Case file folder with redacted documents and confidential investigation report.

CASE / ANALYTICS

February 2026 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

The Enablers Registry·Editorial mirror·/analytics/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Overview Jul 2625,224 Jun 2637,568 May 2610,305 Apr 2617,551 Mar 2624,451 Feb 2642,051 Jan 268,921 Dec 2511,746 Nov 2512,563 Oct 258,835 Sep 257,298 Aug 253,783 Jul 25700 Jun 253

February 2026 Intelligence Report 371.4%

42,051

29,770

Taken Down

12,144

Still Live

70.8%

Kill Rate

1261h

Avg Response

7.9

Avg VT Score

In February 2026, THE ENABLERS REGISTRY detected 42,051 possibly phishing domains, a 371.4% increase from January. 27,476 of them (65.3%) have already been neutralized, while 14,438 remain live and under active escalation. The most abused registrar was [REDACTED] with 8,752 malicious domains, followed by [REDACTED] (6,418). Attackers targeted across hardest, with NASDAQ:COIN a close second.

[REDACTED] alone accounts for 20.8% of the month's detections (8,752 domains) — concentration this high indicates systematic abuse, not random sign-ups.
Brand pressure is concentrated on across and NASDAQ:COIN — 2,657 lookalike domains between them.
The .com TLD leads with 13,194 malicious registrations, ahead of .dev (6,097).
Dominant drainer kit: Solana Drainer (647 deployments detected).
Average infrastructure response time: 1261h — well beyond any reasonable takedown window.

Outlook

Heading into March 2026, expect continued pressure on across users; registrations via [REDACTED] remain the primary vector to watch, with Solana Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

Full Data on GitHub Browse All Domains Live Threats

Top Registrars

Registrar	Domains
[REDACTED]	8,752
[REDACTED]	6,418
[REDACTED]	1,928
[REDACTED] d/b/a IANA #303	1,492
[REDACTED]	1,438
[REDACTED]	1,394
[REDACTED]	1,111
[REDACTED]	1,004

Targeted Brands

Brand	Domains
across	1,529
NASDAQ:COIN	1,128
[REDACTED]	858
Ethereum	776
solana	707
Google	559
[REDACTED]	531
LEI:5493004F7TI6QBM4WX72	510

Top TLDs

Hosting Countries

Active Drainer Kits

February 2026 Domains (42,051)

Sorted by VirusTotal detections. Click any domain for full security report.

February 2026 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

Top Registrars

Targeted Brands

Top TLDs

Hosting Countries

Active Drainer Kits

February 2026 Domains (42,051)

Detection Trends

Monthly Detected Domains

Kill Rate %

Explore More

Domain Hub

Live Threats

DestroyList on GitHub

About THE ENABLERS REGISTRY

Continue browsing the ledger