Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

170,792Total Detected
148,623Taken Down
92.3%Kill Rate
94%VT Coverage
47,989Abuse Reports
Overview Jun 2612,265 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,094 Jan 268,924 Dec 2511,773 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,420
Taken Down
942
Still Live
77.2%
Kill Rate
111h
Avg Response
9.1
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 226
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 337
MetaMask 142
Trust Wallet 112
Google 100
Trezor 98
Microsoft 97
OKX 95
Solana 84

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,973 🇺🇸 US2,507 🇩🇪 DE302 🇳🇱 NL227 🇬🇧 GB204 🇷🇺 RU164 🇭🇰 HK137 🇫🇷 FR57

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of dobcas.com
dobcas.com
8 VTTaken Down
Screenshot of doc-exodusweb3-web-access.tem3.io
doc-exodusweb3-web-access.tem3.io
8 VTTaken Down
Screenshot of dpd.plztrqnvxm.cyou
dpd.plztrqnvxm.cyou
8 VTTaken Down
dpd.plztrvmnxq.cyou
8 VTTaken Down
dpd.rqxplmnvtz.cyou
8 VTTaken Down
Screenshot of earn-crypto.site
earn-crypto.site
8 VTTaken Down
Screenshot of en-us-exidos.pages.dev
en-us-exidos.pages.dev
8 VTTaken Down
Screenshot of exodesweb3-en.pages.dev
exodesweb3-en.pages.dev
8 VTTaken Down
Screenshot of expdelvserv.live
expdelvserv.live
8 VTTaken Down
Screenshot of faceit-clubs-verify.com
faceit-clubs-verify.com
8 VT
Screenshot of fastpxtrades.com.eptub.com
fastpxtrades.com.eptub.com
8 VTTaken Down
Screenshot of fc2095.pro
fc2095.pro
8 VTTaken Down
Screenshot of files.coinbaseaba.com
files.coinbaseaba.com
8 VTTaken Down
Screenshot of fortcase.pro
fortcase.pro
8 VTTaken Down
Screenshot of fortinfo.live
fortinfo.live
8 VTTaken Down
Screenshot of fortop.pro
fortop.pro
8 VTTaken Down
Screenshot of gloexpress.icu
gloexpress.icu
8 VTTaken Down
Screenshot of gro45h.icu
gro45h.icu
8 VTTaken Down
growth-techfunds.live
8 VT
Screenshot of hally.ws
hally.ws
8 VTTaken Down
Screenshot of hmsfuar.com
hmsfuar.com
8 VTTaken Down
Screenshot of hometrazr.wixstudio.com
hometrazr.wixstudio.com
8 VTTaken Down
httppss-roblox.co
8 VTTaken Down
hyperliquidweb-email.pages.dev
8 VTTaken Down
Screenshot of iforget.ubicacion-cloud.info
iforget.ubicacion-cloud.info
8 VTTaken Down
io-stake-it.icu
8 VTTaken Down
Screenshot of iscanxonline.fun
iscanxonline.fun
8 VTTaken Down
Screenshot of jstswap.com
jstswap.com
8 VT
Screenshot of krakelink.cc
krakelink.cc
8 VT
Screenshot of layconf80-boop.github.io
layconf80-boop.github.io
8 VTLive
Screenshot of learn-live-s-wlt.pages.dev
learn-live-s-wlt.pages.dev
8 VTLive
Screenshot of learn-lives.pages.dev
learn-lives.pages.dev
8 VTLive
Screenshot of ledgar-live-ion.pages.dev
ledgar-live-ion.pages.dev
8 VTLive
Screenshot of legor-dsktp-liv.pages.dev
legor-dsktp-liv.pages.dev
8 VTLive
Screenshot of libredatavere-fr.com
libredatavere-fr.com
8 VTTaken Down
Screenshot of liveledgr-en-us.pages.dev
liveledgr-en-us.pages.dev
8 VTLive
Screenshot of lobstraccountlogin.webflow.io
lobstraccountlogin.webflow.io
8 VTTaken Down
Screenshot of lobstrvalltt.gitbook.io
lobstrvalltt.gitbook.io
8 VTTaken Down
Screenshot of lozegamb.com
lozegamb.com
8 VT
Screenshot of meteoraswap.pages.dev
meteoraswap.pages.dev
8 VTTaken Down
Screenshot of moonblast.app
moonblast.app
8 VTTaken Down
Screenshot of more-ledger-en-faq.pages.dev
more-ledger-en-faq.pages.dev
8 VTLive
Screenshot of muskjetx.com
muskjetx.com
8 VTTaken Down
Screenshot of nextepochmarket.xyz
nextepochmarket.xyz
8 VTTaken Down
Screenshot of nhnarticle.cafe
nhnarticle.cafe
8 VTTaken Down
nomaannxx01-cloud.github.io
8 VTLive
Screenshot of noris.capital
noris.capital
8 VTTaken Down
Screenshot of nuevo-caso89273.iceiy.com
nuevo-caso89273.iceiy.com
8 VTTaken Down
Screenshot of opneclawai.top
opneclawai.top
8 VT
Screenshot of optswiftonline.online
optswiftonline.online
8 VTTaken Down
Screenshot of parvin-akter.github.io
parvin-akter.github.io
8 VTLive
Screenshot of payments-cryptomus.com
payments-cryptomus.com
8 VTTaken Down
Screenshot of plogamb.com
plogamb.com
8 VTTaken Down
Screenshot of polymarket.limited
polymarket.limited
8 VTTaken Down
Screenshot of pooja-singh16.github.io
pooja-singh16.github.io
8 VTLive
Screenshot of publicsuite-trezr.wixstudio.com
publicsuite-trezr.wixstudio.com
8 VTTaken Down
Screenshot of pump-streams.fun
pump-streams.fun
8 VTTaken Down
Screenshot of pumpeasy.fun
pumpeasy.fun
8 VTTaken Down
Screenshot of q48r8.com
q48r8.com
8 VT
Screenshot of rahulkrs9142.github.io
rahulkrs9142.github.io
8 VTLive
« Prev ... 49 50 51 52 53 54 55 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

170,792+ domains with security reports

Live Threats

12,457 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence