Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,040Total Detected
89,572Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,317Abuse Reports
Overview Aug 2612,315 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,199
Taken Down
1,405
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of cbidges.xyz
cbidges.xyz
5 VTLiveAngel Drainer
Screenshot of centrexes.com
centrexes.com
5 VTTaken Down
Screenshot of centrifuge-io.web.app
centrifuge-io.web.app
5 VTTaken Down
Screenshot of cibcontinentalbnk.com
cibcontinentalbnk.com
5 VTTaken Down
Screenshot of claim-mitosis.live
claim-mitosis.live
5 VTLive
Screenshot of claim.tokentable.network
claim.tokentable.network
5 VTLive
Screenshot of claim.zoraa.name
claim.zoraa.name
5 VTLive
Screenshot of claimmidnight.site
claimmidnight.site
5 VTTaken Down
Screenshot of claims-towns.com
claims-towns.com
5 VTTaken DownAngel Drainer
Screenshot of coiinholdb.com
coiinholdb.com
5 VTTaken Down
Screenshot of coinbasesupportsteam.com
coinbasesupportsteam.com
5 VTTaken Down
Screenshot of coinchanger.cx
coinchanger.cx
5 VTTaken Down
Screenshot of coinexbridge.com
coinexbridge.com
5 VTLive
Screenshot of coinexeth.com
coinexeth.com
5 VTLive
Screenshot of coinexusdt.vip
coinexusdt.vip
5 VTLive
Screenshot of coinindextrade.com
coinindextrade.com
5 VTLive
Screenshot of coinxs.ru
coinxs.ru
5 VTLive
Screenshot of collectiblemarkethub.com
collectiblemarkethub.com
5 VTLive
Screenshot of consensys.world
consensys.world
5 VTLive
Screenshot of cosmosairdrop.live
cosmosairdrop.live
5 VTTaken Down
Screenshot of cosmosouche-co.network
cosmosouche-co.network
5 VTLive
Screenshot of cptltrst.com
cptltrst.com
5 VTTaken Down
Screenshot of cr7.onsol.pro
cr7.onsol.pro
5 VTLiveSolana Drainer
Screenshot of credilysunions.com
credilysunions.com
5 VTLive
Screenshot of crescentcommercetrust.com
crescentcommercetrust.com
5 VTTaken Down
Screenshot of cresubk.com
cresubk.com
5 VTTaken Down
Screenshot of crstl.cc
crstl.cc
5 VTTaken Down
Screenshot of crudoprotocol-net.web.app
crudoprotocol-net.web.app
5 VTLiveWallet Connect Abuse
Screenshot of cryptnetworkweb3.com
cryptnetworkweb3.com
5 VTTaken Down
Screenshot of crypto-fix.org
crypto-fix.org
5 VTTaken Down
Screenshot of cryptorentes.fr
cryptorentes.fr
5 VTLive
Screenshot of cryptotrust.vip
cryptotrust.vip
5 VTLive
Screenshot of deathx.fun
deathx.fun
5 VTLiveWallet Connect Abuse
Screenshot of dedust.asia
dedust.asia
5 VTTaken Down
Screenshot of deutscheasset.online
deutscheasset.online
5 VTTaken Down
Screenshot of dhackcybersolution.com
dhackcybersolution.com
5 VTLive
Screenshot of distribution-telco.in
distribution-telco.in
5 VTTaken DownAngel Drainer
Screenshot of edexpressboxs.xyz
edexpressboxs.xyz
5 VTTaken Down
Screenshot of edit.alli-ai.network
edit.alli-ai.network
5 VTLive
Screenshot of empireprofitmaker.com
empireprofitmaker.com
5 VTTaken Down
Screenshot of empower-edgeenterprise.com
empower-edgeenterprise.com
5 VTLive
Screenshot of ethena.live
ethena.live
5 VTLive
Screenshot of everstakebot.com
everstakebot.com
5 VTTaken Down
Screenshot of evoxcas.com
evoxcas.com
5 VTTaken Down
Screenshot of fastemailbilling.com
fastemailbilling.com
5 VTTaken Down
Screenshot of fastrackroute.com
fastrackroute.com
5 VTLive
Screenshot of fdexshipping.com
fdexshipping.com
5 VTTaken Down
Screenshot of fedtru.online
fedtru.online
5 VTLive
Screenshot of fetchai.gift
fetchai.gift
5 VTLiveWallet Connect Abuse
Screenshot of financepaybnk.xyz
financepaybnk.xyz
5 VTLive
Screenshot of financetrustbank.org
financetrustbank.org
5 VTTaken Down
Screenshot of finmillennium.com
finmillennium.com
5 VTTaken Down
Screenshot of fintveltrades.com
fintveltrades.com
5 VTLive
Screenshot of firstnatibn.online
firstnatibn.online
5 VTTaken Down
Screenshot of fixedresolvedapp.com
fixedresolvedapp.com
5 VTLive
Screenshot of flonexb.com
flonexb.com
5 VTTaken Down
Screenshot of foreigntbc.org
foreigntbc.org
5 VTTaken Down
Screenshot of foundation.boomal.net
foundation.boomal.net
5 VTLive
Screenshot of frax.to
frax.to
5 VTLive
Screenshot of fushenprotocol.xyz
fushenprotocol.xyz
5 VTLiveWallet Connect Abuse
« Prev ... 21 22 23 24 25 26 27 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.