Gandi SAS: phishing domains and abuse response

PhishDestroy reported 72 phishing domains registered with Gandi SAS between 2026-01-02 and 2026-06-18, sending 75 abuse reports. Median time from the first report until a domain stopped resolving: 26.0 days (n = 17). 45 of 62 domains were still active 90 days after the first report. The database holds 379 Gandi SAS domains in total.

72
Domains reported (window)
75
Abuse reports sent
26.0 days
Median time to unavailable
379
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 55 (76%); Offline 15 (21%); Suspended 2 (3%).

90th percentile time to unavailable: 53.8 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. MetaMask19
  2. Google14
  3. Ledger13
  4. Coinbase11
  5. Genericemail10
  6. Microsoft5
  7. Solana5
  8. Binance4

Top-level domains

  1. .com111
  2. .site46
  3. .io44
  4. .org39
  5. .me12
  6. .fr11
  7. .uk10
  8. .net9

Most reported domains

  1. amlverifier.com
  2. justlend.cc
  3. accounts.bmwweb.me
  4. admin-moderna-72-dev-2-verify.apprentice.io
  5. airdrop.fight.foundation

Latest Gandi SAS phishing domains

The 30 most recently detected domains at Gandi SAS
DomainFirst detectedStatus at last checkRegistrar
dev.gbmapsaws.co.uk2026-10-21OnlineGandi
sl8.online2026-10-16OnlineGandi
gravesmill.com2026-10-12OnlineGandi
lecadeaugourmand.fr2026-10-11OnlineGANDI
backbaymall.ga2026-10-11OnlineGANDI
gopalakidz.club2026-10-11OnlineGandi
karakhan.eu2026-10-10OnlineGANDI
avalanche.claims2026-10-04OnlineGandi
avalabs.claims2026-10-04OnlineGandi
webfun.website2026-09-27OnlineGandi
largprofitarianplatform.com2026-09-23OfflineGandi
gam-dom.ca2026-09-23OnlineGANDI
flagcollection.com2026-09-20OnlineGandi
csemizuho.fr2026-09-20OnlineGANDI
merax.me2026-09-19OnlineGandi
rarible-test.com2026-09-19OnlineGandi
melbet-canada.com2026-09-19OnlineGandi
meta-ad-account-support.statichost.page2026-09-15OnlineGandi
search-melons.duckdns.org2026-09-15OnlineGandi
larch-credholmsoftware.com2026-09-14OfflineGandi
levoraoptswaptech.com2026-09-13OfflineGandi
facebookshops.best2026-09-12OnlineGandi
restoremetamask.com2026-09-11OfflineGandi
coinbaseoneshot.com2026-09-07OnlineGandi
circles.stpz.io2026-09-04OnlineGandi
equinor-landingpage.my.canva.site2026-09-02OnlineGandi
base.via-internet.fr2026-09-02OnlineGANDI
moxie-affirm.my.canva.site2026-09-02OnlineGandi
kegwebsite.com2026-09-01OnlineGandi
dev-quizsantander.aumentable.com2026-08-31OfflineGandi

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.