Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

174,172Total Detected
149,968Taken Down
91.7%Kill Rate
94.2%VT Coverage
50,023Abuse Reports
Overview Jul 261,262 Jun 2614,384 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,094 Jan 268,924 Dec 2511,772 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,399
Taken Down
957
Still Live
76.9%
Kill Rate
111h
Avg Response
9.1
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 226
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 337
MetaMask 142
Trust Wallet 112
Google 100
Microsoft 98
Trezor 98
OKX 95
Solana 84

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,973 🇺🇸 US2,507 🇩🇪 DE302 🇳🇱 NL227 🇬🇧 GB204 🇷🇺 RU164 🇭🇰 HK137 🇫🇷 FR57

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of os-xlayer.com
os-xlayer.com
1 VTTaken Down
Screenshot of otravite.biz
otravite.biz
1 VTTaken Down
Screenshot of oumechrwq.com
oumechrwq.com
1 VTTaken Down
Screenshot of pages-liveledgr-faq.pages.dev
pages-liveledgr-faq.pages.dev
1 VTLive
Screenshot of palacebet-originalsites2026.com
palacebet-originalsites2026.com
1 VTTaken Down
Screenshot of pandez-lab.com
pandez-lab.com
1 VTTaken Down
Screenshot of paytrustwallet.co
paytrustwallet.co
1 VTTaken Down
penomex.com
1 VT
Screenshot of pepeflip.pages.dev
pepeflip.pages.dev
1 VTLive
Screenshot of phantom.dataclan.expert
phantom.dataclan.expert
1 VTTaken DownSolana Drainer
phantomwalletbr.site
1 VTTaken DownSolana Drainer
Screenshot of philflex.com
philflex.com
1 VTTaken Down
Screenshot of pintarmtsmu.pages.dev
pintarmtsmu.pages.dev
1 VTLive
Screenshot of play.twitbit.in
play.twitbit.in
1 VTTaken Down
poly-perps.pages.dev
1 VTTaken Down
polymarket.co.at
1 VTTaken Down
Screenshot of polymarket.pusd.gamma-api.com
polymarket.pusd.gamma-api.com
1 VTTaken Down
Screenshot of polymarketru.com
polymarketru.com
1 VTTaken Down
Screenshot of pongoexplorer.info
pongoexplorer.info
1 VTTaken Down
Screenshot of ponkverse.fun
ponkverse.fun
1 VTTaken Down
portal-uphold-en-auths.created.app
1 VTTaken Down
Screenshot of portal.meisimplesreceita.site
portal.meisimplesreceita.site
1 VTTaken Down
Screenshot of portaldetransitosc.vercel.app
portaldetransitosc.vercel.app
1 VTLive
Screenshot of portaldocliente.soueu.digital
portaldocliente.soueu.digital
1 VT
Screenshot of potentialactivist.pages.dev
potentialactivist.pages.dev
1 VTLive
Screenshot of presalewagered.xyz
presalewagered.xyz
1 VTTaken Down
Screenshot of proposalforge.in
proposalforge.in
1 VT
Screenshot of prosperacapitaltrading.info
prosperacapitaltrading.info
1 VTTaken Down
Screenshot of protocol-blockfix.pages.dev
protocol-blockfix.pages.dev
1 VTLive
Screenshot of pt-shopee859.blogspot.com
pt-shopee859.blogspot.com
1 VTTaken Down
Screenshot of pubf868e77df61146e2a31924f0f62189d5.r2.dev
pubf868e77df61146e2a31924f0f62189d5.r2.dev
1 VTTaken Down
Screenshot of pump-drop.fun
pump-drop.fun
1 VTTaken Down
Screenshot of pump-swap.co
pump-swap.co
1 VTTaken Down
Screenshot of pump.funroom.live
pump.funroom.live
1 VT
pumpfun-site-2-sol-zr41n3r.pages.dev
1 VTTaken Down
Screenshot of pumpitx.com
pumpitx.com
1 VTTaken Down
pumpshell.fun
1 VTTaken Down
Screenshot of pumpswapdex.org
pumpswapdex.org
1 VTTaken Down
Screenshot of punnp.live
punnp.live
1 VTTaken Down
Screenshot of purancryptorecovery.com
purancryptorecovery.com
1 VTTaken Down
purelyusdt.com
1 VTTaken Down
Screenshot of purevietnamlemon.online
purevietnamlemon.online
1 VTTaken Down
Screenshot of purplebitcoin.pages.dev
purplebitcoin.pages.dev
1 VTLive
Screenshot of puslbt-infogiris.vip
puslbt-infogiris.vip
1 VTTaken Down
Screenshot of pusulabetgirisadresi.cam
pusulabetgirisadresi.cam
1 VTTaken Down
Screenshot of pxs.me
pxs.me
1 VTTaken Down
Screenshot of quiqcode.com
quiqcode.com
1 VTTaken Down
Screenshot of rabbtixx-app-us.pages.dev
rabbtixx-app-us.pages.dev
1 VTLive
Screenshot of rackswin.com
rackswin.com
1 VTTaken Down
Screenshot of rastivex-si.com
rastivex-si.com
1 VTTaken Down
Screenshot of reactive-x.com
reactive-x.com
1 VTTaken Down
Screenshot of reallocation-megaeth.com
reallocation-megaeth.com
1 VTTaken Down
Screenshot of realvisionpartnerships.netlify.app
realvisionpartnerships.netlify.app
1 VTLive
Screenshot of restoremykey.com
restoremykey.com
1 VTTaken Down
Screenshot of returnitback.net
returnitback.net
1 VTTaken Down
Screenshot of reviewdocky.com
reviewdocky.com
1 VTTaken Down
revoke-balancer.pages.dev
1 VTTaken Down
Screenshot of revoke-button.com
revoke-button.com
1 VTTaken Down
rewards-keetanetwork.com
1 VTTaken Down
rewards-pethooligan.fun
1 VTTaken Down
« Prev ... 98 99 100 101 102 103 104 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

174,172+ domains with security reports

Live Threats

13,631 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence