Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

168,238Total Detected
145,464Taken Down
91.6%Kill Rate
93.5%VT Coverage
46,444Abuse Reports
Overview Jun 269,710 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,095 Jan 268,924 Dec 2511,773 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,284
Taken Down
1,079
Still Live
75.3%
Kill Rate
111h
Avg Response
7.5
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 227
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 299
Crypto Casino / Gambling 228
MetaMask 141
Trust Wallet 114
Airdrop Scam 106
Google 98
Microsoft 96
OKX 95

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,889 🇺🇸 US2,457 🇩🇪 DE292 🇳🇱 NL223 🇬🇧 GB202 🇷🇺 RU161 🇭🇰 HK133 🇫🇷 FR56

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of holdonz.pics
holdonz.pics
16 VTTaken Down
Screenshot of imtoken-chinese.com
imtoken-chinese.com
16 VTTaken Down
Screenshot of individual-project.pro
individual-project.pro
16 VTTaken Down
Screenshot of indonesiaax-dananews.fascist.biz.id
indonesiaax-dananews.fascist.biz.id
16 VTTaken Down
infamousmick.github.io
16 VTLive
Screenshot of instagramloginforyou.github.io
instagramloginforyou.github.io
16 VTLive
instant-apply-get-free-verified.surge.sh
16 VTLive
Screenshot of invest.credits-center.com
invest.credits-center.com
16 VT
Screenshot of investorable.github.io
investorable.github.io
16 VTLive
Screenshot of invprice.info
invprice.info
16 VTTaken Down
Screenshot of kevenhenley6903.pages.dev
kevenhenley6903.pages.dev
16 VTTaken Down
Screenshot of kiocxonlogin.gitbook.io
kiocxonlogin.gitbook.io
16 VT
Screenshot of krishupiyush.github.io
krishupiyush.github.io
16 VTLive
Screenshot of kuccoin0logiin.godaddysites.com
kuccoin0logiin.godaddysites.com
16 VT
kurcoinlagany.webflow.io
16 VTTaken Down
labcapture.duckdns.org
16 VTTaken Down
Screenshot of laurengreenurt-hub.github.io
laurengreenurt-hub.github.io
16 VTLive
Screenshot of ledger-livenanox-customer-supportcd.vercel.app
ledger-livenanox-customer-supportcd.vercel.app
16 VT
Screenshot of ledger-start-home.pages.dev
ledger-start-home.pages.dev
16 VTLive
Screenshot of legiws.cc
legiws.cc
16 VTTaken Down
lob.st
16 VTTaken Down
Screenshot of logincoinbasewallet.blogspot.com.mt
logincoinbasewallet.blogspot.com.mt
16 VTTaken Down
Screenshot of m.galabetl075.com
m.galabetl075.com
16 VTTaken Down
Screenshot of m.trustwalleteoj.com
m.trustwalleteoj.com
16 VT
m.trustwalletgvl.com
16 VT
Screenshot of mail.coinmarketcaa.com
mail.coinmarketcaa.com
16 VT
Screenshot of manager-bill.accounts-admin-agency.com
manager-bill.accounts-admin-agency.com
16 VTTaken Down
Screenshot of manisha12332.github.io
manisha12332.github.io
16 VTLive
Screenshot of media-support.busines-help-center.com
media-support.busines-help-center.com
16 VT
Screenshot of mercadolivrecom.github.io
mercadolivrecom.github.io
16 VTLive
Screenshot of meta-business.invoice-ads-process.com
meta-business.invoice-ads-process.com
16 VT
Screenshot of meta-id.invoice-ads-manager.com
meta-id.invoice-ads-manager.com
16 VT
Screenshot of meta-id17634.program-ads-agency.com
meta-id17634.program-ads-agency.com
16 VT
Screenshot of meta-id17639.program-ads-agency.com
meta-id17639.program-ads-agency.com
16 VT
Screenshot of meta-invoice.invoice-ads-manager.com
meta-invoice.invoice-ads-manager.com
16 VT
Screenshot of meta-submission.invoice-ads-manager.com
meta-submission.invoice-ads-manager.com
16 VT
Screenshot of metamaskcard.live
metamaskcard.live
16 VT
Screenshot of metamaskio-auth.tem3.io
metamaskio-auth.tem3.io
16 VTTaken Down
Screenshot of microsave6.godaddysites.com
microsave6.godaddysites.com
16 VTTaken Down
microsoftmailsupports.com
16 VTTaken Down
Screenshot of moon-vote.bond
moon-vote.bond
16 VT
Screenshot of mrjd483.com
mrjd483.com
16 VTTaken Down
Screenshot of nav45666.github.io
nav45666.github.io
16 VTLive
Screenshot of new-uphold.created.app
new-uphold.created.app
16 VTLive
Screenshot of news-pump.fun
news-pump.fun
16 VTLive
Screenshot of nextgamb.cc
nextgamb.cc
16 VTTaken Down
Screenshot of officework24.net
officework24.net
16 VTTaken Down
Screenshot of ojas-03.github.io
ojas-03.github.io
16 VTLive
Screenshot of opportunity4verifiedapply.surge.sh
opportunity4verifiedapply.surge.sh
16 VTLive
ovowhale.com
16 VTTaken Down
Screenshot of pagamento-pedagio.dynv6.net
pagamento-pedagio.dynv6.net
16 VTTaken Down
Screenshot of payment-meta.program-ads-agency.com
payment-meta.program-ads-agency.com
16 VT
Screenshot of pkmbiquu.owner-one.dev
pkmbiquu.owner-one.dev
16 VTTaken Down
preview-coinbase.com
16 VTTaken Down
privnote.site
16 VTTaken Down
Screenshot of probit-global.com
probit-global.com
16 VTTaken Down
Screenshot of qunix-sarvo-biz-lexra-zxbq22526d-bravon.pages.dev
qunix-sarvo-biz-lexra-zxbq22526d-bravon.pages.dev
16 VTTaken Down
Screenshot of raysu929.github.io
raysu929.github.io
16 VTLive
Screenshot of refreshed-minotaur-425702.framer.app
refreshed-minotaur-425702.framer.app
16 VTTaken Down
Screenshot of reimagined-funicular-ivory.vercel.app
reimagined-funicular-ivory.vercel.app
16 VTLive
« Prev ... 12 13 14 15 16 17 18 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

168,238+ domains with security reports

Live Threats

13,282 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence