Google Ads
HIGHA sponsored result can imitate a wallet or exchange and lead to a lookalike domain.
Platform Health
179,000+
Threats Tracked
Current report database
70,000+
Last Seen Active
Responded during the latest stored scan
108,000+
Unavailable at Last Check
Did not serve content during the latest stored scan
183
New in Last 24h
Threat-Intel · TTPs & Geo
The Threats We Hunt
⌘KLook up any domain in our 179,000+ threat database
Detectedloading live feed…
Flagship
Six tools that do the heavy lifting
These are the core tools: live data, open APIs, domain analysis and on-chain intelligence. Access is free and unlimited.
REAL-TIME
Live Threat Feed
Stream of phishing detections as they happen: domain, brand, registrar, cloaking flags. Refreshed continuously.
Watch the feed →179,000+ DOMAINS
Domain Intel Hub
Per-domain dossiers: WHOIS, DNS, TLS, VirusTotal, cloaking, kit fingerprint, abuse-report history. Searchable.
Browse reports →NO API KEY
Free REST API
Check a domain, pull a feed, bulk-scan 500/req. 1M+ threat records, CC-BY licensed, zero cost.
Read API docs →ONE-CLICK
URL Analyzer
Paste any URL to get VirusTotal consensus, drainer-kit fingerprint, cloaking test, SSL chain and a screenshot.
Analyze now →ON-CHAIN
Phishing Wallets DB
Drainer addresses, rug-pull wallets, linked infrastructure across EVM + Solana. Flagged, searchable, exportable.
Search wallets →OPEN SOURCE
DestroyList Blocklist
Community-curated threat feed on GitHub. Auto-updated domain blocklist for firewalls, DNS filters, browser extensions.
View on GitHub →Platform Directory
Everything else we built
Supporting tools, research dashboards, guides and experimental projects, grouped by purpose.
scan@phishdestroy:~$
scan@phishdestroy:~$check --domain <target>
▸ instant verdict against 179,000+ tracked domains
▸ backed by /v1/check API • 0 API key required
They call us Enemy #1
Relentless Attacks. Zero Effect.
Scammers repeatedly target our infrastructure to escape reports and bans. The outcome stays the same: evidence remains public, detections continue, and our takedown reporting costs users $0.
Current corpus
179,000+
Domains tracked
Stored records
58,000+
Abuse reports
Confirmed outcomes
27,000+
Confirmed takedowns
Zero-fee policy
$0
Paid to registrars or platforms for takedowns (ever)
Warning: Crypto Scams Ahead
Knowledge is your best defense. Learn the most common deception tactics to avoid becoming the next victim.
Don't Be Silent! Your Silence is Their Power.
If you've been scammed, file a report. Filing a report on platforms like Chainabuse is a minimum first step. Ideally, you should report the incident to your local law enforcement. For expert guidance on legal matters or theft, we highly recommend contacting Seal911. Its professionals can provide sound advice for your situation.
Be extremely cautious of "recovery services" that contact you after a theft. Most are recovery scams trying to victimize you a second time.
Threat Surface
Where scammers reach you
Three common delivery channels turn an ordinary search, reply, or support request into a phishing attempt.
X replies
HIGHImpersonator accounts clone names and avatars, then post fake giveaways or support links.
Discord support
HIGHFake moderators send unsolicited DMs and ask you to open a ticket or reconnect a wallet.
Simple rule: never share a seed phrase or sign an unexpected transaction to "verify" a wallet.
See all scam channelsConnected Security
Security Tools and Partners
Open data, public reports and feeds built to work with other security tools.
For Developers
Destroy API
Free, open, no API key. Real-time domain risk scoring across 1M+ threats.
Endpoints
5
Bulk Limit
500 /req
Auth
Open
Sync
Hourly
api.destroy.tools
$ curl "https://api.destroy.tools/v1/check?domain=suspicious-site.xyz"
{
"threat": true,
"risk_score": 85,
"severity": "critical",
"sources": ["destroylist", "community"],
"dns_active": true
}
Threat Scoring (0–100)
Critical 70–100High 40–69Medium 20–39Low 1–19
Available Endpoints
| Method | Endpoint | Description |
|---|---|---|
| GET | /v1/check?domain= | Single check |
| POST | /v1/check/bulk | Bulk (500/req) |
| GET | /v1/search?q= | Keyword search |
| GET | /v1/feed/{list} | Full feeds |
| GET | /v1/stats | Live stats |
Live Intelligence
Latest Detections
Recently stored phishing detections from the public feed.
Protect Yourself
Essential Security Resources
Emergency: I Was Scammed
Immediate steps if your crypto wallet was drained. Revoke approvals, secure remaining assets, and report the crime.
Emergency Response GuideUltimate Security Checklist
Step-by-step guide to hardening your crypto security. Hardware wallets, 2FA settings, and browsing hygiene.
Security ChecklistPrivacy Arsenal & Tools
Recommended privacy tools, secure browsers, VPNs, and operating systems to stay anonymous online.
Privacy & Security Tools
What we do
A Free Solution to Take Down Scammers
We follow threats from initial detection through infrastructure takedown.
Cooperation with Authorities
We help identify scam teams and prepare reports that law enforcement can use.
Threat Chain Tracing
We reconstruct threat chains across multiple domains, assets, and wallets.
Code Analysis & Auto-Detection
We build detection templates and automate code analysis to instantly block scams.
Hall of Shame
Eliminated Operations
Hacker's Cry
Yo, it's Morgan, your PinkDrainer king with the Pinkboy! password! Chillin' at some address - until the UK cops crashed my party! They've got me locked up, but ha, I'm still hugging my glittery crypto stash tight - good luck prying it from my pink fingers! 2 stars for the arrest, you pesky hunters!
Hacker's Rant
Oh, behold Inferno Drainer, ghost who vanished then strutted back! 'big hits' were just backdoor thefts. It turns out Angel Drainer sold me off ages ago and played puppet master, tricking his crew with my name! Now I'm toast, and my crypto's gone - well done, you sly hunters, 4 skulls for the expose!
Hacker's Meltdown
Well, hello there, it's Phishlab - aka Pakulichev, the coding genius! Sold my MS Drainer code for $1,500 to 200 clowns who leaked, resold, and wrecked havoc! Now my masterpiece's racked up $60 million+ in damage, and I'm sitting here with peanuts in my pocket - brilliant move, eh? Time to cry into my empty wallet while you lot laugh!
Hacker's Whine
Hey, it's your crew CrazY Evil, still ruling the scam scene! Angel Drainer's our real-life bro since way back - we even collabed, dropping Russian rap about scams, loving to smear the beats! But he bailed - hated how we snatch all the profit and leave workers no control, unlike his tidy Drainer setup. He's chilling in Some Hot country, sipping tea, while we keep the chaos rolling - catch us if you can!
Hacker's Panic
Ha! It's AceDrainer, the pop-up wizards still on the loose! We hacked those animation libraries, flooding crypto apps with sneaky pop-ups - draining wallets like champs! Sure, our domains are getting auto-banned left and right, but we're dodging you lot for now. Keep trying, you clever detectors - 2 bans for your effort!
Hacker's Beg
Ha! It's C*** D** Loy, aka SmolGoblin, the UA scam king! Ripped off 1,000+ suckers worldwide, pocketing over $10 million - heck, one some country fool lost $2.7 million ($20M at today's rate)! Phishing, laundering via some exchange, spreading "Stealername" malware, and cruising in my Maybach S580, Tesla Model X, BMW M4 Competition, and Porsche 911! Czech cops are sniffing around. Nah, I'll race 'em instead! Catch me if you can, you legal nerds!
Hacker's Surrender
Yo, it's the late CryptoLove crew, once the love bandits of crypto! Thought our phishing game was unstoppable - until RussianPanda swooped in like a ninja bear! He torched our domains, drained our wallets, and left us crying in the dust. Game over, you sly panda bastard - 5 skulls for the knockout, we're donezo!
Scammer's Delusion
Hey hey, it's your boy from Gambler Panel! I totally don't steal from my own workers - pinky promise! I'm basically a charity, right? Just scamming the entire CIS and half the world, no biggie. Love my party supplies more than my own projects! And those designs with rainbows and pride flags? Dead serious, not trolling at all! Big thanks to PhishDestroy for banning all my worker domains - really helps with my reputation! As a truly gifted leader, I'm proud that my panels rack up 15+ VirusTotal detections. That's called quality!
Arakelyan L. A. · Russia, Moscow Oblast, Domodedovo
Product's Confession
Huge thanks to PhishDestroy for the thorough audit and that lovely GitHub script that detects Keitaro on any site! Our beloved TDS product is mostly used for phishing, scam, malware distribution, and cloaking - but hey, we call it "traffic management"! Zero login page protection out of the box? That's a feature, not a bug! We're the #1 cause of domain bans worldwide and we love it. Money and lockers are our true passion - definitely a legal company that absolutely doesn't collect black market traffic data!
Disclaimer: All characters in this section are fictional and presented in a humorous, parody style for entertainment purposes only. They are not connected to any real individuals. Inspired by public nicknames and open cases, with no personal data or direct accusations included.
Support & Legal
Disclaimer and Frequently Asked Questions
Non-commercial, independent project. We are an open community focused on identifying, documenting, and disrupting phishing and scam infrastructure for public benefit.
- Open by design. Where safe and lawful, indicators and scans are publicly accessible.
- No user databases. We do not store personal data. For appeals and takedown status we use a ticket ID only.
- No direct takedowns. We submit evidence to registrars, hosting providers, and trusted vendors; enforcement is their decision.
- Safe for legitimate sites. Our passive scans and reports do not harm lawful resources.
- No warranties. Content is provided "as is", without guarantees of completeness or fitness.
- Lawful cooperation. For qualifying cases, artifacts may be shared with competent authorities.
- Scanning. We perform safe, passive checks to collect artifacts and indicators.
- Escalation. We request professional services to verify resources and ask registrars/hosts to review clients via abuse teams.
- Investigations. We occasionally conduct hobby-level OSINT; results are published, shared with peers, or forwarded to authorities. We do not hoard private data. See our Gambler Panel investigation for an example. Browse all research on our News & Investigations page.
- Collaboration. We are open to partnerships. Certain private tools and materials can be shared for defensive purposes on request.
- Dashboards. Explore stolen funds across all chains via the DeFi Hack Explorer or investigate scam infrastructure with our Scam Intelligence Dashboard.
Permanent public allowlist. Cleared domains are added to our permanent allowlist. The public list is available as allowlist.json.
Appeal removes the domain. If an appeal is approved, the domain is removed from our database and from any places where we published it.
Ticket-only tracking. We do not store personal data. For status checks and takedown requests we use a ticket ID only.
- Open access. The bot is open to everyone, which does not change its purpose: faster disruption of fraud.
- No paid leniency. We have never asked for or accepted payment for unbans or favors. The process and database are open and verifiable.
- Trusted reporters. Reputable users may report without pre-moderation and submit bulk complaints for speed.
Act fast and preserve evidence: URLs, TXIDs, wallet addresses, screenshots, timestamps, chat logs. File an official report. For prevention, read our Crypto Security Essentials guide.
- United States: https://www.ic3.gov/
- United Kingdom: https://www.actionfraud.police.uk/
- Other countries: contact your national cybercrime unit or local police
Personal Recommendation
For any incident, I strongly recommend contacting the SEAL 911 Bot. This is a rapid response group of professionals who really know their stuff and can help in any situation.