Alexhost: phishing domains and abuse response

PhishDestroy reported 25 phishing domains registered with Alexhost between 2026-01-02 and 2026-06-18, sending 26 abuse reports. Median time from the first report until a domain stopped resolving: 30.4 days (n = 16). 7 of 23 domains were still active 90 days after the first report. The database holds 5 Alexhost domains in total.

25
Domains reported (window)
26
Abuse reports sent
30.4 days
Median time to unavailable
5
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Offline 16 (64%); Live 9 (36%).

90th percentile time to unavailable: 36.3 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Csgo1
  2. Counter-strike1
  3. Coinbase1
  4. Polymarket1

Top-level domains

  1. .pro2
  2. .info1
  3. .bet1
  4. .de1

Most reported domains

  1. torzondnm.world
  2. 45.93.8.152
  3. 5.181.0.60
  4. blackopsmarket.team
  5. blackospdm.info

Latest Alexhost phishing domains

The 5 most recently detected domains at Alexhost
DomainFirst detectedStatus at last checkRegistrar
polymarket.pureconnect.pro2026-03-13OfflineAlexhost
coinbase-wallet.de2026-02-03OfflineAlexhost
s.team-xcz.pro2025-11-01OfflineAlexHost (ASN: 200019)
daddyxways.bet2025-10-07OfflineALEXHOST (ASN: 200019)
aml-trust.info2025-09-28Taken downAlexHost (ASN: 200019)

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.