June 2025 Phishing Threat Report — PhishDestroy Analytics

Overview May 261,960 Apr 2615,640 Mar 2618,821 Feb 2642,102 Jan 268,930 Dec 2511,773 Nov 2512,579 Oct 258,841 Sep 257,307 Aug 253,788 Jul 25700 Jun 254

June 2025 Intelligence Report

Taken Down

Still Live

50%

Kill Rate

6043h

Avg Response

2.0

Avg VT Score

In June 2025, PhishDestroy detected 4 phishing domains, representing a 100.0% increase from the previous month. Despite the rise in detected domains, the takedown rate remained effective at 75.0%, with 3 domains neutralized. Notably, Infomaniak Network SA, NameSilo, LLC, and PDR Ltd. d/b/a PublicDomainRegistry.com emerged as top abuse registrars. The targeting of apple indicates a shift towards high-value technology brands. The operational impact is positive, with a strong takedown rate, but vigilance is needed for the remaining active domain.

Infomaniak Network SA, NameSilo, LLC, and PDR Ltd. d/b/a PublicDomainRegistry.com are the top abuse registrars, each with 1 domain.
Targeting has shifted towards technology brands, with apple being the sole target this month.
The weaponization of TLDs is diverse, with .click, .live, .org, and .com each hosting 1 domain.
No drainer kits were detected, indicating a potential shift away from wallet drain tactics.
Phishing infrastructure is primarily based in the US with 3 domains, and 1 in CH.
Detection-to-takedown efficiency remains strong at 75.0%, but vigilance is required for the 1 domain still active.

Outlook

Expect continued targeting of high-value brands like apple in the coming month. Defenders should monitor Infomaniak Network SA and NameSilo, LLC for potential escalation due to their involvement in abuse. Watch for any emerging patterns in TLD usage and geographic hosting shifts.

Full Data on GitHub Browse All Domains Live Threats