Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,042Total Detected
89,572Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,317Abuse Reports
Overview Aug 2612,317 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,199
Taken Down
1,405
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of raydem.cc
raydem.cc
5 VT
Screenshot of raydiumi.com
raydiumi.com
5 VTTaken Down
Screenshot of rbxsnipe.com
rbxsnipe.com
5 VTLive
Screenshot of render.alli-ai.network
render.alli-ai.network
5 VTLive
Screenshot of renzoprotocol.season4.xyz
renzoprotocol.season4.xyz
5 VTTaken DownAngel Drainer
Screenshot of result.tonabankcreditunion.org
result.tonabankcreditunion.org
5 VTLive
Screenshot of rewards-eth.xyz
rewards-eth.xyz
5 VTLive
Screenshot of rexasfinance.com
rexasfinance.com
5 VTLive
Screenshot of safepal.live
safepal.live
5 VTLive
Screenshot of securechainwallet.com
securechainwallet.com
5 VTLive
Screenshot of shapetrex.com
shapetrex.com
5 VTTaken Down
Screenshot of shieldsafebank.org
shieldsafebank.org
5 VTLive
Screenshot of signal.beboundless.us
signal.beboundless.us
5 VTLive
Screenshot of silverforge.xyz
silverforge.xyz
5 VTLive
Screenshot of skyslots.pro
skyslots.pro
5 VTTaken Down
Screenshot of smartchain-protocol.xyz
smartchain-protocol.xyz
5 VTTaken DownAngel Drainer
Screenshot of sol.resolverprotocol.net
sol.resolverprotocol.net
5 VTTaken Down
Screenshot of solspin.digital
solspin.digital
5 VTTaken Down
Screenshot of sss-data.cc
sss-data.cc
5 VTLiveWallet Connect Abuse
Screenshot of steamcomunityartworkshops.com
steamcomunityartworkshops.com
5 VTLive
Screenshot of strikeclaim.chainxwan.world
strikeclaim.chainxwan.world
5 VTLiveAngel Drainer
Screenshot of studio.alli-ai.network
studio.alli-ai.network
5 VTLive
Screenshot of sui-web3.site
sui-web3.site
5 VTLive
Screenshot of telegramstreamt.live
telegramstreamt.live
5 VTLive
Screenshot of testnet.suipass.xyz
testnet.suipass.xyz
5 VTTaken Down
Screenshot of ticketsupport-apps.com
ticketsupport-apps.com
5 VTTaken DownWallet Connect Abuse
Screenshot of token.publicai.name
token.publicai.name
5 VTLive
Screenshot of trezor.support
trezor.support
5 VTLive
Screenshot of tron-exchange-swap.com
tron-exchange-swap.com
5 VT
Screenshot of vavada616.top
vavada616.top
5 VTLive
Screenshot of vavadadex.com
vavadadex.com
5 VT
Screenshot of votes-blackhole.xyz
votes-blackhole.xyz
5 VT
Screenshot of web3fix.live
web3fix.live
5 VTTaken DownSolana Drainer
Screenshot of web3networkconnect.com
web3networkconnect.com
5 VTLive
Screenshot of wolrdlibertyfinanicals.xyz
wolrdlibertyfinanicals.xyz
5 VTTaken Down
Screenshot of www.dcoin-login-exchange.com
www.dcoin-login-exchange.com
5 VT
Screenshot of www.polymarket.trade
www.polymarket.trade
5 VTLive
Screenshot of www.supportmultiwallet.com
www.supportmultiwallet.com
5 VTTaken Down
Screenshot of www.web3-crypto.xyz
www.web3-crypto.xyz
5 VTLive
Screenshot of wwwwokx.com
wwwwokx.com
5 VTTaken Down
Screenshot of xa37x.com
xa37x.com
5 VT
Screenshot of xai320k.com
xai320k.com
5 VTLive
Screenshot of xai560k.com
xai560k.com
5 VT
Screenshot of xcapitalflow.com
xcapitalflow.com
5 VTLive
Screenshot of xn--debride-pcb.finance
xn--debride-pcb.finance
5 VTLive
Screenshot of xn--meteor-uta.com
xn--meteor-uta.com
5 VTLive
Screenshot of xpolymarket.com
xpolymarket.com
5 VTTaken Down
Screenshot of zhanshentiaozhan.com
zhanshentiaozhan.com
5 VTLive
Screenshot of 100jili8.com
100jili8.com
4 VTLive
Screenshot of 16bettelegram.com
16bettelegram.com
4 VTLive
Screenshot of 1polkadot-5x1e.js.org
1polkadot-5x1e.js.org
4 VTLive
Screenshot of 24-escort.com
24-escort.com
4 VTLive
Screenshot of 911trustledger.org
911trustledger.org
4 VTLive
Screenshot of 911trustledger.store
911trustledger.store
4 VTLive
Screenshot of aavastech.com
aavastech.com
4 VTLive
Screenshot of aave-eth-v3.org
aave-eth-v3.org
4 VT
Screenshot of aavecasifreespins.click
aavecasifreespins.click
4 VTLive
Screenshot of aavestake.com
aavestake.com
4 VTLive
Screenshot of aceov.net
aceov.net
4 VTLive
Screenshot of acessmarkets.org
acessmarkets.org
4 VTLive
« Prev ... 24 25 26 27 28 29 30 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.