Threat Intelligence Dashboard

August 2025 Report

Detailed threat intelligence for 3,782 phishing domains. Registrar abuse, drainer kits, targeted brands, and AI-generated expert assessment.

189,932Total Detected
89,160Taken Down
51.7%Kill Rate
97%VT Coverage
60,375Abuse Reports
Overview Aug 269,220 Jul 2618,429 Jun 2622,732 May 267,405 Apr 2616,732 Mar 2620,981 Feb 2640,388 Jan 268,919 Dec 2511,740 Nov 2512,563 Oct 258,835 Sep 257,297 Aug 253,782 Jul 25700 Jun 253
August 2025 Intelligence Report 440.3%
3,782
2,211
Taken Down
1,393
Still Live
58.5%
Kill Rate
5578h
Avg Response
5.5
Avg VT Score
Daily threat detections — August 2025

In August 2025, PhishDestroy detected 3,782 phishing domains, a 440.3% increase from July. 2,208 of them (58.4%) have already been neutralized, while 1,428 remain live and under active escalation. The most abused registrar was Web Commerce Communications Limited with 277 malicious domains, followed by NameSilo, LLC (254). Attackers targeted across hardest, with Google a close second.

  • Web Commerce Communications Limited alone accounts for 7.3% of the month's detections (277 domains) — concentration this high indicates systematic abuse, not random sign-ups.
  • Brand pressure is concentrated on across and Google643 lookalike domains between them.
  • The .com TLD leads with 1,827 malicious registrations, ahead of .xyz (177).
  • Dominant drainer kit: Angel Drainer (207 deployments detected).
  • Average infrastructure response time: 5578h — well beyond any reasonable takedown window.
Outlook
Heading into September 2025, expect continued pressure on across users; registrations via Web Commerce Communications Limited remain the primary vector to watch, with Angel Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

August 2025 Domains (3,782)

Sorted by VirusTotal detections. Click any domain for full security report.

Screenshot of accounts.bmwweb.biz
accounts.bmwweb.biz
21 VTLive
Screenshot of www.metamask.tasheeltheqa.com
www.metamask.tasheeltheqa.com
21 VTTaken Down
Screenshot of etherealux-ledger-tech.com
etherealux-ledger-tech.com
20 VTTaken Down
Screenshot of fixedfloat.ac
fixedfloat.ac
20 VT
Screenshot of robiox.com.ua
robiox.com.ua
20 VTLive
Screenshot of steamcommunitylog.chez.com
steamcommunitylog.chez.com
20 VTLive
Screenshot of steamcomunity.aiq.ru
steamcomunity.aiq.ru
20 VTLive
Screenshot of wolke-ledgerix-soft.com
wolke-ledgerix-soft.com
20 VTTaken Down
Screenshot of chainretificator.com
chainretificator.com
19 VTTaken DownWallet Connect Abuse
Screenshot of ledgerlive-assets.com
ledgerlive-assets.com
19 VTTaken Down
Screenshot of muse-apple.netlify.app
muse-apple.netlify.app
19 VTLive
Screenshot of www-telegram.ing
www-telegram.ing
19 VTLive
Screenshot of 158940-coinbase.com
158940-coinbase.com
18 VT
Screenshot of airdrop-onbasebrian.com
airdrop-onbasebrian.com
18 VTLiveAngel Drainer
Screenshot of aureclimited.org
aureclimited.org
18 VTLive
Screenshot of axiom-trade-platform.com
axiom-trade-platform.com
18 VTTaken Down
Screenshot of axiomtrading-platform.com
axiomtrading-platform.com
18 VTLive
Screenshot of bitcoin-buyer-solution.com
bitcoin-buyer-solution.com
18 VTLive
Screenshot of createvault-coinbase.com
createvault-coinbase.com
18 VT
Screenshot of gravitonprofitsoftware.com
gravitonprofitsoftware.com
18 VTTaken Down
Screenshot of login-faxplus-outlook.com
login-faxplus-outlook.com
18 VTLive
Screenshot of luzia-coinex.ru
luzia-coinex.ru
18 VTTaken Down
Screenshot of metamask88.com
metamask88.com
18 VTLive
Screenshot of mettamsukkloggoin.webflow.io
mettamsukkloggoin.webflow.io
18 VTTaken Down
Screenshot of pub-8c1c14c3b0d64d0099312bb4670f2e23.r2.dev
pub-8c1c14c3b0d64d0099312bb4670f2e23.r2.dev
18 VTTaken Down
Screenshot of pub-d69c77ba755745888f5f3bae287f77ec.r2.dev
pub-d69c77ba755745888f5f3bae287f77ec.r2.dev
18 VTTaken Down
Screenshot of qr-apps-l.ink
qr-apps-l.ink
18 VTTaken Down
Screenshot of steamcomunnity.cc
steamcomunnity.cc
18 VT
Screenshot of uniswap-staging.org
uniswap-staging.org
18 VTLive
Screenshot of usdtmixer.to
usdtmixer.to
18 VTLive
Screenshot of walletverifyauth.com
walletverifyauth.com
18 VTTaken Down
Screenshot of www.3011m3011.com
www.3011m3011.com
18 VTTaken Down
Screenshot of amparadapp.live
amparadapp.live
17 VTTaken Down
Screenshot of bafybeig34wb2al33emjaaicltbnomje54jbvkrli75l5vbzlq7bo22e3ye.ipfs.dweb.link
bafybeig34wb2al33emjaaicltbnomje54jbvkrli75l5vbzlq7bo22e3ye.ipfs.dweb.link
17 VTLive
Screenshot of bananagun-io.com
bananagun-io.com
17 VTAngel Drainer
Screenshot of binance--us.com
binance--us.com
17 VTLive
Screenshot of eth-mixers.to
eth-mixers.to
17 VTTaken Down
Screenshot of fndedtrdplus.com
fndedtrdplus.com
17 VTTaken Down
Screenshot of ledger-live-secure.com
ledger-live-secure.com
17 VTTaken Down
Screenshot of ledgerprovisionlive.com
ledgerprovisionlive.com
17 VTTaken Down
Screenshot of ledgeruserprotectlive.com
ledgeruserprotectlive.com
17 VTTaken Down
Screenshot of ledgerusersupportlive.com
ledgerusersupportlive.com
17 VT
Screenshot of mtamsaklohgin.webflow.io
mtamsaklohgin.webflow.io
17 VTTaken Down
Screenshot of netflix-gpt-609e2.firebaseapp.com
netflix-gpt-609e2.firebaseapp.com
17 VTTaken Down
Screenshot of netflixgpt-98554.web.app
netflixgpt-98554.web.app
17 VTLive
Screenshot of onlydotas2.hop.ru
onlydotas2.hop.ru
17 VTLive
Screenshot of pub-35312b95baf4482f8dd1d6c35e6943a1.r2.dev
pub-35312b95baf4482f8dd1d6c35e6943a1.r2.dev
17 VTTaken Down
Screenshot of pub-a77375725cbe4ebebbbb725baa062262.r2.dev
pub-a77375725cbe4ebebbbb725baa062262.r2.dev
17 VTTaken Down
Screenshot of qfs-ledger.us
qfs-ledger.us
17 VTLive
Screenshot of repair-coinbase.com
repair-coinbase.com
17 VTLive
Screenshot of stackrectify.com
stackrectify.com
17 VTLive
Screenshot of stellarcapitalventure.com
stellarcapitalventure.com
17 VTLive
Screenshot of suite.tem3.io
suite.tem3.io
17 VTLive
Screenshot of swap.swissdlt.ch
swap.swissdlt.ch
17 VTLive
Screenshot of telegrameem.com
telegrameem.com
17 VTLive
Screenshot of telegramgke.com
telegramgke.com
17 VTLive
Screenshot of tetheraudit-bot.com
tetheraudit-bot.com
17 VTTaken Down
Screenshot of twitchdrops.cc
twitchdrops.cc
17 VT
Screenshot of uniswap30.vip
uniswap30.vip
17 VTTaken DownWallet Connect Abuse
Screenshot of www.50050041.com
www.50050041.com
17 VTLive
1 2 3 4 ... Next »

Detection Trends

Monthly domain volume, kill rate, and live threats over time.

Monthly Detected Domains

Kill Rate %

Explore More

Related intelligence pages and data feeds.