Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

193,663Total Detected
88,943Taken Down
50.6%Kill Rate
97.2%VT Coverage
61,523Abuse Reports
Overview Aug 2612,939 Jul 2618,442 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,387 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,191
Taken Down
1,412
Still Live
57.9%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,188 of them (57.9%) have already been neutralized, while 1,444 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of gwas09x.space
gwas09x.space
1 VTTaken Down
Screenshot of gwau49x.top
gwau49x.top
1 VTTaken Down
Screenshot of gwax62x.top
gwax62x.top
1 VTTaken Down
Screenshot of gwba29x.top
gwba29x.top
1 VTTaken Down
Screenshot of gwbg53x.top
gwbg53x.top
1 VTTaken Down
Screenshot of gwbg79x.space
gwbg79x.space
1 VTTaken Down
Screenshot of gwbh75x.space
gwbh75x.space
1 VTTaken Down
Screenshot of gwcr48x.top
gwcr48x.top
1 VTTaken Down
Screenshot of gwde86x.life
gwde86x.life
1 VTTaken Down
Screenshot of gwea64x.life
gwea64x.life
1 VTTaken Down
Screenshot of gwfj65x.life
gwfj65x.life
1 VTTaken Down
gwft43x.life
1 VTTaken Down
Screenshot of gwfv03x.space
gwfv03x.space
1 VTTaken Down
Screenshot of gwfx11x.life
gwfx11x.life
1 VTTaken Down
Screenshot of gwfz50x.life
gwfz50x.life
1 VTTaken Down
Screenshot of harvest-fx.com
harvest-fx.com
1 VTTaken Down
Screenshot of hastlecas.com
hastlecas.com
1 VTTaken Down
Screenshot of hbg7x.com
hbg7x.com
1 VTTaken Down
Screenshot of hbiscsteel.com
hbiscsteel.com
1 VTTaken Down
Screenshot of heartzmobilemoney.com
heartzmobilemoney.com
1 VTTaken Down
Screenshot of hedgeprimeprofits.com
hedgeprimeprofits.com
1 VTTaken Down
Screenshot of helpallfix.site
helpallfix.site
1 VTTaken DownAngel Drainer
Screenshot of hotscoin.biz
hotscoin.biz
1 VTTaken Down
Screenshot of htp-mask.top
htp-mask.top
1 VTTaken Down
Screenshot of humansairesolution.info
humansairesolution.info
1 VTTaken Down
Screenshot of hype.rliquid.co.com
hype.rliquid.co.com
1 VTLiveWallet Connect Abuse
Screenshot of hyperliquds.it.com
hyperliquds.it.com
1 VTLive
Screenshot of hyperstaking-aave.com
hyperstaking-aave.com
1 VTTaken Down
Screenshot of hyperstaking-defisaver.com
hyperstaking-defisaver.com
1 VTTaken Down
Screenshot of ibkhadata.com.ng
ibkhadata.com.ng
1 VTTaken Down
Screenshot of imperialminhub.com
imperialminhub.com
1 VTTaken Down
Screenshot of integrationnode.site
integrationnode.site
1 VTTaken Down
Screenshot of interethrift.com
interethrift.com
1 VTTaken Down
Screenshot of invitation-to-join-the-hardcore-club.com
invitation-to-join-the-hardcore-club.com
1 VTTaken Down
Screenshot of jetton-telegram.net
jetton-telegram.net
1 VTTaken Down
Screenshot of jop.ac
jop.ac
1 VTTaken DownSolana Drainer
Screenshot of kaito.cfd
kaito.cfd
1 VTTaken Down
Screenshot of kentcasinoff.com
kentcasinoff.com
1 VTTaken Down
Screenshot of kentspin.sbs
kentspin.sbs
1 VTTaken Down
Screenshot of kentwins.com
kentwins.com
1 VTTaken Down
Screenshot of kentxage357.com
kentxage357.com
1 VTTaken Down
Screenshot of kometastart.com
kometastart.com
1 VTTaken Down
Screenshot of kucoinporr.com
kucoinporr.com
1 VTTaken Down
Screenshot of landwolfs.onchainx.world
landwolfs.onchainx.world
1 VTTaken DownAngel Drainer
Screenshot of ldtlukioni.ge
ldtlukioni.ge
1 VTTaken Down
Screenshot of ledger-techwallet.com
ledger-techwallet.com
1 VTTaken Down
Screenshot of ledger.com-app.co
ledger.com-app.co
1 VTLive
Screenshot of ledgerai-en.net
ledgerai-en.net
1 VTTaken Down
Screenshot of ledgeraml.live
ledgeraml.live
1 VTTaken Down
Screenshot of ledgerauthsync.com
ledgerauthsync.com
1 VTTaken Down
Screenshot of ledgerdeskhub.com
ledgerdeskhub.com
1 VTTaken Down
Screenshot of ledgerlightfx.cfd
ledgerlightfx.cfd
1 VTTaken Down
Screenshot of ledgerpluse.com
ledgerpluse.com
1 VTTaken Down
Screenshot of ledgerpointstake.online
ledgerpointstake.online
1 VTTaken Down
Screenshot of ledgersus.com
ledgersus.com
1 VTTaken Down
Screenshot of ledgerwallettips.com
ledgerwallettips.com
1 VTTaken Down
Screenshot of letocas.com
letocas.com
1 VTTaken Down
Screenshot of levnox.com
levnox.com
1 VTTaken Down
Screenshot of lfg.eco
lfg.eco
1 VTTaken DownWallet Connect Abuse
Screenshot of localcoinswap.exchange
localcoinswap.exchange
1 VT
« Prev ... 54 55 56 57 58 59 60 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.