Ddos-guard: phishing domains and abuse response

PhishDestroy reported 26 phishing domains registered with Ddos-guard between 2026-01-02 and 2026-06-18, sending 26 abuse reports. Median time from the first report until a domain stopped resolving: 69.0 days (n = 17). 8 of 25 domains were still active 90 days after the first report. The database holds 16 Ddos-guard domains in total.

26
Domains reported (window)
26
Abuse reports sent
69.0 days
Median time to unavailable
16
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Offline 16 (62%); Live 9 (35%); Suspended 1 (4%).

90th percentile time to unavailable: 69.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Apple2
  2. Dota 22
  3. Google1

Top-level domains

  1. .at11
  2. .invalid3
  3. .casino1
  4. .pro1

Most reported domains

  1. aa4est.daorel.ch
  2. aggsystem.pro
  3. arkada919.casino
  4. ascend-ex.at
  5. cexio-dashboard.at

Latest Ddos-guard phishing domains

The 16 most recently detected domains at Ddos-guard
DomainFirst detectedStatus at last checkRegistrar
richpay.pro2026-02-20OfflineDdos-guard
arkada919.casino2026-01-05OfflineDdos-guard
ascend-ex.at2026-01-05Taken downDdos-guard
koiinbay.at2026-01-05Taken downDdos-guard
cexio-dashboard.at2026-01-05Taken downDdos-guard
nobitex.at2026-01-05Taken downDdos-guard
superex-login.at2026-01-05Taken downDdos-guard
duplicate-disabled-46620.invalid2026-01-05OfflineDdos-guard
websea-login.at2026-01-05OfflineDdos-guard
blofin-web.at2026-01-05OfflineDdos-guard
duplicate-disabled-46613.invalid2026-01-05Taken downDdos-guard
whitebit-panel.at2026-01-05OfflineDdos-guard
whitebit-login.at2026-01-05OfflineDdos-guard
htx-portal.at2026-01-05OfflineDdos-guard
websea.at2026-01-05Taken downDdos-guard
duplicate-disabled-46583.invalid2026-01-05OfflineDdos-guard

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.