Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,286Total Detected
89,572Taken Down
51%Kill Rate
97.1%VT Coverage
61,375Abuse Reports
Overview Aug 2612,561 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,199
Taken Down
1,405
Still Live
58.1%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,432 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of exfilforums.su
exfilforums.su
4 VTTaken Down
Screenshot of exo-start.com
exo-start.com
4 VTLive
Screenshot of exodus.activity-verify.com
exodus.activity-verify.com
4 VTLive
Screenshot of fastairtrack.com
fastairtrack.com
4 VTLive
Screenshot of feastbets.com
feastbets.com
4 VTTaken Down
Screenshot of felixuse.xyz
felixuse.xyz
4 VTTaken DownAngel Drainer
Screenshot of financialrecoveryassociates.com
financialrecoveryassociates.com
4 VTLive
Screenshot of finebom.com
finebom.com
4 VTTaken Down
Screenshot of finfusionbank.com
finfusionbank.com
4 VTLive
Screenshot of fintoniic.com
fintoniic.com
4 VTLive
Screenshot of firexspace.com
firexspace.com
4 VTLive
Screenshot of fixdfloat.com
fixdfloat.com
4 VTLive
Screenshot of flaremainnets-dapp.com
flaremainnets-dapp.com
4 VTLive
Screenshot of flowvavada.com
flowvavada.com
4 VTLive
Screenshot of fomo-lookup.web.app
fomo-lookup.web.app
4 VTTaken Down
Screenshot of forexra.cc
forexra.cc
4 VTTaken Down
Screenshot of foxygroups.com
foxygroups.com
4 VTTaken DownAngel Drainer
Screenshot of fxcryptomat.com
fxcryptomat.com
4 VTTaken Down
Screenshot of fynkas.com
fynkas.com
4 VTLive
Screenshot of gaiafoundation.digital
gaiafoundation.digital
4 VTLiveAngel Drainer
Screenshot of gaiafoundation.world
gaiafoundation.world
4 VTLiveAngel Drainer
Screenshot of geniobank.com
geniobank.com
4 VTLive
Screenshot of get-lizard.com
get-lizard.com
4 VTLive
Screenshot of getpaidbywriting.com
getpaidbywriting.com
4 VTTaken Down
Screenshot of gettonhub.com
gettonhub.com
4 VTLive
Screenshot of getxcasino0777.top
getxcasino0777.top
4 VTTaken Down
Screenshot of gloprime.live
gloprime.live
4 VTLive
Screenshot of gmoonline.top
gmoonline.top
4 VTLive
Screenshot of goflexilet.com
goflexilet.com
4 VTLive
Screenshot of gray-sushi.lat
gray-sushi.lat
4 VTLive
Screenshot of gunsnglory.com
gunsnglory.com
4 VTTaken Down
Screenshot of gwbj57x.top
gwbj57x.top
4 VTTaken Down
Screenshot of gwbl60x.life
gwbl60x.life
4 VTTaken Down
Screenshot of gwco56x.life
gwco56x.life
4 VTTaken Down
Screenshot of gwcp24x.rest
gwcp24x.rest
4 VTTaken Down
gwcx69x.top
4 VTTaken Down
Screenshot of gwdj85x.life
gwdj85x.life
4 VTTaken Down
Screenshot of gwdl46x.top
gwdl46x.top
4 VTTaken Down
Screenshot of gwdm43x.top
gwdm43x.top
4 VTTaken Down
Screenshot of gwdn79x.top
gwdn79x.top
4 VTTaken Down
Screenshot of gwei16x.top
gwei16x.top
4 VTTaken Down
Screenshot of gwem67x.life
gwem67x.life
4 VTTaken Down
Screenshot of gwfo87x.life
gwfo87x.life
4 VTTaken Down
Screenshot of haltoncommunitycreun.com
haltoncommunitycreun.com
4 VTLive
Screenshot of harta123.org
harta123.org
4 VTLive
Screenshot of hashj.net
hashj.net
4 VTLive
Screenshot of helmibet.com
helmibet.com
4 VTLive
Screenshot of hexpool.net
hexpool.net
4 VTTaken Down
Screenshot of highcargologisticss.com
highcargologisticss.com
4 VTLive
Screenshot of hilabets.com
hilabets.com
4 VTLive
Screenshot of hollandsinsurance.com
hollandsinsurance.com
4 VT
Screenshot of host90views.com
host90views.com
4 VTLive
Screenshot of hostlooni.com
hostlooni.com
4 VTLive
Screenshot of hotass.aqulas.me
hotass.aqulas.me
4 VTLive
Screenshot of huntergame.net
huntergame.net
4 VTLive
Screenshot of huobi-register.com
huobi-register.com
4 VTLive
Screenshot of hyperfoundation.fund
hyperfoundation.fund
4 VTAngel Drainer
Screenshot of hypreliquid.co.com
hypreliquid.co.com
4 VTLive
Screenshot of ibizafinalboss.click
ibizafinalboss.click
4 VTLiveSolana Drainer
Screenshot of icashloans.com
icashloans.com
4 VTLive
« Prev ... 27 28 29 30 31 32 33 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.