Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

174,414Total Detected
150,628Taken Down
92%Kill Rate
94.1%VT Coverage
50,178Abuse Reports
Overview Jul 261,504 Jun 2614,384 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,094 Jan 268,924 Dec 2511,772 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,402
Taken Down
953
Still Live
76.9%
Kill Rate
111h
Avg Response
9.1
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 226
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 337
MetaMask 142
Trust Wallet 112
Google 100
Microsoft 98
Trezor 98
OKX 95
Solana 84

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,973 🇺🇸 US2,507 🇩🇪 DE302 🇳🇱 NL227 🇬🇧 GB204 🇷🇺 RU164 🇭🇰 HK137 🇫🇷 FR57

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

recovery-ekubo.org
2 VTTaken Down
Screenshot of redeem-pump.fun
redeem-pump.fun
2 VTTaken Down
Screenshot of refunds-trustwallet.com
refunds-trustwallet.com
2 VTTaken Down
Screenshot of registration.plums.network
registration.plums.network
2 VT
Screenshot of restore-iedgeriive.su
restore-iedgeriive.su
2 VTTaken Down
Screenshot of revo-rewards.live
revo-rewards.live
2 VTTaken Down
Screenshot of revoke-tydro.com
revoke-tydro.com
2 VTTaken Down
Screenshot of revokescash.app
revokescash.app
2 VTTaken Down
Screenshot of rewardblockchain.com
rewardblockchain.com
2 VTTaken Down
Screenshot of rewards-token.works
rewards-token.works
2 VTTaken Down
Screenshot of rhoneswiss.online
rhoneswiss.online
2 VTTaken Down
Screenshot of roboxto.xyz
roboxto.xyz
2 VTTaken Down
roc-avoirival.com
2 VTTaken Down
Screenshot of rockwalletpc.com
rockwalletpc.com
2 VTTaken Down
Screenshot of rugspulls-pump.fun
rugspulls-pump.fun
2 VTTaken Down
Screenshot of rumahtotologin.com
rumahtotologin.com
2 VTTaken Down
Screenshot of safeguardsmartprotocol.site
safeguardsmartprotocol.site
2 VTTaken Down
safepall-io.pages.dev
2 VTLive
Screenshot of sanicthehadgeheg.xyz
sanicthehadgeheg.xyz
2 VTTaken Down
Screenshot of scfplc.com
scfplc.com
2 VTTaken Down
Screenshot of seakey.vn
seakey.vn
2 VTTaken Down
Screenshot of secure-coinmama.com
secure-coinmama.com
2 VTTaken Down
Screenshot of secure-web.sbs
secure-web.sbs
2 VTTaken Down
Screenshot of send-dt3.netlify.app
send-dt3.netlify.app
2 VTLive
send-usdt-066.netlify.app
2 VTLive
sent-dt2.netlify.app
2 VTLive
Screenshot of sharkcat.player2.world
sharkcat.player2.world
2 VTTaken Down
Screenshot of simpleswapdex.com
simpleswapdex.com
2 VTTaken Down
Screenshot of sirmvit-badak178.pages.dev
sirmvit-badak178.pages.dev
2 VTLive
Screenshot of skyeco-vote.xyz
skyeco-vote.xyz
2 VTTaken Down
Screenshot of slon-12cc.com
slon-12cc.com
2 VTTaken Down
Screenshot of slon7---cc.ru
slon7---cc.ru
2 VTTaken Down
Screenshot of smart-appmultiverser.site
smart-appmultiverser.site
2 VTTaken Down
smartbnb.network
2 VTTaken Down
Screenshot of smartchaincoinmarket.com
smartchaincoinmarket.com
2 VTTaken Down
Screenshot of smartholder.org
smartholder.org
2 VTTaken Down
Screenshot of sms-online.co
sms-online.co
2 VTTaken Down
Screenshot of sn-baza.one
sn-baza.one
2 VTTaken Down
Screenshot of snapshot-hyperfoundations.com
snapshot-hyperfoundations.com
2 VTTaken Down
Screenshot of sol-matrix.xyz
sol-matrix.xyz
2 VTTaken Down
solbot.top
2 VTTaken Down
Screenshot of solbot1.top
solbot1.top
2 VTTaken Down
Screenshot of solidefilabs.com
solidefilabs.com
2 VTTaken Down
solixway.app
2 VT
Screenshot of solsanctum.xyz
solsanctum.xyz
2 VTTaken Down
Screenshot of sparkdex.icu
sparkdex.icu
2 VTTaken Down
Screenshot of sparkdmint.live
sparkdmint.live
2 VTTaken Down
Screenshot of spectrumfi.app
spectrumfi.app
2 VTTaken Down
Screenshot of speedfieldlogistics.com
speedfieldlogistics.com
2 VT
Screenshot of spxtoken.xyz
spxtoken.xyz
2 VTTaken Down
ssoupold.wixstudio.com
2 VTTaken Down
Screenshot of stabble.co
stabble.co
2 VTTaken Down
Screenshot of staging.admin.apps.pdwithchloe.com
staging.admin.apps.pdwithchloe.com
2 VTTaken Down
Screenshot of stake-1v1.pages.dev
stake-1v1.pages.dev
2 VTTaken Down
Screenshot of started-ledgr-n.pages.dev
started-ledgr-n.pages.dev
2 VTLive
Screenshot of started-ledgrocom.wixstudio.com
started-ledgrocom.wixstudio.com
2 VTTaken Down
Screenshot of starting--ledgared.pages.dev
starting--ledgared.pages.dev
2 VTLive
startsio-trezzr.wixstudio.com
2 VTTaken Down
Screenshot of streamyard.host
streamyard.host
2 VTTaken Down
swap-meet.app
2 VTTaken Down
« Prev ... 88 89 90 91 92 93 94 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

174,414+ domains with security reports

Live Threats

13,164 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence