Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

170,767Total Detected
148,623Taken Down
92.3%Kill Rate
94%VT Coverage
47,971Abuse Reports
Overview Jun 2612,240 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,094 Jan 268,924 Dec 2511,773 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,420
Taken Down
942
Still Live
77.2%
Kill Rate
111h
Avg Response
9.1
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 226
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 337
MetaMask 142
Trust Wallet 112
Google 100
Trezor 98
Microsoft 97
OKX 95
Solana 84

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,973 🇺🇸 US2,507 🇩🇪 DE302 🇳🇱 NL227 🇬🇧 GB204 🇷🇺 RU164 🇭🇰 HK137 🇫🇷 FR57

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of ledgar-com-strat.pages.dev
ledgar-com-strat.pages.dev
9 VTLive
Screenshot of ledgor-walet-hardwar-uss.pages.dev
ledgor-walet-hardwar-uss.pages.dev
9 VTLive
Screenshot of live-leedgar-eu-us.pages.dev
live-leedgar-eu-us.pages.dev
9 VTLive
Screenshot of live-leger.plasmic.run
live-leger.plasmic.run
9 VTLive
Screenshot of liveinn.pt
liveinn.pt
9 VT
Screenshot of lobstrsupport.web.app
lobstrsupport.web.app
9 VTLive
Screenshot of m.bangauto.net
m.bangauto.net
9 VTTaken Down
m.trustwallet-web3.com.cn
9 VTTaken Down
Screenshot of mail-security-world--eduardoperez65.replit.app
mail-security-world--eduardoperez65.replit.app
9 VTTaken Down
Screenshot of megaethx.com
megaethx.com
9 VT
migrate-uwu.live
9 VTTaken Down
Screenshot of myatomic.wixstudio.com
myatomic.wixstudio.com
9 VTTaken Down
Screenshot of naciona1simplisdansm.netlify.app
naciona1simplisdansm.netlify.app
9 VTTaken Down
Screenshot of nonesecure.xyz
nonesecure.xyz
9 VTTaken Down
Screenshot of nwexo.bet
nwexo.bet
9 VTTaken Down
Screenshot of official-ledgre-eng-main.pages.dev
official-ledgre-eng-main.pages.dev
9 VTLive
Screenshot of origindefi-bonus.lol
origindefi-bonus.lol
9 VTTaken Down
Screenshot of otpnomor.com
otpnomor.com
9 VTLive
Screenshot of peaksballs.com
peaksballs.com
9 VTTaken Down
Screenshot of pfclaim.live
pfclaim.live
9 VTTaken Down
platforms-liveapp.wixstudio.com
9 VTTaken Down
primecorecpt.org
9 VTTaken Down
Screenshot of psyop.netlify.app
psyop.netlify.app
9 VTLive
pub-4e0d515d9c79417e8b4042dfa120d149.r2.dev
9 VTTaken Down
Screenshot of quick-trustwallet.com
quick-trustwallet.com
9 VTTaken Down
Screenshot of raushan-k15.github.io
raushan-k15.github.io
9 VTLive
Screenshot of reports-ledgr-io.pages.dev
reports-ledgr-io.pages.dev
9 VTTaken Down
Screenshot of rimee-web.github.io
rimee-web.github.io
9 VTLive
Screenshot of s.edoctransfer.com
s.edoctransfer.com
9 VTTaken Down
Screenshot of saraghrar.scholarlumni.info
saraghrar.scholarlumni.info
9 VTTaken Down
schalk078.github.io
9 VTLive
Screenshot of scratcher.lol
scratcher.lol
9 VT
Screenshot of server.852852.vip
server.852852.vip
9 VTTaken Down
Screenshot of sgaibingx.com
sgaibingx.com
9 VTTaken Down
Screenshot of shashankagency.com
shashankagency.com
9 VTTaken Down
Screenshot of sol-checker.com
sol-checker.com
9 VTTaken Down
Screenshot of solaitransfer.com
solaitransfer.com
9 VTTaken Down
Screenshot of solflare-web.pages.dev
solflare-web.pages.dev
9 VTTaken DownSolana Drainer
Screenshot of songshuym.com
songshuym.com
9 VTTaken Down
Screenshot of soxugamb.com
soxugamb.com
9 VTTaken Down
Screenshot of sphincs.lol
sphincs.lol
9 VTTaken Down
Screenshot of staging.autodiscover.patiobydesign.com
staging.autodiscover.patiobydesign.com
9 VTTaken Down
Screenshot of startdesktop-ledgr.wixstudio.com
startdesktop-ledgr.wixstudio.com
9 VTTaken Down
Screenshot of started-lives-wlt.pages.dev
started-lives-wlt.pages.dev
9 VTLive
Screenshot of steamcomummity.ru
steamcomummity.ru
9 VTTaken Down
Screenshot of stemguard-verify.world
stemguard-verify.world
9 VTTaken Down
Screenshot of swap.trxdr.com
swap.trxdr.com
9 VT
Screenshot of t-mobile.cvexkp.top
t-mobile.cvexkp.top
9 VTTaken Down
Screenshot of t-mobile.cyzpre.top
t-mobile.cyzpre.top
9 VTTaken Down
Screenshot of t-mobile.estauf.top
t-mobile.estauf.top
9 VTTaken Down
Screenshot of t-mobile.mctsqk.top
t-mobile.mctsqk.top
9 VTTaken Down
t-mobile.mpuyjd.top
9 VTTaken Down
Screenshot of t-mobile.njmgtq.top
t-mobile.njmgtq.top
9 VTTaken Down
Screenshot of t-mobile.rnkbgt.top
t-mobile.rnkbgt.top
9 VTTaken Down
t-mobile.sgepld.top
9 VTTaken Down
Screenshot of t-mobile.yqjvan.top
t-mobile.yqjvan.top
9 VTTaken Down
Screenshot of tasmanfx.cyou
tasmanfx.cyou
9 VTTaken Down
Screenshot of tasmanfx.shop
tasmanfx.shop
9 VTTaken Down
tels-ra-helpcenter.pages.dev
9 VTTaken Down
Screenshot of test.correo.patiobydesign.com
test.correo.patiobydesign.com
9 VTTaken Down
« Prev ... 47 48 49 50 51 52 53 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

170,767+ domains with security reports

Live Threats

12,435 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence