Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

172,286Total Detected
148,620Taken Down
91.6%Kill Rate
94.1%VT Coverage
48,928Abuse Reports
Overview Jun 2613,759 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,094 Jan 268,924 Dec 2511,773 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,334
Taken Down
1,028
Still Live
76%
Kill Rate
111h
Avg Response
9.1
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 226
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 337
MetaMask 142
Trust Wallet 112
Google 100
Trezor 98
Microsoft 97
OKX 95
Solana 84

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,973 🇺🇸 US2,507 🇩🇪 DE302 🇳🇱 NL227 🇬🇧 GB204 🇷🇺 RU164 🇭🇰 HK137 🇫🇷 FR57

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of lobstrrwellet.webflow.io
lobstrrwellet.webflow.io
6 VTTaken Down
Screenshot of luckzo.bet
luckzo.bet
6 VTTaken Down
Screenshot of m.csam.in
m.csam.in
6 VTTaken Down
makealiengreatagain.xyz
6 VTTaken Down
Screenshot of matamsklgzn.gitbook.io
matamsklgzn.gitbook.io
6 VTTaken Down
Screenshot of megashriragavan79-oss.github.io
megashriragavan79-oss.github.io
6 VTLive
Screenshot of metaeth-tge.com
metaeth-tge.com
6 VT
Screenshot of metamask.vip-web3.org
metamask.vip-web3.org
6 VTTaken Down
Screenshot of metamssk.io
metamssk.io
6 VT
Screenshot of midnight-casino.vercel.app
midnight-casino.vercel.app
6 VT
Screenshot of milky.beauty
milky.beauty
6 VTTaken Down
Screenshot of monkeybase67.com
monkeybase67.com
6 VTTaken Down
Screenshot of moonshot-voters.live
moonshot-voters.live
6 VTTaken Down
Screenshot of moonshot-voting.live
moonshot-voting.live
6 VTTaken Down
Screenshot of movexpressdrop.com
movexpressdrop.com
6 VT
Screenshot of myallseasonsinsulation.com
myallseasonsinsulation.com
6 VTTaken Down
Screenshot of mycapitalaswift.com
mycapitalaswift.com
6 VT
Screenshot of myshop-711-com-tw.kkkkxx.link
myshop-711-com-tw.kkkkxx.link
6 VTTaken Down
Screenshot of myssouphldappcdn.wixstudio.com
myssouphldappcdn.wixstudio.com
6 VTTaken Down
nasavexy.com
6 VTTaken Down
Screenshot of nav-daskop-leger.wixstudio.com
nav-daskop-leger.wixstudio.com
6 VTTaken Down
Screenshot of nexawealthinvestments.online
nexawealthinvestments.online
6 VT
Screenshot of nexus-list.top
nexus-list.top
6 VTLive
Screenshot of nexusmarket.sbs
nexusmarket.sbs
6 VTTaken Down
Screenshot of nill-rewards.xyz
nill-rewards.xyz
6 VTTaken Down
Screenshot of noorbloach.github.io
noorbloach.github.io
6 VTLive
Screenshot of official-ledger-live-en.pages.dev
official-ledger-live-en.pages.dev
6 VTTaken Down
Screenshot of officialgithubweb3.pages.dev
officialgithubweb3.pages.dev
6 VTLive
olimpaura.cyou
6 VTTaken Down
Screenshot of onetreeplan.xyz
onetreeplan.xyz
6 VTTaken Down
Screenshot of origindefi-anubis.xyz
origindefi-anubis.xyz
6 VTLive
Screenshot of paololuck.github.io
paololuck.github.io
6 VTLive
Screenshot of pepeofsolana.vip
pepeofsolana.vip
6 VTTaken DownSolana Drainer
Screenshot of polgamb.cc
polgamb.cc
6 VTTaken Down
Screenshot of poly-market.top
poly-market.top
6 VT
Screenshot of portal-variationals.xyz
portal-variationals.xyz
6 VT
ppl-admin-survey.com
6 VTTaken Down
Screenshot of premium0peanseamint10.vercel.app
premium0peanseamint10.vercel.app
6 VTLive
Screenshot of premium0peanseamint8.vercel.app
premium0peanseamint8.vercel.app
6 VTLive
Screenshot of premium0peanseamint9.vercel.app
premium0peanseamint9.vercel.app
6 VTLive
Screenshot of project-en--ledgrlive.pages.dev
project-en--ledgrlive.pages.dev
6 VTLive
Screenshot of pub-9664b5d95af7475c93287f6c0e6fef8c.r2.dev
pub-9664b5d95af7475c93287f6c0e6fef8c.r2.dev
6 VTTaken Down
Screenshot of pumj.fun
pumj.fun
6 VTTaken Down
Screenshot of qfs-ledger.site
qfs-ledger.site
6 VTTaken Down
Screenshot of qfscoldstorage.com
qfscoldstorage.com
6 VT
qtumdestopinstall.xyz
6 VTTaken Down
Screenshot of rafizaman577.github.io
rafizaman577.github.io
6 VTLive
rahul-t0mar.github.io
6 VTLive
Screenshot of ranameetshop.com
ranameetshop.com
6 VTTaken Down
Screenshot of reallocation-solsticefinance.com
reallocation-solsticefinance.com
6 VT
Screenshot of reassistanthlp.top
reassistanthlp.top
6 VT
Screenshot of regeluwzakenvandaagvia9833789.es
regeluwzakenvandaagvia9833789.es
6 VTTaken Down
Screenshot of rj-feiji.com.cn
rj-feiji.com.cn
6 VTTaken Down
robot-desktop.wixstudio.com
6 VTTaken Down
Screenshot of rugmark.me
rugmark.me
6 VTTaken Down
Screenshot of rugpullrun.app
rugpullrun.app
6 VT
Screenshot of rustyrocketman.xyz
rustyrocketman.xyz
6 VTTaken Down
scanbep20.online
6 VTTaken Down
Screenshot of sec-collab.land
sec-collab.land
6 VTTaken Down
secureglobetrade.com
6 VTTaken Down
« Prev ... 56 57 58 59 60 61 62 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

172,286+ domains with security reports

Live Threats

13,594 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence