Phishing Analytics

So far in August 2026 (month in progress), PhishDestroy detected 3,328 phishing domains. 1,376 of them (41.3%) have already been neutralized, while 1,948 remain live and under active escalation. The most abused registrar was NICENIC INTERNATIONAL GROUP CO., LIMITED with 380 malicious domains, followed by Fewmoretaps OU d/b/a Trustname.com (241). Attackers targeted google hardest, with metamask a close second.

In July 2026, PhishDestroy detected 15,213 phishing domains, a 33.1% decrease from June. 6,905 of them (45.4%) have already been neutralized, while 8,306 remain live and under active escalation. The most abused registrar was NICENIC INTERNATIONAL GROUP CO., LIMITED with 2,215 malicious domains, followed by Fewmoretaps OU d/b/a Trustname.com (853). Attackers targeted Google hardest, with Ledger a close second.

In June 2026, PhishDestroy detected 22,732 phishing domains, a 207% increase from May. 11,121 of them (48.9%) have already been neutralized, while 11,608 remain live and under active escalation. The most abused registrar was NICENIC INTERNATIONAL GROUP CO., LIMITED with 3,580 malicious domains, followed by GoDaddy.com, LLC (1,092). Attackers targeted Trezor hardest, with Google a close second.

In May 2026, PhishDestroy detected 7,405 phishing domains, a 55.7% decrease from April. 4,703 of them (63.5%) have already been neutralized, while 2,702 remain live and under active escalation. The most abused registrar was GoDaddy.com, LLC with 942 malicious domains, followed by NICENIC INTERNATIONAL GROUP CO., LIMITED (711). Attackers targeted Ledger hardest, with genericcrypto a close second.

In April 2026, PhishDestroy detected 16,732 phishing domains, a 20.3% decrease from March. 10,655 of them (63.7%) have already been neutralized, while 6,076 remain live and under active escalation. The most abused registrar was Cloudflare, Inc. with 4,469 malicious domains, followed by GoDaddy.com, LLC (1,942). Attackers targeted Ledger hardest, with genericcrypto a close second.

In March 2026, PhishDestroy detected 20,981 phishing domains, a 48.1% decrease from February. 13,863 of them (66.1%) have already been neutralized, while 7,118 remain live and under active escalation. The most abused registrar was NICENIC INTERNATIONAL GROUP CO., LIMITED with 4,861 malicious domains, followed by CloudFlare, Inc. (4,342). Attackers targeted Ledger hardest, with across a close second.

In February 2026, PhishDestroy detected 40,387 phishing domains, a 352.8% increase from January. 28,849 of them (71.4%) have already been neutralized, while 11,538 remain live and under active escalation. The most abused registrar was NiceNIC International Group Co., Limited with 8,735 malicious domains, followed by Cloudflare, Inc. (6,194). Attackers targeted genericcloudflare hardest, with across a close second.

In January 2026, PhishDestroy detected 8,919 phishing domains, a 24% decrease from December. 6,810 of them (76.4%) have already been neutralized, while 2,109 remain live and under active escalation. The most abused registrar was NiceNIC International Group Co., Limited with 1,316 malicious domains, followed by PDR Ltd. d/b/a PublicDomainRegistry.com (972). Attackers targeted genericcrypto hardest, with x.com a close second.

In December 2025, PhishDestroy detected 11,740 phishing domains, a 6.6% decrease from November. 8,286 of them (70.6%) have already been neutralized, while 3,454 remain live and under active escalation. The most abused registrar was NiceNIC International Group Co., Limited with 1,283 malicious domains, followed by Cloudflare, Inc. (1,145). Attackers targeted Coinbase hardest, with genericcrypto a close second.

In November 2025, PhishDestroy detected 12,563 phishing domains, a 42.2% increase from October. 10,222 of them (81.4%) have already been neutralized, while 2,341 remain live and under active escalation. The most abused registrar was Dynadot LLC with 2,118 malicious domains, followed by Cloudflare, Inc. (1,504). Attackers targeted Google hardest, with genericcrypto a close second.

In October 2025, PhishDestroy detected 8,834 phishing domains, a 21.1% increase from September. 7,283 of them (82.4%) have already been neutralized, while 1,551 remain live and under active escalation. The most abused registrar was NiceNIC International Group Co., Limited with 1,206 malicious domains, followed by Cloudflare, Inc. (827). Attackers targeted Google hardest, with across a close second.

In September 2025, PhishDestroy detected 7,296 phishing domains, a 93% increase from August. 5,874 of them (80.5%) have already been neutralized, while 1,422 remain live and under active escalation. The most abused registrar was NiceNIC International Group Co., Limited with 774 malicious domains, followed by Web Commerce Communications Limited (677). Attackers targeted across hardest, with SushiSwap a close second.

In August 2025, PhishDestroy detected 3,781 phishing domains, a 440.1% increase from July. 2,623 of them (69.4%) have already been neutralized, while 1,158 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

In July 2025, PhishDestroy detected 700 phishing domains, a 23233.3% increase from June. 539 of them (77%) have already been neutralized, while 161 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 85 malicious domains, followed by NameSilo, LLC (78). Attackers targeted across hardest, with Ethereum a close second.

In June 2025, PhishDestroy detected 3 phishing domains. 3 of them (100%) have already been neutralized. The most abused registrar was NameSilo, LLC with 1 malicious domains, followed by Web Commerce Communications Ltd. (1). Attackers targeted chainlink hardest, with amazon a close second.