# Crypto Phishing Q2 2026: Observed Data

> A concise, page-specific cohort report summarizing the 46,871 unique crypto phishing domain records observed by PhishDestroy during Q2 2026.

- Canonical article: https://phishdestroy.io/reports/crypto-phishing-q2-2026/
- Extended LLM context: https://phishdestroy.io/llms-full.txt
- Author and publisher: PhishDestroy Research
- Published: 2026-08-04
- Language: en-US
- Content type: threat-intelligence statistical cohort report

## Core Dataset Statistics

This report documents a specific observed cohort of 46,871 unique domain records tracked by PhishDestroy between April 1 and June 30, 2026.

1. **Volume and Timeline:** Observes monthly totals, kit fingerprints, and registrar distributions within the cohort.
2. **Data Coverage:** Highlights the presence of forensic evidence, including DNS records, IP countries, active SSL certificates, and corresponding screenshot captures.
3. **Scope and Limitations:** Represents the PhishDestroy project-observed cohort, not the total sum of all global phishing.

## Key Findings

- **Registrar Density:** Details the concentration of maliciously registered domains across key volume-heavy registrars.
- **Active Life:** Tracks the observed survival hours of campaigns before DNS-level suspension (serverHold) or hosting termination.