Our Services

Advanced Cybersecurity Solutions

Real-Time

Live Threat Intelligence

Real-time feed of phishing sites detected, analyzed, and flagged by our automated systems worldwide.

View Live Feed
Free

Threat Intelligence API

RESTful API for domain checks, bulk lookups, and full threat feeds. Integrate our data into your SOC.

Explore API
Deep Scan

URL & Domain Analyzer

Full site analysis: screenshots, DNS, WHOIS, SSL cert, phishing kit detection, and risk scoring.

Analyze Now
Takedown

Abuse Report & Takedown

Direct escalations to registrars and hosting providers with evidence packages for fast domain removal.

Submit Report
On-Chain

Wallets & DeFi Hacks DB

Searchable database of flagged crypto wallets linked to phishing drainers, rug pulls, and DeFi exploits.

Explore Wallets
Open Source

DestroyList Blacklist

Community-curated threat feed on GitHub. Auto-updated domain blocklist for firewalls and DNS filters.

View on GitHub
24/7

Telegram Reporting Bot

Report suspicious URLs directly. Instant automated analysis, evidence logging, and takedown initiation.

Open Bot
Guide

Crypto Security Essentials

Practical guide to avoid scams: wallet safety, approval hygiene, red flags, and emergency response.

Read Guide

They call us Enemy #1

Relentless Attacks. Zero Effect.

Scammers continuously target our project and infrastructure to escape bans. One recent example is the enforced removal of our X/Twitter account used for posting reports. Attacks are constant and varied.

Outcome stays the same: we scan, flag, and kill domains before victims lose funds. Our takedowns cost $0. Their attempts burn money and time for no gain.

Since 2019
0+

Domains reported

Since Jul 1, 2025
0+

Active phishing domains preempted

Public Backup
0+

Reports mirrored from X/Twitter

Latest takedown price
$0+

Paid to force X/Twitter removal

Read full article GitHub backup

Warning: Crypto Scams Ahead

Knowledge is your best defense. Learn the most common deception tactics to avoid becoming the next victim.

Fake Returns

Scammers lure victims by promising unrealistically high returns on investments. These can be Ponzi schemes, where early investors are paid with funds from newer ones, or "pump and dump" schemes, where an asset's price is artificially inflated and then crashed.

Case Study: "CryptoRocket" Project

An investor, "Alex," put $5,000 into a project promising 100% daily profits. The first few "payouts" arrived, funded by new investors. Once the flow of new money stopped, the site and social media vanished, along with all the funds.

Impersonation

Criminals pretend to be famous personalities, celebrities, major investors, or representatives of official projects. Their goal is to persuade you to send them money for an "exclusive" giveaway or investment round.

Case Study: The "Elon Musk Giveaway"

A scammer created a fake Twitter account mimicking Elon Musk and announced a crypto giveaway. Users were asked to send 0.1 ETH to "verify their address" to receive 1 ETH in return. Unsurprisingly, no one received the promised reward.

Sextortion

Attackers claim to possess compromising photos or videos of you and threaten to release them unless you pay a ransom in cryptocurrency. Often, these threats are bluffs designed to exploit your fear.

Case Study: The "Hacked Webcam" Email

Maria received an email claiming her webcam was hacked and a compromising video was recorded. The blackmailer demanded $1,000 in BTC, threatening to send the video to all her contacts. Maria ignored the email, and nothing ever happened.

Rug Pull

A development team creates a crypto project, raises funds from investors by selling tokens, and then suddenly disappears, taking all the money and deleting their website and social media. The liquidity is pulled, making the token worthless.

Case Study: "LunarSwap" Project

A new DeFi project, "LunarSwap," raised millions, promising revolutionary exchange technology. A month after launch, the developers drained all liquidity from the trading pair, crashing the token price to zero, and vanished from the internet.

Blackmail

A scammer threatens to release sensitive information, cause harm to the victim or their systems, or take other malicious actions unless a crypto payment is made. It preys on fear and intimidation.

Case Study: The "DDoS Threat"

An online business owner received an email threatening a massive Distributed Denial-of-Service (DDoS) attack that would crash their website unless they paid 2 ETH. The threat was designed to extort money by preventing business disruption.

Ransomware

An attacker encrypts your computer system or personal files, making them inaccessible. They then demand a ransom payment, usually in cryptocurrency, to restore access.

Case Study: The "Locked Files" Attack

A company's network was infected with ransomware, encrypting all critical financial data. The attackers demanded 5 BTC to provide the decryption key. The company was forced to negotiate, highlighting the severe disruption these attacks cause.

Phishing

The most common type of scam. Criminals create fake websites that mimic well-known crypto wallets, exchanges, or projects. The goal is to trick you into entering your seed phrase or private key to steal your assets.

Case Study: The "Fake MetaMask" Site

A user received an email, supposedly from MetaMask support, asking them to urgently "verify" their wallet due to a security update. The link led to a perfect replica of the official site. After entering the seed phrase, all funds were stolen.

Don't Be Silent! Your Silence is Their Power.

If you've been a victim of a scam, reporting it is crucial. Filing a report on platforms like Chainabuse is a minimum first step. Ideally, you should report the incident to your local law enforcement. For expert guidance on legal matters or theft, we highly recommend contacting Seal911, a group of professionals who can provide sound advice for your situation.

Be extremely cautious of "recovery services" that contact you after a theft. Most are recovery scams trying to victimize you a second time.

Contact Seal911 Report on Chainabuse

Partners

We're Working With

For Developers

Destroy API

Free, open, no API key. Real-time domain risk scoring across 770K+ threats.

API Docs Domain Analyzer
Endpoints
5
Bulk Limit
500/req
Auth
None
Sync
Hourly
api.destroy.tools
$ curl "https://api.destroy.tools/v1/check?domain=suspicious-site.xyz"
{
"threat": true,
"risk_score": 85,
"severity": "critical",
"sources": ["destroylist", "community"],
"dns_active": true
}
Threat Scoring (0—100)
Critical 70—100 High 40—69 Medium 20—39 Low 1—19
Available Endpoints
GET/v1/check?domain=Single check
POST/v1/check/bulkBulk (500/req)
GET/v1/search?q=Keyword search
GET/v1/feed/{list}Full feeds
GET/v1/statsLive stats

Live Intelligence

Latest Detections

Real-time phishing threats detected and neutralized by our automated systems

View All Detections

Security Guide

Found Phishing? Here's What To Do

1. Scan the URL

Use our real-time scanner to verify if a website is malicious. Get instant results and threat analysis.

Scan Now

2. Report to Our Bot

Send suspicious URLs directly to our Telegram bot for immediate analysis and takedown action.

Report Now

3. Stay Protected

Never enter personal information on suspicious sites. Our community helps identify threats in real-time.

Follow Updates

Protect Yourself

Essential Security Resources

Emergency: I Was Scammed

Immediate steps if your crypto wallet was drained. Revoke approvals, secure remaining assets, and report the crime.

Get Help Now

Ultimate Security Checklist

Step-by-step guide to hardening your crypto security. Hardware wallets, 2FA settings, and browsing hygiene.

Open Checklist

Privacy Arsenal & Tools

Recommended privacy tools, secure browsers, VPNs, and operating systems to stay anonymous online.

Explore Tools

Who we are

Terminators of Phishing & Scam Destruction Squad

We are volunteer cybersecurity fighters dedicated to destroying phishing schemes and protecting users from crypto scams. Through years of active combat, we've built a reputation that enables us to ban phishing domains exponentially faster than before.

Our automated community-driven system means people send us phishing domains they encounter, and our system conducts analysis before automatically sending reports to antiviruses, scanners, VirusTotal, and security providers worldwide.

We've helped Google fight phishing in ads, battled fake crypto airdrops on YouTube, and created automated death systems for illegal scammer earnings.

0+

Domains in Database

0+

Active Threats

0+

Primary Reports

Cybersecurity team fighting phishing and scams
Security illustration showing threat neutralization

What we do

A Free Solution to Take Down Scammers

We provide a comprehensive, multi-layered approach to neutralizing online threats, from initial detection to full infrastructure takedown.

Cooperation with Authorities

We assist in identifying scam teams and filing actionable reports with law enforcement.

Threat Chain Tracing

We reconstruct threat chains across multiple domains, assets, and wallets.

Code Analysis & Auto-Detection

We build detection templates and automate code analysis to instantly block scams.

Destroyer mascot representing scam elimination

Our Mission

We're the Terminators of Scammers!

Forget paid plans and brand protection nonsense. We don't beg for money - we wage war! Our goal? Crush phishing attacks on crypto users with brutal efficiency.

  • Flood phishing forms with 5M+ unique IPs and valid seeds
  • Team up with authorities to dismantle massive scam networks
  • Trace threat chains across multi-chain and bridge transactions
  • Kill domains with auto-detection templates and precision strikes
  • Block Telegram bots and channels - shut down their scams
  • Log threats for evidence and help authorities arrest them
Destroy with Us!

No fees, just pure destruction. Let's burn the scammers down!

Hall of Shame

What Scammers Say About Us

Disclaimer: All characters in this section are fictional and presented in a humorous, parody style for entertainment purposes only. They are not connected to any real individuals. Inspired by public nicknames and open cases, with no personal data or direct accusations included.

Support & Legal

Disclaimer and Frequently Asked Questions

Non-commercial, volunteer project. We are an open community focused on identifying, documenting, and disrupting phishing and scam infrastructure for public benefit.

  • Open by design. Where safe and lawful, indicators and scans are publicly accessible.
  • No user databases. We do not store personal data. For appeals and takedown status we use a ticket ID only.
  • No direct takedowns. We submit evidence to registrars, hosting providers, and trusted vendors; enforcement is their decision.
  • Safe for legitimate sites. Our passive scans and reports do not harm lawful resources.
  • No warranties. Content is provided "as is", without guarantees of completeness or fitness.
  • Lawful cooperation. For qualifying cases, artifacts may be shared with competent authorities.
https://phishdestroy.io/disclaimer https://phishdestroy.io/privacy https://phishdestroy.io/terms

  • Scanning. We perform safe, passive checks to collect artifacts and indicators.
  • Escalation. We request professional services to verify resources and ask registrars/hosts to review clients via abuse teams.
  • Investigations. We occasionally conduct hobby-level OSINT; results are published, shared with peers, or forwarded to authorities. We do not hoard private data. See our Gambler Panel investigation for an example. Browse all research on our News & Investigations page.
  • Collaboration. We are open to partnerships. Certain private tools and materials can be shared for defensive purposes on request.
  • Dashboards. Explore stolen funds across all chains via the DeFi Hack Explorer or investigate scam infrastructure with our Scam Intelligence Dashboard.
https://phishdestroy.io/tools

No whitelist or ignore list. We do not maintain any whitelist/ignore program. Duplicate suppression only prevents re-adding the same domain.

Appeal removes the domain. If an appeal is approved, the domain is removed from our database and from any places where we published it.

Ticket-only tracking. We do not store personal data. For status checks and takedown requests we use a ticket ID only.

https://phishdestroy.io/appeals/

  • Open access. The bot is open to everyone, which does not change its purpose: faster disruption of fraud.
  • No paid leniency. We have never asked for or accepted payment for unbans or favors. The process and database are open and verifiable.
  • Trusted reporters. Reputable users may report without pre-moderation and submit bulk complaints for speed.
https://phishdestroy.io/critical-action

Act fast and preserve evidence: URLs, TXIDs, wallet addresses, screenshots, timestamps, chat logs. File an official report. For prevention, read our Crypto Security Essentials guide.

  • United States: https://www.ic3.gov/
  • United Kingdom: https://www.actionfraud.police.uk/
  • Other countries: contact your national cybercrime unit or local police

Personal Recommendation

For any incident, I strongly recommend contacting the SEAL 911 Bot. This is a rapid response group of professionals who really know their stuff and can help in any situation.

https://phishdestroy.io/critical-action
About PhishDestroy Live Threat Intelligence FAQ Appeals Tools News