June 2025 Phishing Threat Report — PhishDestroy Analytics

June 2025 Intelligence Report

4

Taken Down

0

Still Live

100%

Kill Rate

6802h

Avg Response

2.0

Avg VT Score

In June 2025, PhishDestroy detected 4 phishing domains, representing a 100.0% increase from the previous month. Despite the rise in detected domains, the takedown rate remained effective at 75.0%, with 3 domains neutralized. Notably, Infomaniak Network SA, NameSilo, LLC, and PDR Ltd. d/b/a PublicDomainRegistry.com emerged as top abuse registrars. The targeting of apple indicates a shift towards high-value technology brands. The operational impact is positive, with a strong takedown rate, but vigilance is needed for the remaining active domain.

Infomaniak Network SA, NameSilo, LLC, and PDR Ltd. d/b/a PublicDomainRegistry.com are the top abuse registrars, each with 1 domain.
Targeting has shifted towards technology brands, with apple being the sole target this month.
The weaponization of TLDs is diverse, with .click, .live, .org, and .com each hosting 1 domain.
No drainer kits were detected, indicating a potential shift away from wallet drain tactics.
Phishing infrastructure is primarily based in the US with 3 domains, and 1 in CH.
Detection-to-takedown efficiency remains strong at 75.0%, but vigilance is required for the 1 domain still active.

Outlook

Expect continued targeting of high-value brands like apple in the coming month. Defenders should monitor Infomaniak Network SA and NameSilo, LLC for potential escalation due to their involvement in abuse. Watch for any emerging patterns in TLD usage and geographic hosting shifts.

Full Data on GitHub Browse All Domains Live Threats