Threat Intelligence Dashboard

May 2026 Report

Detailed threat intelligence for 7,021 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

174,014Total Detected
149,436Taken Down
91.4%Kill Rate
94.1%VT Coverage
49,945Abuse Reports
Overview Jul 261,103 Jun 2614,384 May 267,021 Apr 2615,633 Mar 2618,814 Feb 2642,094 Jan 268,924 Dec 2511,773 Nov 2512,578 Oct 258,841 Sep 257,306 Aug 253,788 Jul 25700 Jun 253
May 2026 Intelligence Report 55.1%
7,021
5,358
Taken Down
998
Still Live
76.3%
Kill Rate
111h
Avg Response
9.1
Avg VT Score
Full Data on GitHub Browse All Domains Live Threats

Top Registrars

RegistrarDomains
GoDaddy.com, LLC 928
NICENIC INTERNATIONAL GROUP CO., LIMITED 694
Cloudflare, Inc. 641
PDR Ltd. d/b/a PublicDomainRegistry.com 388
Global Domain Group LLC 290
GitHub, Inc. 228
NameSilo, LLC 226
Gransy, s.r.o. 200

Targeted Brands

BrandDomains
Ledger 337
MetaMask 142
Trust Wallet 112
Google 100
Microsoft 98
Trezor 98
OKX 95
Solana 84

Top TLDs

.com2,531 .dev597 .io447 .app409 .top296 .live249 .xyz220 .org184

Hosting Countries

🇨🇦 CA2,973 🇺🇸 US2,507 🇩🇪 DE302 🇳🇱 NL227 🇬🇧 GB204 🇷🇺 RU164 🇭🇰 HK137 🇫🇷 FR57

Active Drainer Kits

Solana Drainer30 Angel Drainer6 Wallet Connect Abuse2 Inferno Drainer2

May 2026 Domains (7,021)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of defareo.com
defareo.com
1 VTTaken Down
Screenshot of defi-nibiru.pages.dev
defi-nibiru.pages.dev
1 VTLive
Screenshot of defisofi.com
defisofi.com
1 VTTaken Down
Screenshot of defult-leadger-live-en.pages.dev
defult-leadger-live-en.pages.dev
1 VTTaken Down
Screenshot of delulu69.site
delulu69.site
1 VTTaken Down
dem-coinsqr-io.pages.dev
1 VTTaken Down
Screenshot of demo.test.m.rkingoods.com
demo.test.m.rkingoods.com
1 VTTaken Down
denoxplay.com
1 VT
Screenshot of departamentodeguiassconsultassc.vercel.app
departamentodeguiassconsultassc.vercel.app
1 VTLive
Screenshot of departamentoveiculares.com
departamentoveiculares.com
1 VTTaken Down
detran-sc-ipva-gov-consulta.com
1 VTTaken Down
dex-baseswaap--eng.pages.dev
1 VTLive
Screenshot of dexbridge.app
dexbridge.app
1 VTTaken Down
Screenshot of dexrpexplorer.org
dexrpexplorer.org
1 VTTaken Down
Screenshot of dgbfaucet.pages.dev
dgbfaucet.pages.dev
1 VTLive
Screenshot of diamond-purse.com
diamond-purse.com
1 VTTaken Down
Screenshot of diamondtimer.org
diamondtimer.org
1 VTTaken Down
Screenshot of didenti-odontologia.pages.dev
didenti-odontologia.pages.dev
1 VTLive
Screenshot of dinexion.live
dinexion.live
1 VTTaken Down
Screenshot of dinodlop.com
dinodlop.com
1 VTTaken Down
Screenshot of direct-trust-wallet.com
direct-trust-wallet.com
1 VTTaken Down
Screenshot of discordbot.app
discordbot.app
1 VTTaken Down
Screenshot of discordseasons.pro
discordseasons.pro
1 VTTaken Down
Screenshot of dividendfinancefx.com
dividendfinancefx.com
1 VTTaken Down
Screenshot of dosugkrasnodara.pro
dosugkrasnodara.pro
1 VTTaken Down
Screenshot of drunkid.com
drunkid.com
1 VTTaken Down
Screenshot of earn-rxrfa3.pages.dev
earn-rxrfa3.pages.dev
1 VTLive
Screenshot of earns-dexscreener.com
earns-dexscreener.com
1 VTTaken Down
Screenshot of eboards.info
eboards.info
1 VTTaken Down
Screenshot of echo-uni.com
echo-uni.com
1 VTTaken Down
Screenshot of ecosystems-megaeth.app
ecosystems-megaeth.app
1 VTTaken Down
edf-energyservices.com
1 VTTaken Down
Screenshot of edgefigurex.sbs
edgefigurex.sbs
1 VTTaken Down
Screenshot of ekiden.exchange
ekiden.exchange
1 VTTaken Down
Screenshot of ekidenfi.com
ekidenfi.com
1 VTTaken Down
Screenshot of elilien.cl
elilien.cl
1 VTTaken Down
Screenshot of eloneln.xyz
eloneln.xyz
1 VTTaken Down
Screenshot of en-ledagr-live-learn.pages.dev
en-ledagr-live-learn.pages.dev
1 VTLive
Screenshot of en-us-stakecasino.com
en-us-stakecasino.com
1 VTTaken Down
Screenshot of epicheck.top
epicheck.top
1 VTTaken Down
Screenshot of equitehubs.com
equitehubs.com
1 VTTaken Down
Screenshot of etherbox.org
etherbox.org
1 VTTaken Down
Screenshot of ethereum-4a0b7.genie.jellyjelly.com
ethereum-4a0b7.genie.jellyjelly.com
1 VTTaken Down
Screenshot of ethereum-casinocanada.ca
ethereum-casinocanada.ca
1 VTTaken Down
Screenshot of evefort.lol
evefort.lol
1 VTTaken Down
Screenshot of evelypartners.com
evelypartners.com
1 VTTaken Down
event-bonkcoin.com
1 VTTaken Down
Screenshot of event-virl.pages.dev
event-virl.pages.dev
1 VTLive
Screenshot of events-folks-net.pages.dev
events-folks-net.pages.dev
1 VTTaken Down
Screenshot of evmpiler.com
evmpiler.com
1 VTTaken Down
evotella.com
1 VTTaken Down
Screenshot of exchange.syntnetix.com
exchange.syntnetix.com
1 VTTaken Down
Screenshot of excitedcollegegirls.com
excitedcollegegirls.com
1 VTTaken Down
exploit-aave.xyz
1 VTTaken Down
Screenshot of express-deliveries.org
express-deliveries.org
1 VTTaken Down
Screenshot of f44.to
f44.to
1 VTTaken Down
Screenshot of falcowin.com
falcowin.com
1 VT
Screenshot of farawex.com
farawex.com
1 VTTaken Down
Screenshot of fatelargocoglionazzi.com
fatelargocoglionazzi.com
1 VTTaken Down
Screenshot of fazendaltda2026.weebly.com
fazendaltda2026.weebly.com
1 VTTaken Down
« Prev ... 94 95 96 97 98 99 100 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.

Domain Hub

174,014+ domains with security reports

Live Threats

14,078 phishing sites still online

DestroyList on GitHub

Open-source daily phishing domain feeds

About PhishDestroy

Independent anti-phishing threat intelligence