August 2025 Phishing Threat Report — THE ENABLERS REGISTRY Analytics

• <strong>N/A</strong> remains the top abuse registrar with <strong>458</strong> domains, followed by <strong>[REDACTED]</strong> with <strong>224</strong> domains.
• Targeting of <strong>FinCEN MSB #31000023456789</strong> and <strong>[REDACTED]</strong> suggests a continued emphasis on cryptocurrency rather than traditional banking.
• The <strong>.com</strong> TLD was the most weaponized with <strong>1,828</strong> instances, dwarfing other TLDs like <strong>.xyz</strong> and <strong>.life</strong>.
• The <strong>Angel Drainer</strong> kit led the pack, posing a significant risk of wallet draining for cryptocurrency users.
• The majority of possibly phishing infrastructure is hosted in the <strong>US</strong> with <strong>2,524</strong> domains, indicating a concentration that defenders should prioritize.
• Despite a takedown rate of <strong>67.6%</strong>, the mean registrar response time of <strong>4426.9</strong> hours highlights a critical delay in mitigation efforts.

Active Drainer Kits