In December 2025, PhishDestroy detected <strong>11,773</strong> phishing domains, marking a <strong>6.4%</strong> decrease from the previous month. The takedown rate was <strong>76.3%</strong>, with <strong>8,978</strong> domains neutralized. Notably, <strong>Crypto Scam</strong> targeting remains prevalent with <strong>820</strong> domains, while <strong>NICENIC INTERNATIONAL GROUP CO., LIMITED</strong> emerged as the top registrar for abuse cases. The operational impact shows effective takedown efforts, though the mean registrar response time of <strong>1452.7</strong> hours indicates room for improvement in response speed.
- <strong>NICENIC INTERNATIONAL GROUP CO., LIMITED</strong> leads registrar abuse with <strong>1268</strong> cases, necessitating focused intervention.
- Crypto-related brands like <strong>Coinbase</strong> and <strong>Kraken</strong> are primary targets, overshadowing traditional banking sectors.
- The <strong>.com</strong> TLD remains the most weaponized with <strong>3816</strong> domains, followed by <strong>.app</strong> and <strong>.dev</strong>.
- The <strong>Angel Drainer</strong> kit is the most used, posing significant threats to victims' wallets through direct fund extraction.
- The US hosts the majority of phishing infrastructure with <strong>8798</strong> domains, indicating a need for enhanced monitoring in this region.
- Detection-to-takedown efficiency remains robust at <strong>76.3%</strong>, but the slow registrar response time highlights a critical gap.
Top Registrars
| Registrar | Domains |
|---|---|
| NiceNIC International Group Co., Limited | 1,284 |
| Cloudflare, Inc. | 1,148 |
| Dynadot LLC | 607 |
| CSC Corporate Domains, Inc. | 584 |
| PDR Ltd. d/b/a PublicDomainRegistry.com | 581 |
| Gname.com Pte. Ltd. | 529 |
| GoDaddy.com, LLC | 509 |
| NameCheap, Inc. | 461 |
Active Drainer Kits
December 2025 Domains (11,773)
Sorted by VirusTotal detections. Click any domain for full security report.
Detection Trends
Monthly domain volume, kill rate, and live threats over time.
Monthly Detected Domains
Kill Rate %
Explore More
Related intelligence pages and data feeds.