Skip to main content
Transparent Impact Metrics · Live Counter

The Power of Open-Source
Threat Intelligence

Listen to this article
0:00 / --:--

PhishDestroy is an independent, open-source initiative protecting the crypto ecosystem 24/7. 27K+ confirmed takedowns and 500K+ domains in the historical archive since 2019, with real-time data from our public database.

Entries in the DestroyList feed
234K+
Real-time data from GitHub Repository (GitLab)
Counts entries in the feed: one domain can appear more than once, and a listed domain may already be offline.
Data snapshot:
Fetched live from GitHub

In short

PhishDestroy reports its impact through live counters, such as the entry count of its DestroyList blocklist fetched from GitHub. The page explains that its open-source scanners monitor paid ads, social media, email campaigns, newly registered domains and Certificate Transparency around the clock, and labels its impact simulator a scenario estimate, not measured damage.

Real-Time Impact Dashboard

PhishDestroy: Automated Discovery → Partner Network → Public Database
Automated Discovery · Partner Network · Public Database

Live metrics from our automated threat neutralization system

Historical Vault
500K+
Since 2019
Entries in the DestroyList feed
234K+
Live from DestroyList
Abuse reports sent
232K+
At least one per domain since 1 July 2025
Alive at last check
69K+
Latest stored scan
Estimated losses prevented
≈ $1.7B
Scenario estimate (not a measured figure) · formula in the simulator
Confirmed takedowns
27K+
All time · suspended by the registrar or host after our report
GitHub Stars
2,102
DestroyList Repository
Brands targeted
1,026
Distinct brands in our reports

How We Protect the Ecosystem

Automated, community-driven threat hunting

Automated Discovery

Our open-source scanners monitor multiple threat vectors 24/7:

  • Paid Ads: Google, Meta, X networks
  • Social Media: Telegram, Discord, Twitter
  • Email Campaigns: Phishing newsletters
  • DNS Records: Newly registered domains
  • Certificate Transparency: SSL monitoring

Partner Network

Direct relationships enable rapid response:

  • Domain Registrars: Immediate suspension
  • Hosting Providers: Content removal
  • CDN Services: Traffic blocking
  • Security Vendors: Blocklist updates
  • Wallet Providers: User warnings

Public Database

Complete transparency with open access:

  • Live Feed: Real-time threat updates
  • Historical Data: Complete archive since 2019
  • Export Formats: JSON, CSV, TXT, hosts
  • GitHub Repository: All data publicly available
  • Community Reports: Crowdsourced intelligence

Impact Simulator

Educational tool to understand potential damage prevented Scenario estimate, not measured damage.

$1,500
5 users

Estimated Prevention from -- domains:

$0

Protecting 0 potential victims

Formula: feed entries × potential victims per domain × average loss per victim.

Threat Intelligence Insights

Data-driven analysis of phishing trends and operational growth

Illustrative charts, not measured data.

Cumulative Neutralization Growth

Threat Categories Distribution

Join Our Open Community

Whether you're a developer, security researcher, or just want to help protect others, there's a place for you.

Transparency notice. PhishDestroy is a non-commercial, independent project. Our research may reflect an inherent bias against scam infrastructure and the services that enable it. We encourage readers to evaluate all material critically and independently. Read our full transparency statement →

Behind The Numbers

XMRWallet Exposed
10 years of stolen keys and hijacked Monero transactions uncovered.
NiceNIC: Registrar Enabling Cybercrime
320x industry fraud rate — how one registrar powers global phishing.
Crypto Drainer Networks
Inside wallet drainer services targeting DeFi users across blockchains.
$100K Returned: Malvertising Case
How we helped recover $100,000 stolen through malvertising campaigns.
Scam Team Operations
Inside organized scam groups — roles, tools, and money laundering flows.

Share This Investigation

Related Investigations

Anatomy of a Phishing Takedown: 500K+ Domains Disrupted
METHODOLOGY
Anatomy of a Phishing Takedown: 500K+ Domains Disrupted
$0 Takedowns: How We Disrupt Phishing Infrastructure
INVESTIGATION
$0 Takedowns: How We Disrupt Phishing Infrastructure
NameSilo, Webnic, NiceNic: Registrars Enabling Scams
INVESTIGATION
NameSilo, Webnic, NiceNic: Registrars Enabling Scams