The Internet is infested. We are the antidote. PhishDestroy provides a scorched-earth approach to phishing, malware, and fraud. No warnings. No negotiations. Just total removal of malicious infrastructure.
phishdestroy@root:~$Sending reports to partners... OK
phishdestroy@root:~$Content status: REMOVED
They call us Enemy #1
Relentless Attacks. Zero Effect.
Scammers continuously target our project and infrastructure to escape bans. One recent example is the enforced removal of our X/Twitter account used for posting reports. Attacks are constant and varied.
Outcome stays the same: we scan, flag, and kill domains before victims lose funds. Our takedowns cost $0. Their attempts burn money and time for no gain.
Knowledge is your best defense. Learn the most common deception tactics to avoid becoming the next victim.
Fake Returns
Scammers lure victims by promising unrealistically high returns on investments. These can be Ponzi schemes, where early investors are paid with funds from newer ones, or "pump and dump" schemes, where an asset's price is artificially inflated and then crashed.
Case Study: "CryptoRocket" Project
An investor, "Alex," put $5,000 into a project promising 100% daily profits. The first few "payouts" arrived, funded by new investors. Once the flow of new money stopped, the site and social media vanished, along with all the funds.
Criminals pretend to be famous personalities, celebrities, major investors, or representatives of official projects. Their goal is to persuade you to send them money for an "exclusive" giveaway or investment round.
Case Study: The "Elon Musk Giveaway"
A scammer created a fake Twitter account mimicking Elon Musk and announced a crypto giveaway. Users were asked to send 0.1 ETH to "verify their address" to receive 1 ETH in return. Unsurprisingly, no one received the promised reward.
Attackers claim to possess compromising photos or videos of you and threaten to release them unless you pay a ransom in cryptocurrency. Often, these threats are bluffs designed to exploit your fear.
Case Study: The "Hacked Webcam" Email
Maria received an email claiming her webcam was hacked and a compromising video was recorded. The blackmailer demanded $1,000 in BTC, threatening to send the video to all her contacts. Maria ignored the email, and nothing ever happened.
A development team creates a crypto project, raises funds from investors by selling tokens, and then suddenly disappears, taking all the money and deleting their website and social media. The liquidity is pulled, making the token worthless.
Case Study: "LunarSwap" Project
A new DeFi project, "LunarSwap," raised millions, promising revolutionary exchange technology. A month after launch, the developers drained all liquidity from the trading pair, crashing the token price to zero, and vanished from the internet.
A scammer threatens to release sensitive information, cause harm to the victim or their systems, or take other malicious actions unless a crypto payment is made. It preys on fear and intimidation.
Case Study: The "DDoS Threat"
An online business owner received an email threatening a massive Distributed Denial-of-Service (DDoS) attack that would crash their website unless they paid 2 ETH. The threat was designed to extort money by preventing business disruption.
An attacker encrypts your computer system or personal files, making them inaccessible. They then demand a ransom payment, usually in cryptocurrency, to restore access.
Case Study: The "Locked Files" Attack
A company's network was infected with ransomware, encrypting all critical financial data. The attackers demanded 5 BTC to provide the decryption key. The company was forced to negotiate, highlighting the severe disruption these attacks cause.
The most common type of scam. Criminals create fake websites that mimic well-known crypto wallets, exchanges, or projects. The goal is to trick you into entering your seed phrase or private key to steal your assets.
Case Study: The "Fake MetaMask" Site
A user received an email, supposedly from MetaMask support, asking them to urgently "verify" their wallet due to a security update. The link led to a perfect replica of the official site. After entering the seed phrase, all funds were stolen.
Don't Be Silent! Your Silence is Their Power.
If you've been a victim of a scam, reporting it is crucial. Filing a report on platforms like Chainabuse is a minimum first step. Ideally, you should report the incident to your local law enforcement. For expert guidance on legal matters or theft, we highly recommend contacting Seal911, a group of professionals who can provide sound advice for your situation.
Be extremely cautious of "recovery services" that contact you after a theft. Most are recovery scams trying to victimize you a second time.
We are volunteer cybersecurity fighters dedicated to destroying phishing schemes and protecting users from crypto scams. Through years of active combat, we've built a reputation that enables us to ban phishing domains exponentially faster than before.
undefinedundefined
Our automated community-driven system means people send us phishing domains they encounter, and our system conducts analysis before automatically sending reports to antiviruses, scanners, VirusTotal, and security providers worldwide.
undefinedundefined
We've helped Google fight phishing in ads, battled fake crypto airdrops on YouTube, and created automated death systems for illegal scammer earnings.
Forget paid plans and brand protection nonsense. We don't beg for money - we wage war! Our goal? Crush phishing attacks on crypto users with brutal efficiency.
undefinedundefined
undefinedundefined
Flood phishing forms with 5M+ unique IPs and valid seeds
undefinedundefined
Team up with authorities to dismantle massive scam networks
undefinedundefined
Trace threat chains across multi-chain and bridge transactions
undefinedundefined
Kill domains with auto-detection templates and precision strikes
undefinedundefined
Block Telegram bots and channels - shut down their scams
undefinedundefined
Log threats for evidence and help authorities arrest them
Yo, it's undefinedundefinedMorgan, your undefinedundefinedPinkDrainer king with the Pinkboy! password! Chillin' at some address - until the UK cops crashed my party! They've got me locked up, but ha, I'm still hugging my glittery crypto stash tight - good luck prying it from my pink fingers! 2 stars for the arrest, you pesky hunters!undefinedundefined
Oh, behold Inferno Drainer, ghost who vanished then strutted back! 'big hits' were just backdoor thefts - turns out, Angel Drainer sold me off ages ago and played puppet master, tricking his crew with my name! Now I'm toast, and my crypto's gone - well done, you sly hunters, 4 skulls for the expose!
undefinedundefined
undefinedundefined
InfernoDrainer
undefinedundefined
Long gone
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Hacker's Meltdown
undefinedundefined
Well, hello there, it's Phishlab - aka undefinedundefinedPakulichev, the coding genius! Sold my MS Drainer code for $1,500 to 200 clowns who leaked, resold, and wrecked havoc! Now my masterpiece's racked up $60 million+ in damage, and I'm sitting here with peanuts in my pocket - brilliant move, eh? Time to cry into my empty wallet while you lot laugh!undefinedundefined
undefinedundefined
undefinedundefined
MS DRAINER
undefinedundefined
Broke Code Master
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Hacker's Whine
undefinedundefined
Hey, it's your crew CrazY Evil, still ruling the scam scene! Angel Drainer's our real-life bro since way back - we even collabed, dropping Russian rap about scams, loving to smear the beats! But he bailed - hated how we snatch all the profit and leave workers no control, unlike his tidy Drainer setup. He's chilling in undefinedundefinedSome Hot country, sipping tea, while we keep the chaos rolling - catch us if you can!undefinedundefined
undefinedundefined
undefinedundefined
CrazY Evil
undefinedundefined
Active Malware Rap Lords
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Hacker's Panic
undefinedundefined
Ha! It's AceDrainer, the pop-up wizards still on the loose! We hacked those animation libraries, flooding crypto apps with sneaky pop-ups - draining wallets like champs! Sure, our domains are getting auto-banned left and right, but we're dodging you lot for now. Keep trying, you clever detectors - 2 bans for your effort!
undefinedundefined
undefinedundefined
AceDrainer
undefinedundefined
Auto-banned left and right
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Hacker's Beg
undefinedundefined
Ha! It's undefinedundefinedC*** D** Loy, aka SmolGoblin, the UA scam king! Ripped off 1,000+ suckers worldwide, pocketing over $10 million - heck, one some country fool lost $2.7 million ($20M at today's rate)! Phishing, laundering via some exchange, spreading "Stealername" malware, and cruising in my Maybach S580, Tesla Model X, BMW M4 Competition, and Porsche 911! Czech cops are sniffing around. Nah, I'll race 'em instead! Catch me if you can, you legal nerds!undefinedundefined
undefinedundefined
undefinedundefined
SmolGoblin
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Hacker's Surrender
undefinedundefined
Yo, it's the late CryptoLove crew, once the love bandits of crypto! Thought our phishing game was unstoppable - until RussianPanda swooped in like a ninja bear! He torched our domains, drained our wallets, and left us crying in the dust. Game over, you sly panda bastard - 5 skulls for the knockout, we're donezo!
undefinedundefined
undefinedundefined
CryptoLove
undefinedundefined
Defeated Malware Lovers
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Scammer's Delusion
undefinedundefined
Hey hey, it's your boy from Gambler Panel! I totally don't steal from my own workers - pinky promise! I'm basically a charity, right? Just scamming the entire CIS and half the world, no biggie. Love my "найсник" and party supplies more than my own projects! And those designs with rainbows and pride flags? Dead serious, not trolling at all! Big thanks to PhishDestroy for banning all my worker domains - really helps with my reputation! As a truly undefinedundefinedgifted leader, I'm proud that my panels rack up 15+ VirusTotal detections. That's called quality!undefinedundefined
undefinedundefined
undefinedundefined
Gambler Panel
undefinedundefined
Gifted Leader™
undefinedundefined
undefinedundefined
undefinedundefinedundefinedundefinedArakelyan L. A. · undefinedundefinedRussia, Moscow Oblast, Domodedovoundefinedundefinedundefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
Product's Confession
undefinedundefined
Huge thanks to PhishDestroy for the thorough audit and that lovely GitHub script that detects Keitaro on any site! Our beloved TDS product is mostly used for phishing, scam, malware distribution, and cloaking - but hey, we call it "traffic management"! Zero login page protection out of the box? That's a feature, not a bug! We're the #1 cause of domain bans worldwide and we love it. Money and lockers are our true passion - undefinedundefineddefinitely a legal company that absolutely doesn't collect black market traffic data!undefinedundefined
undefinedundefined
undefinedundefined
Keitaro TDS
undefinedundefined
Traffic "Management" System
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefinedDisclaimer: All characters in this section are fictional and presented in a humorous, parody style for entertainment purposes only. They are not connected to any real individuals. Inspired by public nicknames and open cases, with no personal data or direct accusations included. undefinedundefined
undefinedundefinedNon-commercial, volunteer project. We are an open community focused on identifying, documenting, and disrupting phishing and scam infrastructure for public benefit.undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefinedOpen by design. Where safe and lawful, indicators and scans are publicly accessible.undefinedundefined
undefinedundefined
undefinedundefinedNo user databases. We do not store personal data. For appeals and takedown status we use a undefinedundefinedticket ID only.undefinedundefined
undefinedundefined
undefinedundefinedNo direct takedowns. We submit evidence to registrars, hosting providers, and trusted vendors; enforcement is their decision.undefinedundefined
undefinedundefined
undefinedundefinedSafe for legitimate sites. Our passive scans and reports do not harm lawful resources.undefinedundefined
undefinedundefined
undefinedundefinedNo warranties. Content is provided "as is", without guarantees of completeness or fitness.undefinedundefined
undefinedundefined
undefinedundefinedLawful cooperation. For qualifying cases, artifacts may be shared with competent authorities.undefinedundefined
undefinedundefinedScanning. We perform safe, passive checks to collect artifacts and indicators.undefinedundefined
undefinedundefined
undefinedundefinedEscalation. We request professional services to verify resources and ask registrars/hosts to review clients via abuse teams.undefinedundefined
undefinedundefined
undefinedundefinedInvestigations. We occasionally conduct hobby-level OSINT; results are published, shared with peers, or forwarded to authorities. We do not hoard private data. See our undefinedundefinedGambler Panel investigation for an example. Browse all research on our undefinedundefinedNews & Investigations page.undefinedundefined
undefinedundefined
undefinedundefinedCollaboration. We are open to partnerships. Certain private tools and materials can be shared for defensive purposes on request.undefinedundefined
undefinedundefined
undefinedundefinedDashboards. Explore stolen funds across all chains via the undefinedundefinedDeFi Hack Explorer or investigate scam infrastructure with our undefinedundefinedScam Intelligence Dashboard.undefinedundefined
undefinedundefinedNo whitelist or ignore list. We do not maintain any whitelist/ignore program. Duplicate suppression only prevents re-adding the same domain.undefinedundefined
undefinedundefined
undefinedundefinedAppeal removes the domain. If an appeal is approved, the domain is removed from our database and from any places where we published it.undefinedundefined
undefinedundefined
undefinedundefinedTicket-only tracking. We do not store personal data. For status checks and takedown requests we use a undefinedundefinedticket ID only.undefinedundefined
undefinedundefinedOpen access. The bot is open to everyone, which does not change its purpose: faster disruption of fraud.undefinedundefined
undefinedundefined
undefinedundefinedNo paid leniency. We have never asked for or accepted payment for unbans or favors. The process and database are open and verifiable.undefinedundefined
undefinedundefined
undefinedundefinedTrusted reporters. Reputable users may report without pre-moderation and submit bulk complaints for speed.undefinedundefined
Act fast and preserve evidence: URLs, TXIDs, wallet addresses, screenshots, timestamps, chat logs. File an official report. For prevention, read our undefinedundefinedCrypto Security Essentials guide.undefinedundefined
undefinedundefined
undefinedundefined
United States: https://www.ic3.gov/
undefinedundefined
United Kingdom: https://www.actionfraud.police.uk/
undefinedundefined
Other countries: contact your national cybercrime unit or local police
undefinedundefined
undefinedundefined
undefinedundefined
Personal Recommendation
undefinedundefined
For any incident, I strongly recommend contacting the undefinedundefinedSEAL 911 Bot. This is a rapid response group of professionals who really know their stuff and can help in any situation.undefinedundefined
undefinedundefinedWe use cookies for analytics and to improve your experience. By continuing, you agree to our undefinedundefinedCookie Policy.undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined
undefinedundefined undefinedundefined