Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,642Total Detected
90,126Taken Down
51.2%Kill Rate
97.1%VT Coverage
61,507Abuse Reports
Overview Aug 2612,918 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,387 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,202
Taken Down
1,401
Still Live
58.2%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,200 of them (58.2%) have already been neutralized, while 1,403 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of nienvc.com
nienvc.com
2 VTTaken Down
Screenshot of nmv855.it
nmv855.it
2 VTTaken Down
Screenshot of nodeops-whitelist.site
nodeops-whitelist.site
2 VTTaken DownAngel Drainer
Screenshot of noderectifierhub.com
noderectifierhub.com
2 VTTaken Down
Screenshot of noderet.pro
noderet.pro
2 VTTaken Down
Screenshot of nova-fx-plus.xyz
nova-fx-plus.xyz
2 VTTaken Down
Screenshot of novacorptech.com
novacorptech.com
2 VTTaken Down
Screenshot of novaexodus.pro
novaexodus.pro
2 VTTaken Down
Screenshot of novafxplus.xyz
novafxplus.xyz
2 VTTaken Down
Screenshot of novaspin.vip
novaspin.vip
2 VTLive
Screenshot of novesync.com
novesync.com
2 VTLive
Screenshot of nus725.it
nus725.it
2 VTTaken Down
Screenshot of nyxbets.bet
nyxbets.bet
2 VTLive
Screenshot of ocgitrade.com
ocgitrade.com
2 VTLive
Screenshot of okx-secure.com
okx-secure.com
2 VT
Screenshot of omnixdrop.com
omnixdrop.com
2 VTLiveAngel Drainer
Screenshot of onchaindigital1.online
onchaindigital1.online
2 VTTaken Down
Screenshot of openmint.web.app
openmint.web.app
2 VTTaken DownAngel Drainer
Screenshot of optimareclaim.com
optimareclaim.com
2 VTTaken Down
Screenshot of optionsxpress-10516.vip
optionsxpress-10516.vip
2 VTTaken Down
Screenshot of optionsxpress-1105693.vip
optionsxpress-1105693.vip
2 VTTaken Down
Screenshot of optionsxpress-1106837.vip
optionsxpress-1106837.vip
2 VTTaken Down
Screenshot of optionsxpress-18502.vip
optionsxpress-18502.vip
2 VTTaken Down
Screenshot of optionsxpress-18637.vip
optionsxpress-18637.vip
2 VTTaken Down
Screenshot of optionsxpress-18863.vip
optionsxpress-18863.vip
2 VTTaken Down
Screenshot of optionsxpress-18890.vip
optionsxpress-18890.vip
2 VTTaken Down
Screenshot of orcamind.ai
orcamind.ai
2 VTLiveWallet Connect Abuse
Screenshot of orionlogistics.org
orionlogistics.org
2 VTTaken Down
Screenshot of outgrwtrd.com
outgrwtrd.com
2 VTTaken Down
Screenshot of pancakeswap-th.web.app
pancakeswap-th.web.app
2 VTTaken Down
Screenshot of pancakeswapwhalesscam.info
pancakeswapwhalesscam.info
2 VTTaken Down
Screenshot of parcelforceintexpressdelivery.com
parcelforceintexpressdelivery.com
2 VTTaken Down
Screenshot of payloadexpressservice.com
payloadexpressservice.com
2 VTTaken Down
pcremotes.ru
2 VTLive
Screenshot of peipeicoins-ai.firebaseapp.com
peipeicoins-ai.firebaseapp.com
2 VTTaken DownWallet Connect Abuse
Screenshot of pepe-unchained.cc
pepe-unchained.cc
2 VTTaken Down
Screenshot of pepeclaim2.net
pepeclaim2.net
2 VTTaken DownWallet Connect Abuse
Screenshot of pepememe.org
pepememe.org
2 VTTaken Down
Screenshot of peuromax.com
peuromax.com
2 VTTaken Down
Screenshot of phantomosteam.github.io
phantomosteam.github.io
2 VTLive
Screenshot of photorialenergy.com
photorialenergy.com
2 VTTaken Down
Screenshot of pi-network.org
pi-network.org
2 VTTaken Down
Screenshot of piltradcom.com
piltradcom.com
2 VTTaken Down
Screenshot of pioneer314airdrop.com
pioneer314airdrop.com
2 VTTaken Down
Screenshot of polbysol.xyz
polbysol.xyz
2 VTTaken Down
Screenshot of popcat.top
popcat.top
2 VTLive
Screenshot of profitabletrade.xyz
profitabletrade.xyz
2 VTTaken Down
Screenshot of profitempire.life.vescotradefx.live
profitempire.life.vescotradefx.live
2 VTTaken Down
Screenshot of projectmains.netlify.app
projectmains.netlify.app
2 VTLive
Screenshot of promocas.com
promocas.com
2 VTLive
Screenshot of protectivedelivery.com
protectivedelivery.com
2 VTTaken Down
Screenshot of proweex.com
proweex.com
2 VTTaken Down
Screenshot of pulsewealthsecure.com
pulsewealthsecure.com
2 VTTaken Down
Screenshot of pulsexbet.com
pulsexbet.com
2 VTLive
Screenshot of pumpswap.live
pumpswap.live
2 VTTaken Down
Screenshot of q-assets.org
q-assets.org
2 VTTaken Down
Screenshot of qexcas.com
qexcas.com
2 VTLive
Screenshot of qfe599.it
qfe599.it
2 VTTaken Down
Screenshot of qfsbackuppro.com
qfsbackuppro.com
2 VTTaken Down
Screenshot of qfsecureassets.com
qfsecureassets.com
2 VTTaken Down
« Prev ... 46 47 48 49 50 51 52 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.