTActiveSolana
Screenshot of sealana-dashboard.pages.dev
sealana-dashboard.pages.dev
Screenshot of seismicpresale.xyz
seismicpresale.xyz
3 VTUnknownbnb chain
Screenshot of seismicpresale.xyz
seismicpresale.xyz
Screenshot of snorterstoken.live
snorterstoken.live
3 VTActiveAngel Drainerdextools
Screenshot of snorterstoken.live
snorterstoken.live
Screenshot of solaxyclaims.pages.dev
solaxyclaims.pages.dev
3 VTActiveethereum
Screenshot of solaxyclaims.pages.dev
solaxyclaims.pages.dev
Screenshot of spax28p.com
spax28p.com
3 VTActive
Screenshot of spax28p.com
spax28p.com
Screenshot of spax41k.com
spax41k.com
3 VTActiveUnknown
Screenshot of spax41k.com
spax41k.com
Screenshot of spax51k.com
spax51k.com
3 VTActiveUnknown
Screenshot of spax51k.com
spax51k.com
Screenshot of spax70p-fxempire.com
spax70p-fxempire.com
3 VTActiveacross
Screenshot of spax70p-fxempire.com
spax70p-fxempire.com
Screenshot of spx10k-cointelegraph.com
spx10k-cointelegraph.com
3 VTUnknownceler
Screenshot of spx10k-cointelegraph.com
spx10k-cointelegraph.com
spx10k-cryptoslate.com
3 VTUnknownacross
Screenshot of spx15k-cryptoslate.com
spx15k-cryptoslate.com
3 VTUnknownacross
Screenshot of spx15k-cryptoslate.com
spx15k-cryptoslate.com
Screenshot of spx15k-fxempire.com
spx15k-fxempire.com
3 VTUnknownMicrosoft
Screenshot of spx15k-fxempire.com
spx15k-fxempire.com
Screenshot of spydoge.com
spydoge.com
3 VTActiveUnknown
Screenshot of spydoge.com
spydoge.com
subbdtoken-hubs.pages.dev
3 VTActiveUnknown
Screenshot of subbdtoken.wiki
subbdtoken.wiki
3 VTActiveAngel Drainergenericcrypto
Screenshot of subbdtoken.wiki
subbdtoken.wiki
subbdtokenx.pages.dev
3 VTActiveGoogle
Screenshot of syneris.tech
syneris.tech
3 VTActiveUnknown
Screenshot of syneris.tech
syneris.tech
Screenshot of test.fulviomenegozzo.com
test.fulviomenegozzo.com
3 VTActive["opensea"]
Screenshot of test.fulviomenegozzo.com
test.fulviomenegozzo.com
Screenshot of unilabs-hubs.pages.dev
unilabs-hubs.pages.dev
3 VTActiveacross
Screenshot of unilabs-hubs.pages.dev
unilabs-hubs.pages.dev
velora-bcs.com
3 VTActiveUnknown
web3presales.online
3 VTUnknownUnknown
Screenshot of wlfisol.pages.dev
wlfisol.pages.dev
3 VTActiveacross
Screenshot of wlfisol.pages.dev
wlfisol.pages.dev
Screenshot of xa28r.net
xa28r.net
3 VTUnknownUnknown
Screenshot of xa28r.net
xa28r.net
Screenshot of xai660k.pages.dev
xai660k.pages.dev
3 VTActiveapple
Screenshot of xai660k.pages.dev
xai660k.pages.dev
Screenshot of xai99r.net
xai99r.net
3 VTUnknownUnknown
Screenshot of xai99r.net
xai99r.net
Screenshot of xainog-fxempire.com
xainog-fxempire.com
3 VTUnknownUnknown
Screenshot of xainog-fxempire.com
xainog-fxempire.com
Screenshot of xaiwalletgo.com
xaiwalletgo.com
3 VTUnknownUnknown
Screenshot of xaiwalletgo.com
xaiwalletgo.com
Screenshot of xeronum.org
xeronum.org
3 VTActiveUnknown
Screenshot of xeronum.org
xeronum.org
Screenshot of xpage-meta.com
xpage-meta.com
3 VTActiveUnknown
Screenshot of xpage-meta.com
xpage-meta.com
Screenshot of alpenews.com
alpenews.com
2 VTActive1inch
Screenshot of alpenews.com
alpenews.com
Screenshot of apemars.com
apemars.com
2 VTUnknownUnknown
Screenshot of apemars.com
apemars.com
Screenshot of asdas123412.pages.dev
asdas123412.pages.dev
2 VTActiveCloudflare
Screenshot of asdas123412.pages.dev
asdas123412.pages.dev
Screenshot of bdag.io
bdag.io
2 VTActiveUnknown
Screenshot of bdag.io
bdag.io
Screenshot of bestwalletone.com
bestwalletone.com
2 VTUnknownAngel Draineracross
Screenshot of bestwalletone.com
bestwalletone.com
Screenshot of bestwalletpresale.com
bestwalletpresale.com
2 VTActiveacross
Screenshot of bestwalletpresale.com
bestwalletpresale.com
Screenshot of bestwallettoken.com
bestwallettoken.com
2 VTActiveWallet Connect Abuseacross
Screenshot of bestwallettoken.com
bestwallettoken.com
Screenshot of bitcoinhyper-claim.info
bitcoinhyper-claim.info
2 VTActiveBitcoin
Screenshot of bitcoinhyper-claim.info
bitcoinhyper-claim.info
Screenshot of bitcoinhyperr.site
bitcoinhyperr.site
2 VTActiveethereum
Screenshot of bitcoinhyperr.site
bitcoinhyperr.site
Screenshot of bitcoinshyper.help
bitcoinshyper.help
2 VTActiveEthereum
Screenshot of bitcoinshyper.help
bitcoinshyper.help
Screenshot of bitcoinshypertoken.web.app
bitcoinshypertoken.web.app
2 VTActiveethereum
Screenshot of bitcoinshypertoken.web.app
bitcoinshypertoken.web.app
Screenshot of blockdag-networknets.web.app
blockdag-networknets.web.app
2 VTActiveWallet Connect Abuseacross
Screenshot of blockdag-networknets.web.app
blockdag-networknets.web.app
Screenshot of btchyperclaimportal.pages.dev
btchyperclaimportal.pages.dev
2 VTActiveBitcoin
Screenshot of btchyperclaimportal.pages.dev
btchyperclaimportal.pages.dev
Screenshot of btfd-website.pages.dev
btfd-website.pages.dev
2 VTActivecoinbase
Screenshot of btfd-website.pages.dev
btfd-website.pages.dev
Screenshot of cadween.net
cadween.net
2 VTActivebinance
Screenshot of cadween.net
cadween.net
Screenshot of cgerr.pages.dev
cgerr.pages.dev
2 VTActiveUnknown
Screenshot of cgerr.pages.dev
cgerr.pages.dev
claim-snortertokens.pages.dev
2 VTActive
Screenshot of claim.blockdagmainnets.live
claim.blockdagmainnets.live
2 VTActiveBlockDAG
Screenshot of claim.blockdagmainnets.live
claim.blockdagmainnets.live
Screenshot of dapp.portefy.de
dapp.portefy.de
2 VTActiveUnknown
Screenshot of dapp.portefy.de
dapp.portefy.de
Screenshot of dawgzaiweb.pages.dev
dawgzaiweb.pages.dev
2 VTActivecurve
Screenshot of dawgzaiweb.pages.dev
dawgzaiweb.pages.dev
Screenshot of deepsnitch.net
deepsnitch.net
2 VTUnknownAngel Drainerbase
Screenshot of deepsnitch.net
deepsnitch.net
Screenshot of dep52k.com
dep52k.com
2 VTActiveethereum
Screenshot of dep52k.com
dep52k.com
Screenshot of dev-pad-frontend-user.vercel.app
dev-pad-frontend-user.vercel.app
2 VTActiveavalanche
Screenshot of dev-pad-frontend-user.vercel.app
dev-pad-frontend-user.vercel.app
Screenshot of dex1rp.pages.dev
dex1rp.pages.dev
2 VTUnknownUnknown
Screenshot of dex1rp.pages.dev
dex1rp.pages.dev
dogen-meme-app.pages.dev
2 VTActiveethereum
Screenshot of entgxckakoa.pages.dev
entgxckakoa.pages.dev
2 VTActiveMicrosoft
Screenshot of entgxckakoa.pages.dev
entgxckakoa.pages.dev
Screenshot of flockerz-apps.pages.dev
flockerz-apps.pages.dev
2 VTActiveethereum
Screenshot of flockerz-apps.pages.dev
flockerz-apps.pages.dev
Screenshot of flockerzweb.pages.dev
flockerzweb.pages.dev
2 VTActiveMicrosoft
Screenshot of flockerzweb.pages.dev
flockerzweb.pages.dev
Screenshot of galaxyfoxclaim.pages.dev
galaxyfoxclaim.pages.dev
2 VTActivecelestia
Screenshot of galaxyfoxclaim.pages.dev
galaxyfoxclaim.pages.dev
Screenshot of gro11k.net
gro11k.net
2 VTUnknownEthereum
Screenshot of gro11k.net
gro11k.net
Screenshot of gro11k.org
gro11k.org
2 VTUnknownEthereum
Screenshot of gro11k.org
gro11k.org
Screenshot of gro23p.com
gro23p.com
2 VTActiveethereum
Screenshot of gro23p.com
gro23p.com
« Prev 3 4 5 6 7 Next » Page 6 of 7

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
Global Vendor Sync— confirmed detections are pushed to 29 partners: