Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

192,915Total Detected
89,564Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,300Abuse Reports
Overview Aug 2612,192 Jul 2618,440 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,201
Taken Down
1,404
Still Live
58.2%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,434 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of phalton.com
phalton.com
16 VTLive
Screenshot of phantomstakevault.com.prime-vaultaccess.com
phantomstakevault.com.prime-vaultaccess.com
16 VTTaken Down
Screenshot of pub-50f6be4f4c494888b25f632fad312d3b.r2.dev
pub-50f6be4f4c494888b25f632fad312d3b.r2.dev
16 VTTaken Down
Screenshot of secure-ledger-auth--help.webflow.io
secure-ledger-auth--help.webflow.io
16 VTTaken Down
Screenshot of sentineledgesb.com
sentineledgesb.com
16 VTLive
Screenshot of spotify-clone-luigi-iossa.netlify.app
spotify-clone-luigi-iossa.netlify.app
16 VTTaken Down
Screenshot of stackrectify.com
stackrectify.com
16 VTLive
Screenshot of steam.tzevania.com
steam.tzevania.com
16 VTLive
Screenshot of telegrameam.com
telegrameam.com
16 VTLive
Screenshot of telegrameim.com
telegrameim.com
16 VTLive
Screenshot of telegramiem.com
telegramiem.com
16 VTLive
Screenshot of telegramoom.com
telegramoom.com
16 VTLive
Screenshot of texabaycu.com
texabaycu.com
16 VTLive
Screenshot of ton-exchange-swap.com
ton-exchange-swap.com
16 VT
Screenshot of ton-mixer.to
ton-mixer.to
16 VTTaken Down
Screenshot of ton-telegram.network
ton-telegram.network
16 VTLive
Screenshot of tronssan.github.io
tronssan.github.io
16 VTLive
Screenshot of uniswap-exchange.click
uniswap-exchange.click
16 VTTaken Down
Screenshot of validateonmainnet.firebaseapp.com
validateonmainnet.firebaseapp.com
16 VTTaken Down
Screenshot of walletconnectauth.com
walletconnectauth.com
16 VTTaken Down
Screenshot of www-defliama.com
www-defliama.com
16 VTTaken Down
Screenshot of 1lavds.biz
1lavds.biz
15 VTLive
Screenshot of 68uv.pilot45.com
68uv.pilot45.com
15 VTTaken Down
Screenshot of aerocoin.xyz
aerocoin.xyz
15 VTLiveWallet Connect Abuse
Screenshot of ai-uniswaps.web.app
ai-uniswaps.web.app
15 VTTaken Down
Screenshot of airdropzclaim.com
airdropzclaim.com
15 VTTaken Down
Screenshot of apex-elevate.net
apex-elevate.net
15 VTLive
Screenshot of app-renzoprotocol.network
app-renzoprotocol.network
15 VTTaken DownWallet Connect Abuse
Screenshot of app.ldo-steth.com
app.ldo-steth.com
15 VTLiveAngel Drainer
Screenshot of apple-with-bootstrap.netlify.app
apple-with-bootstrap.netlify.app
15 VTTaken Down
Screenshot of appsextension.live
appsextension.live
15 VTTaken Down
Screenshot of axisledger.live
axisledger.live
15 VTLive
Screenshot of bafybeibkhz4elzra2dauacvdzm6x2j5t3ow2n2z6ki6pftcjuis6ozi56e.ipfs.dweb.link
bafybeibkhz4elzra2dauacvdzm6x2j5t3ow2n2z6ki6pftcjuis6ozi56e.ipfs.dweb.link
15 VTLive
Screenshot of bafybeiddfzec3ssadmq4s7m7fotcrv2543fgmtp5fhndlmktya2zv4jvyy.ipfs.dweb.link
bafybeiddfzec3ssadmq4s7m7fotcrv2543fgmtp5fhndlmktya2zv4jvyy.ipfs.dweb.link
15 VTLive
Screenshot of bafybeidfgwggshi5syqnklufswynx2u6rumuvgp4jl6n4lbqsolbeshdga.ipfs.dweb.link
bafybeidfgwggshi5syqnklufswynx2u6rumuvgp4jl6n4lbqsolbeshdga.ipfs.dweb.link
15 VTLive
Screenshot of bafybeietwuxjz6bdpyiuv52eesrug4x6gocpsj32wdcvv4l4z6rzgjgf5a.ipfs.dweb.link
bafybeietwuxjz6bdpyiuv52eesrug4x6gocpsj32wdcvv4l4z6rzgjgf5a.ipfs.dweb.link
15 VTLive
Screenshot of bectelinvestment.com
bectelinvestment.com
15 VTLive
Screenshot of binance-zh.com
binance-zh.com
15 VTLive
Screenshot of binance123.com
binance123.com
15 VTLive
Screenshot of bitgetk.com
bitgetk.com
15 VTLive
Screenshot of bitmaxio.com
bitmaxio.com
15 VTTaken Down
Screenshot of bnkni.com
bnkni.com
15 VTTaken Down
Screenshot of brokertradepro.com
brokertradepro.com
15 VTLive
Screenshot of btc-qrs.to
btc-qrs.to
15 VTTaken Down
Screenshot of btc661.com
btc661.com
15 VTLive
Screenshot of chase-bnk.com
chase-bnk.com
15 VTTaken Down
Screenshot of clair-fundex.com
clair-fundex.com
15 VTTaken Down
Screenshot of clearpeak-corebit.com
clearpeak-corebit.com
15 VTTaken Down
Screenshot of coinbaseoc.com
coinbaseoc.com
15 VTLive
Screenshot of coinex.center
coinex.center
15 VTLive
Screenshot of coinexchainltd.com
coinexchainltd.com
15 VTLive
Screenshot of confirmar-live-ou1look01.weebly.com
confirmar-live-ou1look01.weebly.com
15 VTTaken Down
Screenshot of cryptweb3networks.com
cryptweb3networks.com
15 VTTaken Down
Screenshot of cstraders.net
cstraders.net
15 VTLive
Screenshot of defidappsrestore.web.app
defidappsrestore.web.app
15 VTTaken Down
Screenshot of edge-vaultura.com
edge-vaultura.com
15 VTLive
Screenshot of eliteiqtradesoptions.com
eliteiqtradesoptions.com
15 VTLive
Screenshot of eloncoinx.com
eloncoinx.com
15 VTLive
Screenshot of ethereumixer.to
ethereumixer.to
15 VTTaken Down
Screenshot of fetchprotocol.com
fetchprotocol.com
15 VTLive
« Prev 1 2 3 4 5 6 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.