August 2025 Phishing Threat Report — PhishDestroy Analytics

August 2025 Intelligence Report 440.3%

3,782

2,199

Taken Down

1,405

Still Live

58.1%

Kill Rate

5578h

Avg Response

5.7

Avg VT Score

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
Brand pressure is concentrated on across and Google — 643 lookalike domains between them.
The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
Dominant drainer kit: Angel Drainer (207 deployments detected).
Average infrastructure response time: 5578h — well beyond any reasonable takedown window.

Outlook

Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

Full Data on GitHub Browse All Domains Live Threats

Top Registrars

Registrar	Domains
Web Commerce Communications Limited	277
NameSilo, LLC	254
NiceNIC International Group Co., Limited	204
Dynadot LLC	189
NameCheap, Inc.	183
OwnRegistrar, Inc.	169
URL Solutions, Inc.	159
Cosmotown, Inc.	151