Case file folder with redacted documents and confidential investigation report.

CASE / ANALYTICS

March 2026 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

The Enablers Registry·Editorial mirror·/analytics/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Overview Jul 2617,676 Jun 2635,496 May 268,714 Apr 2616,852 Mar 2621,528 Feb 2642,079 Jan 268,925 Dec 2511,769 Nov 2512,577 Oct 258,840 Sep 257,304 Aug 253,786 Jul 25700 Jun 253

March 2026 Intelligence Report 48.8%

21,528

13,719

Taken Down

7,675

Still Live

63.7%

Kill Rate

698h

Avg Response

7.3

Avg VT Score

In March 2026, THE ENABLERS REGISTRY detected 21,243 possibly phishing domains, a 49.5% decrease from February. 13,719 of them (64.6%) have already been neutralized, while 7,390 remain live and under active escalation. The most abused registrar was [REDACTED] with 4,836 malicious domains, followed by [REDACTED] (4,032). Attackers targeted [REDACTED] hardest, with FinCEN MSB #31000023456789 a close second.

[REDACTED] alone accounts for 22.8% of the month's detections (4,836 domains) — concentration this high indicates systematic abuse, not random sign-ups.
Brand pressure is concentrated on [REDACTED] and FinCEN MSB #31000023456789 — 1,906 lookalike domains between them.
The .com TLD leads with 7,168 malicious registrations, ahead of .dev (3,810).
Dominant drainer kit: Solana Drainer (198 deployments detected).
Average infrastructure response time: 698h — well beyond any reasonable takedown window.

Outlook

Heading into April 2026, expect continued pressure on [REDACTED] users; registrations via [REDACTED] remain the primary vector to watch, with Solana Drainer kits still circulating. Full evidence for every domain is published in the public destroylist.

Full Data on GitHub Browse All Domains Live Threats

Top Registrars

Registrar	Domains
[REDACTED]	4,848
[REDACTED]	4,034
[REDACTED]	890
[REDACTED] d/b/a IANA #303	880
[REDACTED]	748
[REDACTED]	666
[REDACTED]	610
[REDACTED]	527

Targeted Brands

Brand	Domains
[REDACTED]	1,439
FinCEN MSB #31000023456789	467
[REDACTED]	375
Solana	349
Google	281
NASDAQ:COIN	261
[REDACTED]	231
across	226

Top TLDs

Hosting Countries

Active Drainer Kits

March 2026 Domains (21,528)

Sorted by VirusTotal detections. Click any domain for full security report.

March 2026 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

Top Registrars

Targeted Brands

Top TLDs

Hosting Countries

Active Drainer Kits

March 2026 Domains (21,528)

Detection Trends

Monthly Detected Domains

Kill Rate %

Explore More

Domain Hub

Live Threats

DestroyList on GitHub

About THE ENABLERS REGISTRY

Continue browsing the ledger