Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,394Total Detected
89,711Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,410Abuse Reports
Overview Aug 2612,670 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,387 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,200
Taken Down
1,403
Still Live
58.2%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,200 of them (58.2%) have already been neutralized, while 1,403 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of cryptocase.org
cryptocase.org
3 VTLive
Screenshot of cryptohopper.finance
cryptohopper.finance
3 VTLiveAngel Drainer
Screenshot of cryptoranker.net
cryptoranker.net
3 VTTaken Down
Screenshot of cryptorecoveryconsultant.com
cryptorecoveryconsultant.com
3 VTTaken Down
Screenshot of cryptoswap.finance
cryptoswap.finance
3 VTLive
Screenshot of cryptoswap.website
cryptoswap.website
3 VTLive
Screenshot of cryptosweb3networks.com
cryptosweb3networks.com
3 VTTaken Down
Screenshot of cryptotradetech.com
cryptotradetech.com
3 VTLive
Screenshot of cryptowagefarming.com
cryptowagefarming.com
3 VTTaken Down
Screenshot of cryptoworlldspace.space
cryptoworlldspace.space
3 VTTaken Down
Screenshot of cryptprimetrade.com
cryptprimetrade.com
3 VTLive
Screenshot of cryptsecurehub.xyz
cryptsecurehub.xyz
3 VTLive
Screenshot of cunionbk.com.flonexb.com
cunionbk.com.flonexb.com
3 VTTaken Down
Screenshot of cyberchain.com.br
cyberchain.com.br
3 VTLive
Screenshot of d-bschenkerlog.com
d-bschenkerlog.com
3 VTTaken Down
Screenshot of dashboard-blaze.com
dashboard-blaze.com
3 VT
Screenshot of dbutt.fun
dbutt.fun
3 VTLiveAngel Drainer
Screenshot of de-kraken.app
de-kraken.app
3 VT
Screenshot of defi-dappsyntax.icu
defi-dappsyntax.icu
3 VTTaken Down
Screenshot of defi-update.com
defi-update.com
3 VTLive
Screenshot of deliveryexpress.sa.com
deliveryexpress.sa.com
3 VTLive
Screenshot of diagnosticnode.co
diagnosticnode.co
3 VTTaken Down
Screenshot of digitalchainstrade.com
digitalchainstrade.com
3 VTTaken Down
Screenshot of distribution-topless.com
distribution-topless.com
3 VTTaken Down
Screenshot of dmn263.it
dmn263.it
3 VTTaken Down
Screenshot of doddoex.org
doddoex.org
3 VTLive
Screenshot of dogen.meme
dogen.meme
3 VTLive
Screenshot of dpm777.it
dpm777.it
3 VTTaken Down
Screenshot of driveline.blastconnect.com
driveline.blastconnect.com
3 VTLive
Screenshot of dymensiion.github.io
dymensiion.github.io
3 VTLive
Screenshot of easybitglobal-investment.com
easybitglobal-investment.com
3 VTTaken Down
Screenshot of echoledger.net
echoledger.net
3 VTTaken Down
Screenshot of ecotradenet.com
ecotradenet.com
3 VTLive
Screenshot of eligibility-spk.com
eligibility-spk.com
3 VTAngel Drainer
Screenshot of emberchest.org
emberchest.org
3 VTLive
Screenshot of emi-fina.com
emi-fina.com
3 VTTaken Down
Screenshot of emirateglobaldeliveryservices.com
emirateglobaldeliveryservices.com
3 VTTaken Down
Screenshot of emiratescourier.com
emiratescourier.com
3 VTTaken Down
Screenshot of en-us-ledger.com
en-us-ledger.com
3 VTTaken Down
Screenshot of en.infinitfirms.com
en.infinitfirms.com
3 VTLive
Screenshot of energy999.ru
energy999.ru
3 VTLive
Screenshot of ethena.co.com
ethena.co.com
3 VTLive
Screenshot of etherex.claims
etherex.claims
3 VTLiveAngel Drainer
Screenshot of etherexx.finance
etherexx.finance
3 VTLive
Screenshot of etvaultb.com
etvaultb.com
3 VTTaken Down
Screenshot of evamobi.com
evamobi.com
3 VTLive
Screenshot of excreditonline.com
excreditonline.com
3 VTLive
Screenshot of exhubj.net
exhubj.net
3 VTLive
Screenshot of exnetcapital.com
exnetcapital.com
3 VTTaken Down
Screenshot of expresspagartrading.com
expresspagartrading.com
3 VTTaken Down
Screenshot of fadaindigitals.com
fadaindigitals.com
3 VTLive
Screenshot of faidhastore.com.ng
faidhastore.com.ng
3 VTLive
Screenshot of fairdrops.world
fairdrops.world
3 VTTaken DownAngel Drainer
Screenshot of fairmazeventures.com
fairmazeventures.com
3 VTLive
Screenshot of falconminingfarms.com
falconminingfarms.com
3 VTTaken Down
Screenshot of famebridges.com
famebridges.com
3 VTTaken Down
Screenshot of fargopitan.com
fargopitan.com
3 VTTaken Down
Screenshot of fassetslimited.com
fassetslimited.com
3 VTTaken Down
Screenshot of fastlinkservicefreight.com
fastlinkservicefreight.com
3 VTTaken Down
Screenshot of fastlockapp.com
fastlockapp.com
3 VTLive
« Prev ... 33 34 35 36 37 38 39 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.