Overview
Aug 2612,272
Jul 2618,440
Jun 2622,732
May 267,405
Apr 2616,732
Mar 2620,981
Feb 2640,388
Jan 268,919
Dec 2511,740
Nov 2512,563
Oct 258,835
Sep 257,297
Aug 253,782
Jul 25700
Jun 253
August 2025 Intelligence Report
440.3%
3,782
2,195
Taken Down
1,440
Still Live
58%
Kill Rate
5578h
Avg Response
5.7
Avg VT Score
In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,196 of them (58.1%) have already been neutralized, while 1,434 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.
- Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
- Brand pressure is concentrated on across and Google — 643 lookalike domains between them.
- The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
- Dominant drainer kit: Angel Drainer (207 deployments detected).
- Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.
Top Registrars
| Registrar | Domains |
|---|---|
| Web Commerce Communications Limited | 277 |
| NameSilo, LLC | 254 |
| NiceNIC International Group Co., Limited | 204 |
| Dynadot LLC | 189 |
| NameCheap, Inc. | 183 |
| OwnRegistrar, Inc. | 169 |
| URL Solutions, Inc. | 159 |
| Cosmotown, Inc. | 151 |
Active Drainer Kits
August 2025 Domains (3,782)
Sorted by VirusTotal detections. Click any domain for full security report.
Detection Trends
Monthly domain volume, kill rate, and live threats over time.
Monthly Detected Domains
Kill Rate %
Explore More
Related intelligence pages and data feeds.