# Gandi SAS: phishing domains and abuse response PhishDestroy reported 72 phishing domains registered with Gandi SAS between 2026-01-02 and 2026-06-18, sending 75 abuse reports. Median time from the first report until a domain stopped resolving: 26.0 days (n = 17). 45 of 62 domains were still active 90 days after the first report. The database holds 379 Gandi SAS domains in total. 72Domains reported (window) 75Abuse reports sent 26.0 daysMedian time to unavailable 379In the database now ## Abuse-report outcome Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 55 (76%); Offline 15 (21%); Suspended 2 (3%). 90th percentile time to unavailable: 53.8 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action. ## What is registered there ### Impersonated brands - [MetaMask](https://phishdestroy.io/brand/metamask/)19 - [Google](https://phishdestroy.io/brand/google/)14 - [Ledger](https://phishdestroy.io/brand/ledger/)13 - [Coinbase](https://phishdestroy.io/brand/coinbase/)11 - [Genericemail](https://phishdestroy.io/brand/genericemail/)10 - [Microsoft](https://phishdestroy.io/brand/microsoft/)5 - [Solana](https://phishdestroy.io/brand/solana/)5 - [Binance](https://phishdestroy.io/brand/binance/)4 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)111 - [.site](https://phishdestroy.io/tld/site/)46 - [.io](https://phishdestroy.io/tld/io/)44 - [.org](https://phishdestroy.io/tld/org/)39 - [.me](https://phishdestroy.io/tld/me/)12 - [.fr](https://phishdestroy.io/tld/fr/)11 - [.uk](https://phishdestroy.io/tld/uk/)10 - [.net](https://phishdestroy.io/tld/net/)9 ### Most reported domains - [amlverifier.com](https://phishdestroy.io/domain/amlverifier.com/) - [justlend.cc](https://phishdestroy.io/domain/justlend.cc/) - [accounts.bmwweb.me](https://phishdestroy.io/domain/accounts.bmwweb.me/) - [admin-moderna-72-dev-2-verify.apprentice.io](https://phishdestroy.io/domain/admin-moderna-72-dev-2-verify.apprentice.io/) - [airdrop.fight.foundation](https://phishdestroy.io/domain/airdrop.fight.foundation/) ## Latest Gandi SAS phishing domains The 30 most recently detected domains at Gandi SAS Domain | First detected | Status at last check | Registrar | [dev.gbmapsaws.co.uk](https://phishdestroy.io/domain/dev.gbmapsaws.co.uk/) | 2026-10-21 | Online | Gandi | [sl8.online](https://phishdestroy.io/domain/sl8.online/) | 2026-10-16 | Online | Gandi | [gravesmill.com](https://phishdestroy.io/domain/gravesmill.com/) | 2026-10-12 | Online | Gandi | [lecadeaugourmand.fr](https://phishdestroy.io/domain/lecadeaugourmand.fr/) | 2026-10-11 | Online | GANDI | [backbaymall.ga](https://phishdestroy.io/domain/backbaymall.ga/) | 2026-10-11 | Online | GANDI | [gopalakidz.club](https://phishdestroy.io/domain/gopalakidz.club/) | 2026-10-11 | Online | Gandi | [karakhan.eu](https://phishdestroy.io/domain/karakhan.eu/) | 2026-10-10 | Online | GANDI | [avalanche.claims](https://phishdestroy.io/domain/avalanche.claims/) | 2026-10-04 | Online | Gandi | [avalabs.claims](https://phishdestroy.io/domain/avalabs.claims/) | 2026-10-04 | Online | Gandi | [webfun.website](https://phishdestroy.io/domain/webfun.website/) | 2026-09-27 | Online | Gandi | [largprofitarianplatform.com](https://phishdestroy.io/domain/largprofitarianplatform.com/) | 2026-09-23 | Offline | Gandi | [gam-dom.ca](https://phishdestroy.io/domain/gam-dom.ca/) | 2026-09-23 | Online | GANDI | [flagcollection.com](https://phishdestroy.io/domain/flagcollection.com/) | 2026-09-20 | Online | Gandi | [csemizuho.fr](https://phishdestroy.io/domain/csemizuho.fr/) | 2026-09-20 | Online | GANDI | [merax.me](https://phishdestroy.io/domain/merax.me/) | 2026-09-19 | Online | Gandi | [rarible-test.com](https://phishdestroy.io/domain/rarible-test.com/) | 2026-09-19 | Online | Gandi | [melbet-canada.com](https://phishdestroy.io/domain/melbet-canada.com/) | 2026-09-19 | Online | Gandi | [meta-ad-account-support.statichost.page](https://phishdestroy.io/domain/meta-ad-account-support.statichost.page/) | 2026-09-15 | Online | Gandi | [search-melons.duckdns.org](https://phishdestroy.io/domain/search-melons.duckdns.org/) | 2026-09-15 | Online | Gandi | [larch-credholmsoftware.com](https://phishdestroy.io/domain/larch-credholmsoftware.com/) | 2026-09-14 | Offline | Gandi | [levoraoptswaptech.com](https://phishdestroy.io/domain/levoraoptswaptech.com/) | 2026-09-13 | Offline | Gandi | [facebookshops.best](https://phishdestroy.io/domain/facebookshops.best/) | 2026-09-12 | Online | Gandi | [restoremetamask.com](https://phishdestroy.io/domain/restoremetamask.com/) | 2026-09-11 | Offline | Gandi | [coinbaseoneshot.com](https://phishdestroy.io/domain/coinbaseoneshot.com/) | 2026-09-07 | Online | Gandi | [circles.stpz.io](https://phishdestroy.io/domain/circles.stpz.io/) | 2026-09-04 | Online | Gandi | [equinor-landingpage.my.canva.site](https://phishdestroy.io/domain/equinor-landingpage.my.canva.site/) | 2026-09-02 | Online | Gandi | [base.via-internet.fr](https://phishdestroy.io/domain/base.via-internet.fr/) | 2026-09-02 | Online | GANDI | [moxie-affirm.my.canva.site](https://phishdestroy.io/domain/moxie-affirm.my.canva.site/) | 2026-09-02 | Online | Gandi | [kegwebsite.com](https://phishdestroy.io/domain/kegwebsite.com/) | 2026-09-01 | Online | Gandi | [dev-quizsantander.aumentable.com](https://phishdestroy.io/domain/dev-quizsantander.aumentable.com/) | 2026-08-31 | Offline | Gandi | ## Related - [Registrar Scoreboard](https://phishdestroy.io/registrar-accountability/) - [Registrar risk statistics](https://phishdestroy.io/registrar-stats/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Bulletproof hosting](https://phishdestroy.io/glossary/bulletproof-hosting/) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [All registrars](https://phishdestroy.io/registrar/) Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis. Canonical: https://phishdestroy.io/registrar/gandi-sas/