Real-time threat intelligence, active investigations, and takedown operations from our detection systems.
If you suspect your computer has been compromised, follow the immediate-response steps. Avoid "recovery" scams, never share seed phrases, and verify helpers via on-chain signature.
Investigations, research, and takedown operations
Full takedown of a Russian-speaking scam operation running a fake Trust Wallet support panel with live chat, staking simulation, and multi-operator support. 1,900 victim sessions dumped via IDOR, 21 scammer wallets tracked, primary actor deanonymized.
4 live scam backends analyzed — Firebase with open Firestore rules, Supabase with full CRUD access, Express.js with zero auth, and a 19K-seed drainer campaign. All trivially deanonymizable.
Full infrastructure teardown: 55+ phishing domains, unauthenticated APIs leaking victim data, on-chain drainer contracts, Google Ads funding, and Chinese-language operators exposed.
Forensic investigation: Monero web wallet leaks your private view key 40+ times per session via Base64 session tokens, then nullifies your transaction with raw_tx = 0. Operator identified.
50,000+ sites scanned, 1,565 admin panels discovered, 0% legitimate use rate. Criminal clients include EvilCorp, LockBit, and VexTrio. Open-source detection tools released.
The "middle class" of fraud exposed. Three teams, shared Google Spreadsheets, and proof that OSINT disruption works — 717Team archived after intelligence operations.
Not a scam tool — a scam university. $10M+ claimed, 5,000+ members trained since 2021. 730+ scammer usernames leaked. The upstream producer behind casino and drainer operations.
Code-level deep-dive into TRXDrop (50 forced signing retries, AI-generated code) and NiceCrypto (80% affiliate commission, 4-chain expansion). Full 9-step attack chain deconstructed.
383 verified victims across 30+ countries. Celebrity deepfakes, AI chatbots, and a meta-scam that steals from its own scammers. Four casino PaaS operations dissected.
Follow-up investigation: 24.7 MB dataset reviewed, 5,000+ abuse tickets ignored, all NiceNIC domains now flagged as unsafe. Challenge: find a legitimate domain.
Investigation into IANA 3765 with phishing score 1,141.74, $8.5M Trust Wallet heist, and open confession: "we are not against scamming."
The dashboard proving that scammers are frightened mice. We expose crypto scammer infrastructure, collect evidence, and help victims fight back by refusing to stay silent.
The brutal story behind PhishDestroy: our zero-profit model, personal motives, collaboration without money, and why that makes us more dangerous to scammers than any commercial project.
Uncovering the hidden truth about Steam — revealing the corruption behind its operations, the systemic abuse, and how a global monopoly turned a gaming platform into a machine of manipulation.
Explore real-time data on our takedown operations, threat analytics, and the financial impact of our efforts.
Train against real-world cyber threats in our interactive simulation chamber. Master the art of digital defense through hands-on experience.
How a supposed "Russian trail" for 150+ fake Mozilla extensions actually led to Nigerian infrastructure, amplified by paid media.
Wallet access restored; $100K+ returned. Extra recovered funds donated to @_SEAL_Org. Full breakdown, IOCs, and lessons.
Abuse ignored. Hackers protected. How registrar inaction fuels "blood money" at scale. Nigeria IP snapshot + actions required.
Major update: automated access to private scammer groups, instant reporting, and faster disruption pipeline.
Our toolkit for intel, OSINT, and takedowns is available to the community. Fork and contribute.
We exposed the largest TON group: 4k+ members, internal chats, and identities — details inside.
Essential protection against drainers, fake support, and common wallet traps.
From weeks to minutes: pipeline, partnerships, and low false-positive strategy.
Build a robust personal security stack with practical tools and habits.
How takedowns at scale triggered scammer meltdowns. $0 costs, priceless chaos. Full breakdown of operations inside.
Deep dive into the gambler panel scam infrastructure. Tracing the network, exposing the operators, and documenting the evidence trail.
Interactive archive of 1,920+ crypto heists totaling $36.5B. Filter by chain, sort by amount, analyze attack methods.
A comprehensive, actionable checklist to verify your personal security setup covers all essentials — from passwords to wallet hygiene.
Curated collection of privacy-focused tools, browsers, VPNs, encrypted messaging, and security software.
Analyze domains, check wallets, scan URLs — all free, no registration.