Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

192,932Total Detected
89,564Taken Down
51.1%Kill Rate
97.1%VT Coverage
61,302Abuse Reports
Overview Aug 2612,209 Jul 2618,440 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,201
Taken Down
1,404
Still Live
58.2%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,434 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of appgallery.phantomme.live
appgallery.phantomme.live
14 VTTaken Down
Screenshot of aspfinshares.com
aspfinshares.com
14 VTLive
Screenshot of assetscenturybk.com
assetscenturybk.com
14 VTTaken Down
Screenshot of aubblimited.org
aubblimited.org
14 VTLive
Screenshot of aurafinance.live
aurafinance.live
14 VTLive
Screenshot of bafybeibtcfgrhknlfhnz2c5cddfnsoje4dumrc3wsyoikx2pwuf6fbcsr4.ipfs.dweb.link
bafybeibtcfgrhknlfhnz2c5cddfnsoje4dumrc3wsyoikx2pwuf6fbcsr4.ipfs.dweb.link
14 VTTaken DownWallet Connect Abuse
Screenshot of bafybeidyweyo3gndvyrcyouptypomi5k6lbq2mk6xyke7ce6oot7c2yqni.ipfs.dweb.link
bafybeidyweyo3gndvyrcyouptypomi5k6lbq2mk6xyke7ce6oot7c2yqni.ipfs.dweb.link
14 VTLive
Screenshot of bafybeieupax7fljy3xxi5l3ss6wq7wuohq3p2xfb3g756udlmxoslgxjpy.ipfs.dweb.link
bafybeieupax7fljy3xxi5l3ss6wq7wuohq3p2xfb3g756udlmxoslgxjpy.ipfs.dweb.link
14 VTLive
Screenshot of bafybeifck3tvl2afu34735yd3ul2g5ifecjinp2c7na6kdjx3q2no76q5i.ipfs.dweb.link
bafybeifck3tvl2afu34735yd3ul2g5ifecjinp2c7na6kdjx3q2no76q5i.ipfs.dweb.link
14 VTLive
Screenshot of bafybeifxbaonezg2kqdfeiaxh6gxk5jmhadq3s74hz4jixt3eobrrtxmmu.ipfs.dweb.link
bafybeifxbaonezg2kqdfeiaxh6gxk5jmhadq3s74hz4jixt3eobrrtxmmu.ipfs.dweb.link
14 VTLive
Screenshot of binance158.com
binance158.com
14 VTLive
Screenshot of binanceflashusdt.info
binanceflashusdt.info
14 VTLive
Screenshot of bitspronix.com
bitspronix.com
14 VTTaken Down
Screenshot of blockshieldtech.com
blockshieldtech.com
14 VTTaken Down
Screenshot of browser-coinbase-xtension.typedream.app
browser-coinbase-xtension.typedream.app
14 VTTaken Down
Screenshot of buildstock-finance.com
buildstock-finance.com
14 VTLive
Screenshot of captixb.com
captixb.com
14 VTTaken Down
Screenshot of cargo.xtransithaulers.com
cargo.xtransithaulers.com
14 VTTaken Down
Screenshot of chatgpt.option.eu.org
chatgpt.option.eu.org
14 VTLive
Screenshot of check-amlofficial.com
check-amlofficial.com
14 VTTaken Down
Screenshot of city-premiertrust.com
city-premiertrust.com
14 VTLive
Screenshot of claimmemesolana.firebaseapp.com
claimmemesolana.firebaseapp.com
14 VTLive
Screenshot of cloverinsonlogistic.com
cloverinsonlogistic.com
14 VTLive
Screenshot of coinbase.cod-cupon.ro
coinbase.cod-cupon.ro
14 VTLive
Screenshot of coinmarketcape.com
coinmarketcape.com
14 VTLive
Screenshot of convexfinance.org
convexfinance.org
14 VTLive
Screenshot of corecargologistics.com
corecargologistics.com
14 VTLive
Screenshot of corn-staging.com
corn-staging.com
14 VTLive
Screenshot of cryptocurrency-tumbler.to
cryptocurrency-tumbler.to
14 VTTaken Down
Screenshot of customers-coinbase.com
customers-coinbase.com
14 VTTaken Down
Screenshot of dappactivationpanel.pro
dappactivationpanel.pro
14 VTTaken Down
Screenshot of debank.ink
debank.ink
14 VTLive
Screenshot of debank.team
debank.team
14 VTLive
Screenshot of dexintegrations.netlify.app
dexintegrations.netlify.app
14 VTTaken Down
Screenshot of dextoolwallets.on.fleek.co
dextoolwallets.on.fleek.co
14 VTLive
Screenshot of dogsairdrop.live
dogsairdrop.live
14 VTTaken DownWallet Connect Abuse
Screenshot of dpln-quete.com
dpln-quete.com
14 VTLive
Screenshot of elite-futurestradinglt.com
elite-futurestradinglt.com
14 VTTaken Down
Screenshot of equinoxnudgecun.com
equinoxnudgecun.com
14 VTLive
Screenshot of express-rocketcl.com
express-rocketcl.com
14 VTTaken Down
Screenshot of expressway-delivery.com
expressway-delivery.com
14 VTLive
Screenshot of farossonglobaltrade.ltd
farossonglobaltrade.ltd
14 VTLive
Screenshot of fidato-paycore.com
fidato-paycore.com
14 VTTaken Down
Screenshot of gambwin.com
gambwin.com
14 VTLive
Screenshot of goldentrustinvestments.com
goldentrustinvestments.com
14 VTLive
Screenshot of guildcheck.net
guildcheck.net
14 VT
Screenshot of icapitaltrade.pro
icapitaltrade.pro
14 VTLive
Screenshot of imtokenay.com
imtokenay.com
14 VTTaken Down
Screenshot of info-debank.com
info-debank.com
14 VTTaken Down
Screenshot of intholdfinances.com
intholdfinances.com
14 VTLive
Screenshot of kraken.world
kraken.world
14 VTLive
Screenshot of ledger-securehelp.com
ledger-securehelp.com
14 VTTaken Down
Screenshot of ledger.com-secure-live.app
ledger.com-secure-live.app
14 VTLive
Screenshot of ledgerholders.com
ledgerholders.com
14 VTLive
Screenshot of ledgersell.com
ledgersell.com
14 VTLive
Screenshot of ledgeruserissuelive.com
ledgeruserissuelive.com
14 VTTaken Down
Screenshot of ledgerwebsolution.com
ledgerwebsolution.com
14 VTTaken Down
Screenshot of lianshui.pilot45.com
lianshui.pilot45.com
14 VTTaken Down
Screenshot of llamasaswap.com
llamasaswap.com
14 VTLive
Screenshot of luckpax.com
luckpax.com
14 VTTaken Down
« Prev ... 2 3 4 5 6 7 8 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.