Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,016Total Detected
89,014Taken Down
50.8%Kill Rate
97.1%VT Coverage
61,308Abuse Reports
Overview Aug 2612,292 Jul 2618,441 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,198
Taken Down
1,406
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of zenafex.com
zenafex.com
10 VTLiveWallet Connect Abuse
Screenshot of 1wjpvy.life
1wjpvy.life
9 VTTaken Down
Screenshot of 247de.xyz
247de.xyz
9 VTTaken Down
Screenshot of aa-okx.com
aa-okx.com
9 VTTaken Down
Screenshot of account.teslastocks-inc.net
account.teslastocks-inc.net
9 VTLive
Screenshot of acecapitalpro.com.bitltdpro.com
acecapitalpro.com.bitltdpro.com
9 VTTaken Down
Screenshot of activeglobalskymining.click
activeglobalskymining.click
9 VTTaken Down
Screenshot of airdropsolananetwork.netlify.app
airdropsolananetwork.netlify.app
9 VTTaken Down
Screenshot of apex-capitalrise.org
apex-capitalrise.org
9 VTTaken Down
Screenshot of apexprimelimited.org
apexprimelimited.org
9 VTTaken Down
Screenshot of app.gemspace.io
app.gemspace.io
9 VTTaken Down
Screenshot of arablantic.com
arablantic.com
9 VTTaken Down
Screenshot of avwe.qisx.pro
avwe.qisx.pro
9 VTLiveAngel Drainer
Screenshot of baselinkexplore.net
baselinkexplore.net
9 VTTaken Down
Screenshot of binance170.com
binance170.com
9 VTLive
Screenshot of binance198.com
binance198.com
9 VTLive
Screenshot of bitprotradezone.live
bitprotradezone.live
9 VTTaken Down
Screenshot of bittraderltd.com
bittraderltd.com
9 VTTaken Down
Screenshot of blocknode.ix.tc
blocknode.ix.tc
9 VTTaken Down
Screenshot of btc-mixers.to
btc-mixers.to
9 VTTaken Down
Screenshot of capitalponential.com
capitalponential.com
9 VTLive
Screenshot of centraldocumentzone.ru
centraldocumentzone.ru
9 VTTaken Down
Screenshot of cir-acess.com
cir-acess.com
9 VTTaken Down
Screenshot of coineehub.com
coineehub.com
9 VTTaken Down
Screenshot of coinexb2.com
coinexb2.com
9 VTLive
Screenshot of convexfinace.com
convexfinace.com
9 VT
Screenshot of daomine.top
daomine.top
9 VTTaken Down
Screenshot of defilama-defi-info.typedream.app
defilama-defi-info.typedream.app
9 VTTaken Down
Screenshot of deluxefinanceinvestment.com.mercatorgenius.org
deluxefinanceinvestment.com.mercatorgenius.org
9 VTTaken Down
Screenshot of dexautomate.web.app
dexautomate.web.app
9 VTTaken Down
Screenshot of divergentindexconcepts.xyz
divergentindexconcepts.xyz
9 VTLiveAngel Drainer
Screenshot of dogeqfs.io
dogeqfs.io
9 VTLive
Screenshot of falconxchangexrp.net
falconxchangexrp.net
9 VTLive
Screenshot of finhubtrade.ltd
finhubtrade.ltd
9 VTLive
Screenshot of flareclaim-spark.net
flareclaim-spark.net
9 VTTaken Down
Screenshot of gacorlek12.com
gacorlek12.com
9 VTLive
Screenshot of globalmagicstone.com
globalmagicstone.com
9 VTLive
Screenshot of greenarrowtrades.com
greenarrowtrades.com
9 VTTaken Down
Screenshot of gwae32x.life
gwae32x.life
9 VTTaken Down
Screenshot of gwal21x.life
gwal21x.life
9 VTTaken Down
Screenshot of gwal58x.life
gwal58x.life
9 VTTaken Down
Screenshot of gwam71x.life
gwam71x.life
9 VTTaken Down
Screenshot of gwbg89x.life
gwbg89x.life
9 VTTaken Down
Screenshot of gwbk87x.life
gwbk87x.life
9 VTTaken Down
Screenshot of gwbp16x.life
gwbp16x.life
9 VTTaken Down
Screenshot of gwcb23x.life
gwcb23x.life
9 VTTaken Down
Screenshot of gwch15x.life
gwch15x.life
9 VTTaken Down
Screenshot of gwcy00x.life
gwcy00x.life
9 VTTaken Down
Screenshot of gwem15x.life
gwem15x.life
9 VTTaken Down
Screenshot of gwev09x.life
gwev09x.life
9 VTTaken Down
Screenshot of gwex12x.top
gwex12x.top
9 VTTaken Down
Screenshot of hanmietrustequity.com
hanmietrustequity.com
9 VTTaken Down
Screenshot of hulbornasset.ltd
hulbornasset.ltd
9 VTLive
Screenshot of hyperbeat.net
hyperbeat.net
9 VTTaken Down
Screenshot of id-inform.com
id-inform.com
9 VTTaken Down
Screenshot of intervalswift.com
intervalswift.com
9 VTTaken Down
Screenshot of io-v2.asia
io-v2.asia
9 VTLive
Screenshot of jetpayout.com
jetpayout.com
9 VTTaken Down
Screenshot of jup.tfb9.pro
jup.tfb9.pro
9 VTTaken Down
Screenshot of koinbay-login-exchange.com
koinbay-login-exchange.com
9 VT
« Prev ... 13 14 15 16 17 18 19 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.