Case file folder with redacted documents and confidential investigation report.

CASE / ANALYTICS

February 2026 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

The Enablers Registry·Editorial mirror·/analytics/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Overview Jul 267,112 Jun 2632,829 May 267,196 Apr 2616,025 Mar 2620,579 Feb 2642,079 Jan 268,925 Dec 2511,769 Nov 2512,577 Oct 258,840 Sep 257,304 Aug 253,786 Jul 25700 Jun 253

February 2026 Intelligence Report 371.5%

42,079

32,204

Taken Down

9,875

Still Live

76.5%

Kill Rate

1255h

Avg Response

7.4

Avg VT Score

In February 2026, THE ENABLERS REGISTRY detected 18,204 possibly phishing domains, marking a 103.8% increase from the previous month. The takedown rate was 68.2%, with 5,792 domains still active. Notably, [REDACTED] emerged as the top registrar with 7,733 abusive domains. Targeting shifted towards Facebook Pixel and generic crypto brands, indicating a pivot in attacker focus. The operational impact shows a need for improved registrar response times, averaging 288.1 hours, to enhance takedown efficiency.

[REDACTED] leads registrar abuse with 7,733 domains, requiring immediate attention.
Targeting of Facebook Pixel surged to 778 domains, indicating a shift towards social media manipulation.
.com remains the most weaponized TLD with 6,425 domains, followed by .xyz at 1,309.
The solana_drainer kit dominated with 355 instances, posing significant risk for cryptocurrency theft.
Hosting infrastructure remains geographically dispersed, with no significant migration patterns observed.
Registrar response times averaged 288.1 hours, highlighting a critical gap in takedown efficiency.

Outlook

Expect continued focus on social media and cryptocurrency brands in March 2026, with potential increases in Facebook Pixel and crypto-related possibly phishing. Defenders should prioritize monitoring [REDACTED] and improving takedown response times. Registrars like [REDACTED] and [REDACTED] need escalation to enhance their abuse handling processes.

Full Data on GitHub Browse All Domains Live Threats

Top Registrars

Registrar	Domains
[REDACTED]	8,749
[REDACTED]	6,422
[REDACTED]	1,927
[REDACTED] d/b/a IANA #303	1,491
[REDACTED]	1,443
[REDACTED]	1,392
[REDACTED]	1,113
[REDACTED]	1,004

Targeted Brands

Brand	Domains
across	1,530
NASDAQ:COIN	1,128
[REDACTED]	858
Ethereum	776
solana	708
Google	559
[REDACTED]	531
LEI:5493004F7TI6QBM4WX72	510

Top TLDs

Hosting Countries

Active Drainer Kits

February 2026 Domains (42,079)

Sorted by VirusTotal detections. Click any domain for full security report.

February 2026 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

Top Registrars

Targeted Brands

Top TLDs

Hosting Countries

Active Drainer Kits

February 2026 Domains (42,079)

Detection Trends

Monthly Detected Domains

Kill Rate %

Explore More

Domain Hub

Live Threats

DestroyList on GitHub

About THE ENABLERS REGISTRY

Continue browsing the ledger