Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,040Total Detected
89,572Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,317Abuse Reports
Overview Aug 2612,315 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,199
Taken Down
1,405
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of pancake20.com
pancake20.com
7 VTTaken Down
Screenshot of pendle-flnance.xyz
pendle-flnance.xyz
7 VTTaken Down
Screenshot of pinetworkexchange.sbs
pinetworkexchange.sbs
7 VTTaken Down
Screenshot of rainbowwallet.net
rainbowwallet.net
7 VTTaken Down
Screenshot of repute.monadscore.xyz
repute.monadscore.xyz
7 VTTaken Down
Screenshot of safeguardauthentication.com
safeguardauthentication.com
7 VTTaken Down
Screenshot of secure.trzor.us
secure.trzor.us
7 VTTaken Down
Screenshot of skywardadventures.biz
skywardadventures.biz
7 VTTaken Down
Screenshot of sso-phantom-com-x-auth-me.typedream.app
sso-phantom-com-x-auth-me.typedream.app
7 VTTaken Down
Screenshot of swipcas.com
swipcas.com
7 VTLive
Screenshot of the.gioidid0ng.com
the.gioidid0ng.com
7 VTTaken Down
Screenshot of tokbyt.com
tokbyt.com
7 VT
Screenshot of toncoin-change.exchange
toncoin-change.exchange
7 VT
Screenshot of triasone-en.xyz
triasone-en.xyz
7 VTTaken DownAngel Drainer
Screenshot of trustwalletsend.org
trustwalletsend.org
7 VTLive
Screenshot of tustwallet.link
tustwallet.link
7 VTLive
Screenshot of twitchgiftdrop.com
twitchgiftdrop.com
7 VT
Screenshot of usdtmind.top
usdtmind.top
7 VTLive
Screenshot of visarbank.com
visarbank.com
7 VTLive
Screenshot of voucher-5606.notcolayer.app
voucher-5606.notcolayer.app
7 VTTaken Down
Screenshot of web3mint.xyz
web3mint.xyz
7 VTLive
Screenshot of world3ai.network
world3ai.network
7 VTLive
Screenshot of www.flare-networks.xyz
www.flare-networks.xyz
7 VTTaken Down
Screenshot of xrpdistributions.firebaseapp.com
xrpdistributions.firebaseapp.com
7 VTTaken DownIce Phishing
Screenshot of zenoroll.com
zenoroll.com
7 VTTaken Down
Screenshot of 1rolls.bet
1rolls.bet
6 VTLive
Screenshot of 8linkbones.icu
8linkbones.icu
6 VTLive
Screenshot of addons-mozilla--org-en.typedream.app
addons-mozilla--org-en.typedream.app
6 VTTaken Down
Screenshot of agrowealthsavings.pro
agrowealthsavings.pro
6 VTTaken Down
Screenshot of ai-okx.asia
ai-okx.asia
6 VTTaken Down
Screenshot of amlinsight.io
amlinsight.io
6 VTTaken DownWallet Connect Abuse
Screenshot of anchortrustsecurities.info
anchortrustsecurities.info
6 VTLive
Screenshot of app-chaingpt.com
app-chaingpt.com
6 VTLive
Screenshot of app-shadow.github.io
app-shadow.github.io
6 VTLive
Screenshot of app.easyswiftscured.com
app.easyswiftscured.com
6 VTLive
Screenshot of asset-permit.xyz
asset-permit.xyz
6 VTLive
Screenshot of assetrecoveryagency.click
assetrecoveryagency.click
6 VTLive
Screenshot of astec.creativ.click
astec.creativ.click
6 VTTaken Down
Screenshot of automatedaitradingsplatform.com
automatedaitradingsplatform.com
6 VTTaken Down
Screenshot of babydogetokens.com
babydogetokens.com
6 VTTaken Down
Screenshot of bestmining.ltd
bestmining.ltd
6 VTLive
Screenshot of bimfx-trades.com
bimfx-trades.com
6 VTTaken Down
Screenshot of binancelab.org
binancelab.org
6 VTLive
Screenshot of binancestakingtresures.com
binancestakingtresures.com
6 VTLive
Screenshot of binaryinvestpro.com
binaryinvestpro.com
6 VTLive
Screenshot of bitcoin-swap.exchange
bitcoin-swap.exchange
6 VT
Screenshot of bitfoxio.com
bitfoxio.com
6 VTLive
Screenshot of bitgetvn.com
bitgetvn.com
6 VTTaken Down
Screenshot of bitifinex.net
bitifinex.net
6 VTLive
Screenshot of blockchainlegal.services
blockchainlegal.services
6 VTTaken Down
Screenshot of blocktaskn.top
blocktaskn.top
6 VTTaken Down
Screenshot of blurapp.net
blurapp.net
6 VTLive
Screenshot of brazgoldsavings.com
brazgoldsavings.com
6 VTTaken Down
Screenshot of bridge.mwdao.xyz
bridge.mwdao.xyz
6 VTLive
Screenshot of brightonbitcore.digital
brightonbitcore.digital
6 VTLive
Screenshot of btcb-sushi.xyz
btcb-sushi.xyz
6 VTTaken DownAngel Drainer
Screenshot of bttrada-invests.com
bttrada-invests.com
6 VTTaken Down
Screenshot of campound.finance
campound.finance
6 VTAngel Drainer
Screenshot of capsbot.com
capsbot.com
6 VTLive
Screenshot of casbet.space
casbet.space
6 VTTaken Down
« Prev ... 17 18 19 20 21 22 23 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.