Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,019Total Detected
89,014Taken Down
50.8%Kill Rate
97.1%VT Coverage
61,310Abuse Reports
Overview Aug 2612,295 Jul 2618,441 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,198
Taken Down
1,406
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of automated-trading.com.tr
automated-trading.com.tr
10 VTTaken Down
Screenshot of bafybeicrx6mxjdmgvh7372dgpwudwaunxrrcmmzyotodztwlzppzgiu5xm.ipfs.dweb.link
bafybeicrx6mxjdmgvh7372dgpwudwaunxrrcmmzyotodztwlzppzgiu5xm.ipfs.dweb.link
10 VTTaken Down
Screenshot of bafybeids32ox432igs5e4nk6fc6juvvuj4tdossnwegpsq7sefoipipwve.ipfs.dweb.link
bafybeids32ox432igs5e4nk6fc6juvvuj4tdossnwegpsq7sefoipipwve.ipfs.dweb.link
10 VTTaken Down
Screenshot of bankomot.cc
bankomot.cc
10 VTLive
Screenshot of bestoptionfxts.pro
bestoptionfxts.pro
10 VTTaken Down
Screenshot of bimodal-oxeliteoriginator.web.app
bimodal-oxeliteoriginator.web.app
10 VTTaken DownWallet Connect Abuse
Screenshot of binance150.com
binance150.com
10 VTLive
Screenshot of bitcoin-exchange-swap.com
bitcoin-exchange-swap.com
10 VT
Screenshot of bitget-walletsecurity.xyz
bitget-walletsecurity.xyz
10 VTTaken DownAngel Drainer
Screenshot of bitgetexchange.app
bitgetexchange.app
10 VTTaken Down
Screenshot of bitgetj.com
bitgetj.com
10 VTLive
Screenshot of blacksidersociety.com
blacksidersociety.com
10 VTLive
Screenshot of bluepointfinancialholdings.pro
bluepointfinancialholdings.pro
10 VTTaken Down
Screenshot of buildon.lol
buildon.lol
10 VTLive
Screenshot of capitalprimeplc.com
capitalprimeplc.com
10 VTTaken Down
Screenshot of cardano2025.live
cardano2025.live
10 VTTaken Down
Screenshot of casebattle.net
casebattle.net
10 VTLive
Screenshot of casesbattle.net
casesbattle.net
10 VTLive
Screenshot of checker-somnia.com
checker-somnia.com
10 VTLiveAngel Drainer
Screenshot of chrome-coinbase-extension.typedream.app
chrome-coinbase-extension.typedream.app
10 VTTaken Down
Screenshot of claim.compoundfinance.cfd
claim.compoundfinance.cfd
10 VTLiveAngel Drainer
Screenshot of coins-achivas.com
coins-achivas.com
10 VTTaken Down
Screenshot of coinswap.ac
coinswap.ac
10 VT
Screenshot of cousdt.com
cousdt.com
10 VTLive
Screenshot of create.alli-ai.network
create.alli-ai.network
10 VTLive
Screenshot of crypto-wallet-recovery.com
crypto-wallet-recovery.com
10 VTTaken Down
Screenshot of curve-fi-dex-faq-en.typedream.app
curve-fi-dex-faq-en.typedream.app
10 VTTaken Down
Screenshot of danawhitememe.com
danawhitememe.com
10 VTLiveWallet Connect Abuse
Screenshot of dashboard-bestwallet.firebaseapp.com
dashboard-bestwallet.firebaseapp.com
10 VTLiveWallet Connect Abuse
Screenshot of dashboard-qubetics.xyz
dashboard-qubetics.xyz
10 VTTaken Down
Screenshot of dex-support-desk.netlify.app
dex-support-desk.netlify.app
10 VTTaken DownWallet Connect Abuse
Screenshot of digitalgainvault.com
digitalgainvault.com
10 VTLive
Screenshot of downnew.coinbaseai.bar
downnew.coinbaseai.bar
10 VTTaken Down
Screenshot of edgeultra.cc
edgeultra.cc
10 VTTaken Down
Screenshot of en-welcome-mmetamask-cdn.typedream.app
en-welcome-mmetamask-cdn.typedream.app
10 VTTaken Down
Screenshot of exo-app.com
exo-app.com
10 VTLive
Screenshot of exo-wallet.com
exo-wallet.com
10 VTLive
Screenshot of extenson-coinbases.typedream.app
extenson-coinbases.typedream.app
10 VTTaken Down
Screenshot of fakebill.vps6s.com
fakebill.vps6s.com
10 VTLive
Screenshot of fameex-login.com
fameex-login.com
10 VT
Screenshot of fastlanex.pro
fastlanex.pro
10 VTTaken Down
Screenshot of fixall-phantomissue.web.app
fixall-phantomissue.web.app
10 VTTaken Down
Screenshot of globalfinwallets.live
globalfinwallets.live
10 VTTaken Down
Screenshot of grimvaris.pro
grimvaris.pro
10 VTTaken Down
Screenshot of gwab46x.life
gwab46x.life
10 VTLive
Screenshot of gwac37x.life
gwac37x.life
10 VTLive
Screenshot of gwae00x.life
gwae00x.life
10 VTLive
Screenshot of gwae65x.life
gwae65x.life
10 VTLive
Screenshot of gwar44x.life
gwar44x.life
10 VTLive
Screenshot of gwax65x.space
gwax65x.space
10 VTTaken Down
Screenshot of gwbj07x.life
gwbj07x.life
10 VTLive
Screenshot of gwbk91x.life
gwbk91x.life
10 VTLive
Screenshot of gweb46x.life
gweb46x.life
10 VTTaken Down
Screenshot of highcapitalinvestment.com
highcapitalinvestment.com
10 VTLive
Screenshot of icei000-sasj.top
icei000-sasj.top
10 VTTaken Down
Screenshot of internationaltether.top
internationaltether.top
10 VTTaken Down
Screenshot of jravanoxsigs.click
jravanoxsigs.click
10 VTLive
jumper.exposed
10 VTTaken DownWallet Connect Abuse
Screenshot of kent226.casino
kent226.casino
10 VTLive
Screenshot of krakendex.net
krakendex.net
10 VTLive
« Prev ... 11 12 13 14 15 16 17 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.