Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,019Total Detected
89,014Taken Down
50.8%Kill Rate
97.1%VT Coverage
61,310Abuse Reports
Overview Aug 2612,295 Jul 2618,441 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,198
Taken Down
1,406
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of www.dedust-swap.com
www.dedust-swap.com
8 VT
Screenshot of www.deepcoin-login.com
www.deepcoin-login.com
8 VT
Screenshot of www.digifinex-login.com
www.digifinex-login.com
8 VT
Screenshot of www.distribution-plasma.com
www.distribution-plasma.com
8 VTTaken DownAngel Drainer
Screenshot of amlpolice.com
amlpolice.com
7 VTLive
Screenshot of anchorxfinance.uk
anchorxfinance.uk
7 VTTaken Down
Screenshot of app-exo.com
app-exo.com
7 VTLive
Screenshot of app.teleswap.xyz
app.teleswap.xyz
7 VTLive
Screenshot of appextrades.org
appextrades.org
7 VTLive
Screenshot of apptool.site
apptool.site
7 VTLive
Screenshot of bafybeiexp6feeuazq3jeglcrz4t7524kr7ewiovi7re7g7fb3pg3sl5xkm.ipfs.dweb.link
bafybeiexp6feeuazq3jeglcrz4t7524kr7ewiovi7re7g7fb3pg3sl5xkm.ipfs.dweb.link
7 VTTaken Down
Screenshot of bafybeiftpudgealc6un26lsfm6drgk3kbn2bbpet6pkfbdaty4homsff5e.ipfs.dweb.link
bafybeiftpudgealc6un26lsfm6drgk3kbn2bbpet6pkfbdaty4homsff5e.ipfs.dweb.link
7 VTTaken Down
Screenshot of bakeryswa-p.web.app
bakeryswa-p.web.app
7 VTTaken DownWallet Connect Abuse
Screenshot of binances.club
binances.club
7 VTLive
Screenshot of bitget.love
bitget.love
7 VTLive
Screenshot of bityardfx.org
bityardfx.org
7 VTTaken Down
Screenshot of blockchaindapps.web.app
blockchaindapps.web.app
7 VTTaken Down
Screenshot of cnangelly.cc
cnangelly.cc
7 VT
Screenshot of coinwdfx.com
coinwdfx.com
7 VTTaken Down
Screenshot of coinxax.com
coinxax.com
7 VTTaken Down
Screenshot of copabank.icu
copabank.icu
7 VTTaken Down
Screenshot of crdmk.biz
crdmk.biz
7 VTTaken Down
Screenshot of criptomixer.io
criptomixer.io
7 VTLive
Screenshot of cryptoleads-inc.com
cryptoleads-inc.com
7 VTTaken Down
Screenshot of cryptotradingen.com
cryptotradingen.com
7 VTTaken Down
Screenshot of csmarketplace.net
csmarketplace.net
7 VTTaken Down
Screenshot of defidapp-protocol.firebaseapp.com
defidapp-protocol.firebaseapp.com
7 VTTaken DownWallet Connect Abuse
Screenshot of detrixalerce.org
detrixalerce.org
7 VTTaken Down
Screenshot of fincrests.org
fincrests.org
7 VTTaken Down
Screenshot of fintopsignaltrades.com
fintopsignaltrades.com
7 VTTaken Down
Screenshot of flare-networks.xyz
flare-networks.xyz
7 VTTaken Down
Screenshot of flarewin.bet
flarewin.bet
7 VTLive
Screenshot of flyingxpress.com
flyingxpress.com
7 VTLive
Screenshot of fortledger.com
fortledger.com
7 VTLive
Screenshot of fxprotradecenter.com
fxprotradecenter.com
7 VTTaken Down
Screenshot of globalstocksexchange.com
globalstocksexchange.com
7 VTTaken Down
Screenshot of globaltrusthub.com
globaltrusthub.com
7 VTTaken Down
Screenshot of gwcq26x.life
gwcq26x.life
7 VTTaken Down
Screenshot of h2-finance.web.app
h2-finance.web.app
7 VTTaken DownIce Phishing
Screenshot of hoea-forex.com
hoea-forex.com
7 VTLive
Screenshot of houbey.vip
houbey.vip
7 VTTaken Down
Screenshot of hyperliquid-reward.xyz
hyperliquid-reward.xyz
7 VTLiveAngel Drainer
Screenshot of interlock-devsite.webflow.io
interlock-devsite.webflow.io
7 VTTaken Down
Screenshot of intlns.info
intlns.info
7 VTLive
Screenshot of jup-ag-exchange.org
jup-ag-exchange.org
7 VTLive
Screenshot of kometalive.sbs
kometalive.sbs
7 VTLive
Screenshot of land-api3.top
land-api3.top
7 VT
Screenshot of land-app4.top
land-app4.top
7 VT
Screenshot of ledgerdetect.com
ledgerdetect.com
7 VTTaken Down
Screenshot of ledgersupport-usn.com
ledgersupport-usn.com
7 VT
Screenshot of liberty-volt.com
liberty-volt.com
7 VTTaken Down
Screenshot of ltdspdarc-c.online
ltdspdarc-c.online
7 VTLive
Screenshot of mail.thecelebbooking.com
mail.thecelebbooking.com
7 VTLive
Screenshot of metamask-event.com
metamask-event.com
7 VTTaken Down
Screenshot of multiresolvechain.firebaseapp.com
multiresolvechain.firebaseapp.com
7 VTTaken DownWallet Connect Abuse
Screenshot of my.hfbfinance.site
my.hfbfinance.site
7 VTTaken Down
Screenshot of neuvana-systems.netlify.app
neuvana-systems.netlify.app
7 VTLive
Screenshot of oflfy.com
oflfy.com
7 VTLive
Screenshot of onedexlp.com
onedexlp.com
7 VT
Screenshot of opuleviaglobal.com
opuleviaglobal.com
7 VTTaken Down
« Prev ... 16 17 18 19 20 21 22 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.