Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

192,886Total Detected
89,564Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,291Abuse Reports
Overview Aug 2612,163 Jul 2618,440 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,201
Taken Down
1,404
Still Live
58.2%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,434 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of 1ittlepepe.com
1ittlepepe.com
16 VTLive
Screenshot of 762359-coinbase.com
762359-coinbase.com
16 VT
Screenshot of aa.stnred2.sa.com
aa.stnred2.sa.com
16 VTTaken Down
Screenshot of accounts.bmwweb.biz
accounts.bmwweb.biz
16 VTLive
Screenshot of aldalealt.com
aldalealt.com
16 VTLive
Screenshot of app.kybcrswap.com-g3.shop
app.kybcrswap.com-g3.shop
16 VTTaken Down
Screenshot of bafybeiaoulkqm54mkpjy5t7idjlc2wxddyj7a4cpdrpi4reejwkd4gphke.ipfs.dweb.link
bafybeiaoulkqm54mkpjy5t7idjlc2wxddyj7a4cpdrpi4reejwkd4gphke.ipfs.dweb.link
16 VTLive
Screenshot of bafybeiaww6ymqhro76hrjq6l5h4ninbd2hn7ysd6vsyffswhvg5btz4vb4.ipfs.dweb.link
bafybeiaww6ymqhro76hrjq6l5h4ninbd2hn7ysd6vsyffswhvg5btz4vb4.ipfs.dweb.link
16 VTLive
Screenshot of bafybeibp22amvhhrdkiajahcte2faf5d3vecbroua5yhnhk76jnpibn4de.ipfs.dweb.link
bafybeibp22amvhhrdkiajahcte2faf5d3vecbroua5yhnhk76jnpibn4de.ipfs.dweb.link
16 VTLive
Screenshot of bafybeibpiht7izgwflj7ruju4tcwrl7b45xmoifhhch7hi47n5ip5du4c4.ipfs.dweb.link
bafybeibpiht7izgwflj7ruju4tcwrl7b45xmoifhhch7hi47n5ip5du4c4.ipfs.dweb.link
16 VTLive
Screenshot of bafybeide2or56pa7ot4fc3wzsnuly2o32jzzgwycgjfke2pufavlxrbyy4.ipfs.dweb.link
bafybeide2or56pa7ot4fc3wzsnuly2o32jzzgwycgjfke2pufavlxrbyy4.ipfs.dweb.link
16 VTLive
Screenshot of bafybeidyjhvudof62jn7o6746utfllknvl4kx5wgemf6iorsmigz3lzvja.ipfs.dweb.link
bafybeidyjhvudof62jn7o6746utfllknvl4kx5wgemf6iorsmigz3lzvja.ipfs.dweb.link
16 VTLive
Screenshot of bafybeifqsy4i2xejq5goxyzbuufogxpqgugbowdte35bpuvzrccwy5cnr4.ipfs.dweb.link
bafybeifqsy4i2xejq5goxyzbuufogxpqgugbowdte35bpuvzrccwy5cnr4.ipfs.dweb.link
16 VTLive
Screenshot of bafybeig2qxervlifeg5gur3hrsbgo6hrco4esjxaz2r6nixoqkc6nhhjbe.ipfs.dweb.link
bafybeig2qxervlifeg5gur3hrsbgo6hrco4esjxaz2r6nixoqkc6nhhjbe.ipfs.dweb.link
16 VTLive
Screenshot of bafybeihj3zbaoidqg3cnaolz6v7im45zqz4q7wuxzepq5xid72xeotioua.ipfs.dweb.link
bafybeihj3zbaoidqg3cnaolz6v7im45zqz4q7wuxzepq5xid72xeotioua.ipfs.dweb.link
16 VTLive
Screenshot of binancepremium.com
binancepremium.com
16 VTLive
Screenshot of binances.live
binances.live
16 VTLive
Screenshot of bitcoin-buyer-solution.com
bitcoin-buyer-solution.com
16 VTLive
Screenshot of bitcoinlexipro-platform.com
bitcoinlexipro-platform.com
16 VTLive
Screenshot of blocksystemschain.com
blocksystemschain.com
16 VTTaken Down
Screenshot of botnetcryptorecovery.com
botnetcryptorecovery.com
16 VTLive
Screenshot of btc-tumbler.to
btc-tumbler.to
16 VTTaken Down
Screenshot of caixabankeur.com
caixabankeur.com
16 VTLive
Screenshot of capitalinterestinc.com
capitalinterestinc.com
16 VTLive
Screenshot of chainlist.xyz
chainlist.xyz
16 VTLive
Screenshot of chhaisse.com
chhaisse.com
16 VTLive
Screenshot of coinexapp.ru
coinexapp.ru
16 VTTaken Down
Screenshot of coinnodes.xyz
coinnodes.xyz
16 VTLiveAngel Drainer
Screenshot of cow-swop.org
cow-swop.org
16 VTTaken Down
Screenshot of detifuna.net
detifuna.net
16 VT
Screenshot of dogecoinmixer.com
dogecoinmixer.com
16 VTLive
Screenshot of dot-io.cc
dot-io.cc
16 VTTaken Down
Screenshot of eth-qr-code.com
eth-qr-code.com
16 VTLive
Screenshot of ethereum-mixers.to
ethereum-mixers.to
16 VTTaken Down
Screenshot of fortifib.com
fortifib.com
16 VTTaken Down
Screenshot of game-official.midasbuy-page.com
game-official.midasbuy-page.com
16 VTTaken Down
Screenshot of germany-ledger.com
germany-ledger.com
16 VT
Screenshot of haizulocalbnk.com
haizulocalbnk.com
16 VTLive
Screenshot of halaaitradingbot.com
halaaitradingbot.com
16 VTLive
Screenshot of hellobitd.com
hellobitd.com
16 VTLive
Screenshot of help-doinbase-feq.plasmic.run
help-doinbase-feq.plasmic.run
16 VTLive
Screenshot of hyperliquid.gg
hyperliquid.gg
16 VTLive
Screenshot of impactxconnect.com
impactxconnect.com
16 VTLiveWallet Connect Abuse
Screenshot of imtokenam.com
imtokenam.com
16 VTLive
Screenshot of imtokenas.com
imtokenas.com
16 VTTaken Down
Screenshot of integro-finlore.com
integro-finlore.com
16 VTTaken Down
Screenshot of jn-morganx.com
jn-morganx.com
16 VTLive
Screenshot of ledgernanosplus.com
ledgernanosplus.com
16 VTLive
Screenshot of ledgernederland.com
ledgernederland.com
16 VTLive
Screenshot of ltc-qr.to
ltc-qr.to
16 VTTaken Down
Screenshot of mao-stress.su
mao-stress.su
16 VTLive
Screenshot of metamasklogiinu.webflow.io
metamasklogiinu.webflow.io
16 VTTaken Down
Screenshot of metamkerloginsn.webflow.io
metamkerloginsn.webflow.io
16 VTTaken Down
Screenshot of mexswin-3x.top
mexswin-3x.top
16 VTLive
Screenshot of mexswin-q3.top
mexswin-q3.top
16 VTLive
Screenshot of mexswin6f.top
mexswin6f.top
16 VTLive
Screenshot of my-exodus.co.uk
my-exodus.co.uk
16 VTTaken Down
Screenshot of mytonwalleet.app
mytonwalleet.app
16 VTLive
Screenshot of netflixgpt-66e93.firebaseapp.com
netflixgpt-66e93.firebaseapp.com
16 VTTaken Down
Screenshot of okamzity-nerix.com
okamzity-nerix.com
16 VTTaken Down
« Prev 1 2 3 4 5 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.