Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

192,915Total Detected
89,564Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,300Abuse Reports
Overview Aug 2612,192 Jul 2618,440 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,201
Taken Down
1,404
Still Live
58.2%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,434 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of financeprimes.com
financeprimes.com
15 VTLive
Screenshot of flarenetworkxrp-claim.com
flarenetworkxrp-claim.com
15 VTLive
Screenshot of frontiercapitalbank.com
frontiercapitalbank.com
15 VTLive
Screenshot of getfree-usd.net
getfree-usd.net
15 VTLive
Screenshot of group-mega-phone.com
group-mega-phone.com
15 VTLive
Screenshot of imtokenan.com
imtokenan.com
15 VTLive
Screenshot of kaspawallet.net
kaspawallet.net
15 VTLive
Screenshot of kucoin18.top
kucoin18.top
15 VTLive
Screenshot of kucoin18.xyz
kucoin18.xyz
15 VTTaken Down
Screenshot of kucoinporl.com
kucoinporl.com
15 VTLive
Screenshot of ledger-live.click
ledger-live.click
15 VTLive
Screenshot of ledger-online-wallet.com
ledger-online-wallet.com
15 VTTaken Down
Screenshot of ledgermall.com
ledgermall.com
15 VTLive
Screenshot of ltc-mixers.to
ltc-mixers.to
15 VTTaken Down
Screenshot of metaamaskerlogin.webflow.io
metaamaskerlogin.webflow.io
15 VTTaken Down
Screenshot of mexswin-w6.top
mexswin-w6.top
15 VTLive
Screenshot of mexswin-z1.top
mexswin-z1.top
15 VTLive
mexswinq.top
15 VTLive
Screenshot of mullvadd.com
mullvadd.com
15 VTTaken Down
Screenshot of nakamigos.art
nakamigos.art
15 VTLive
Screenshot of onlydotas2.hop.ru
onlydotas2.hop.ru
15 VTLive
Screenshot of pancakeswap-dex.com
pancakeswap-dex.com
15 VTTaken DownSolana Drainer
Screenshot of pancakeswap.vip
pancakeswap.vip
15 VTTaken DownWallet Connect Abuse
Screenshot of phantomus.at
phantomus.at
15 VTLive
Screenshot of rabby-wallet.com
rabby-wallet.com
15 VTLive
Screenshot of roblox.com.gy
roblox.com.gy
15 VTTaken Down
Screenshot of secure-memasklogin.typedream.app
secure-memasklogin.typedream.app
15 VTTaken Down
Screenshot of steamcommunity.vov.ru
steamcommunity.vov.ru
15 VTLive
Screenshot of suite.tem3.io
suite.tem3.io
15 VTLive
Screenshot of swift-oxygen-wide.on-fleek.app
swift-oxygen-wide.on-fleek.app
15 VTLive
Screenshot of telegramdpc.com
telegramdpc.com
15 VTLive
Screenshot of tonlucky.net
tonlucky.net
15 VT
Screenshot of trezor.io-app.run
trezor.io-app.run
15 VTLive
Screenshot of trustaxisbnk.com
trustaxisbnk.com
15 VTLive
Screenshot of uniswap.website
uniswap.website
15 VTLive
Screenshot of usdt-qrcode-generator.com
usdt-qrcode-generator.com
15 VTLive
Screenshot of validatemain-net.com
validatemain-net.com
15 VTTaken Down
Screenshot of web-extnsion-metmmask.typedream.app
web-extnsion-metmmask.typedream.app
15 VTTaken Down
Screenshot of web-orbliter.fi
web-orbliter.fi
15 VTTaken Down
Screenshot of web3-bitget.club
web3-bitget.club
15 VTLive
Screenshot of worldliberlyfinancial.com
worldliberlyfinancial.com
15 VTLive
Screenshot of www-safepal.net
www-safepal.net
15 VTTaken Down
Screenshot of www.scfnl.org
www.scfnl.org
15 VTTaken Down
Screenshot of yongzhou.pilot45.com
yongzhou.pilot45.com
15 VTTaken Down
Screenshot of zorabridge.app
zorabridge.app
15 VTTaken DownWallet Connect Abuse
Screenshot of 0pensea.cn
0pensea.cn
14 VTTaken Down
Screenshot of 105633111.com
105633111.com
14 VTLive
Screenshot of aavelabs.org
aavelabs.org
14 VTLive
Screenshot of aavetrading.net
aavetrading.net
14 VTLive
Screenshot of airdrop-paintswap.live
airdrop-paintswap.live
14 VTLive
Screenshot of airdrop-storyprotocol.live
airdrop-storyprotocol.live
14 VTLive
Screenshot of allbridge.live
allbridge.live
14 VTLive
Screenshot of alldiscount.shop
alldiscount.shop
14 VTLive
Screenshot of alli-create.xyz
alli-create.xyz
14 VTLive
Screenshot of altafinances.org
altafinances.org
14 VTLive
Screenshot of amexcapital.org
amexcapital.org
14 VTLive
Screenshot of apexfxgroup.com
apexfxgroup.com
14 VTLive
Screenshot of app-avaa.cam
app-avaa.cam
14 VTTaken Down
Screenshot of app-tornado.com
app-tornado.com
14 VTLive
Screenshot of app.phinancetech.info
app.phinancetech.info
14 VTLive
« Prev 1 2 3 4 5 6 7 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.