Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

192,996Total Detected
87,144Taken Down
49%Kill Rate
97.1%VT Coverage
61,305Abuse Reports
Overview Aug 2612,273 Jul 2618,440 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,196
Taken Down
1,432
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,434 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of conecwinlab.com.winpopcach.com
conecwinlab.com.winpopcach.com
12 VTTaken Down
Screenshot of credit.starlngs.com
credit.starlngs.com
12 VTTaken Down
Screenshot of crystalglobalwealth.com
crystalglobalwealth.com
12 VTLive
Screenshot of cs2-skin.com
cs2-skin.com
12 VTLive
Screenshot of czbnb.bet
czbnb.bet
12 VTTaken Down
Screenshot of dankdkk.com
dankdkk.com
12 VTLive
Screenshot of dcqwp.com
dcqwp.com
12 VTLive
Screenshot of decentralizedchain.on.fleek.co
decentralizedchain.on.fleek.co
12 VTLive
Screenshot of defil-lama.github.io
defil-lama.github.io
12 VTTaken Down
Screenshot of diligenceoilventure.com.bitblizer.com
diligenceoilventure.com.bitblizer.com
12 VTLive
Screenshot of discordadp.com
discordadp.com
12 VTLive
Screenshot of ecobrokercapital.com
ecobrokercapital.com
12 VTTaken Down
Screenshot of enacoin-newbridge.com
enacoin-newbridge.com
12 VTTaken DownIce Phishing
Screenshot of enhance.alli-ai.network
enhance.alli-ai.network
12 VTLive
Screenshot of ethereum-mixer.exchange
ethereum-mixer.exchange
12 VTLive
Screenshot of etherexes.xyz
etherexes.xyz
12 VTLive
Screenshot of eurofinserviceltd.com
eurofinserviceltd.com
12 VTLive
Screenshot of event-crypto.com
event-crypto.com
12 VTLive
Screenshot of fastmovedeliverycompany.com
fastmovedeliverycompany.com
12 VTTaken Down
Screenshot of finosagebank.com
finosagebank.com
12 VTTaken Down
Screenshot of firmtradex.icu
firmtradex.icu
12 VTTaken Down
Screenshot of firstinsurersfcu.com
firstinsurersfcu.com
12 VTLive
Screenshot of flarex.bet
flarex.bet
12 VTLive
Screenshot of flrclaimreserve.live
flrclaimreserve.live
12 VTTaken Down
Screenshot of flrconnectportal.live
flrconnectportal.live
12 VTTaken DownIce Phishing
Screenshot of foreverplus.net
foreverplus.net
12 VTLive
Screenshot of gambitcasinos.com
gambitcasinos.com
12 VTLive
Screenshot of genesisicu.com
genesisicu.com
12 VTTaken Down
Screenshot of gettrumpairdrop.web.app
gettrumpairdrop.web.app
12 VTLive
Screenshot of grandtrust.ltd
grandtrust.ltd
12 VTLive
Screenshot of gwat78x.xyz
gwat78x.xyz
12 VTLive
Screenshot of halifaxgrowth.com
halifaxgrowth.com
12 VTLive
Screenshot of icerinkcapital.com
icerinkcapital.com
12 VTLive
Screenshot of ksm-china.com
ksm-china.com
12 VTLive
Screenshot of layerchain.net.ng
layerchain.net.ng
12 VTTaken Down
Screenshot of ledger-defi.firebaseapp.com
ledger-defi.firebaseapp.com
12 VTLive
Screenshot of ledger-report.com
ledger-report.com
12 VTTaken Down
Screenshot of ledger-walletlink.com
ledger-walletlink.com
12 VTTaken Down
Screenshot of ledgerprotrade.com
ledgerprotrade.com
12 VTTaken Down
Screenshot of littelepepe.com
littelepepe.com
12 VTLive
Screenshot of littlepepo.com
littlepepo.com
12 VTTaken DownAngel Drainer
Screenshot of lumozairdrop.live
lumozairdrop.live
12 VTLive
Screenshot of metasingle.id
metasingle.id
12 VTTaken Down
Screenshot of mexswinb.top
mexswinb.top
12 VTLive
Screenshot of multiconnectionapp.com
multiconnectionapp.com
12 VTLive
Screenshot of neopepe.digital
neopepe.digital
12 VTLive
Screenshot of orbix-finance.com
orbix-finance.com
12 VTTaken Down
Screenshot of paxosgift.com
paxosgift.com
12 VTLiveWallet Connect Abuse
Screenshot of pepechained.com
pepechained.com
12 VTLive
Screenshot of playfortune.cc
playfortune.cc
12 VTLive
Screenshot of pudgypenguin.games
pudgypenguin.games
12 VTLiveAngel Drainer
Screenshot of pump.fund
pump.fund
12 VTLive
Screenshot of qwixbet.com
qwixbet.com
12 VTLive
Screenshot of rabdy-app.com
rabdy-app.com
12 VTLive
Screenshot of rainbowaz.com
rainbowaz.com
12 VTLive
Screenshot of regitbex.com
regitbex.com
12 VTLive
Screenshot of roblox.com.bo
roblox.com.bo
12 VTLive
Screenshot of safe.pal-extension.cc
safe.pal-extension.cc
12 VT
Screenshot of satrixmarket.live
satrixmarket.live
12 VTLive
Screenshot of scproexperts.com
scproexperts.com
12 VTLive
« Prev ... 7 8 9 10 11 12 13 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.