# Digitalocean: phishing domains and abuse response

PhishDestroy reported 28 phishing domains registered with Digitalocean between 2026-01-02 and 2026-06-18, sending 28 abuse reports. Median time from the first report until a domain stopped resolving: 19.0 days (n = 13). 9 of 22 domains were still active 90 days after the first report. The database holds 3 Digitalocean domains in total.

28Domains reported (window)

28Abuse reports sent

19.0 daysMedian time to unavailable

3In the database now

## Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 15 (54%); Offline 13 (46%).

90th percentile time to unavailable: 39.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

## What is registered there

### Impersonated brands

- [Telegram](https://phishdestroy.io/brand/telegram/)1

### Top-level domains

- [.live](https://phishdestroy.io/tld/live/)1
- [.br](https://phishdestroy.io/tld/br/)1
- [.store](https://phishdestroy.io/tld/store/)1

### Most reported domains

- [138.197.183.112/admin](https://phishdestroy.io/domain/138.197.183.112/admin/)
- [139.59.209.29/admin](https://phishdestroy.io/domain/139.59.209.29/admin/)
- [143.110.236.148/admin](https://phishdestroy.io/domain/143.110.236.148/admin/)
- [157.230.19.213/admin](https://phishdestroy.io/domain/157.230.19.213/admin/)
- [178.62.211.192/admin](https://phishdestroy.io/domain/178.62.211.192/admin/)

## Latest Digitalocean phishing domains

The 3 most recently detected domains at Digitalocean
Domain | First detected | Status at last check | Registrar | 
[velmora-live.store](https://phishdestroy.io/domain/velmora-live.store/) | 2026-03-23 | Offline | Digitalocean | 
[cms.transfer.com.br](https://phishdestroy.io/domain/cms.transfer.com.br/) | 2026-03-17 | Online | Digitalocean | 
[morpho-o.live](https://phishdestroy.io/domain/morpho-o.live/) | 2026-01-26 | Offline | Digitalocean | 

## Related

- [Registrar Scoreboard](https://phishdestroy.io/registrar-accountability/)
- [Registrar risk statistics](https://phishdestroy.io/registrar-stats/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Bulletproof hosting](https://phishdestroy.io/glossary/bulletproof-hosting/)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [All registrars](https://phishdestroy.io/registrar/)

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.

Canonical: https://phishdestroy.io/registrar/digitalocean/