█ Append-only blacklist · since 1 July 2025

Every scam domain.
Logged the moment we see it.

Name: Live Phishing Threat Data
Creator: PhishDestroy
License: https://creativecommons.org/publicdomain/zero/1.0/

This is the raw feed — the same blacklist your DNS resolver, browser extension and threat-intel pipeline pulls from. Append-only. No sanitised dashboards, no warnings, no negotiations. Independent since 2019.

Download JSON feed → Browse threats Report via bot

400 Threats Today since midnight

3,205 Threats This Week 7-day rolling

16,856 Threats This Month July 2026

139,319 Total Threats Tracked cumulative

█ Daily threat activity

Last 30 days, by detection volume.

peak: 28 Jun · 1,116 detections

Today Daily count

13 Jun · 272

14 Jun · 332

15 Jun · 573

16 Jun · 378

17 Jun · 720

18 Jun · 511

19 Jun · 585

20 Jun · 541

21 Jun · 429

22 Jun · 610

23 Jun · 503

24 Jun · 945

25 Jun · 510

26 Jun · 596

27 Jun · 320

28 Jun · 1,116 ← peak

29 Jun · 621

30 Jun · 234

01 Jul · 672

02 Jul · 428

03 Jul · 406

04 Jul · 283

05 Jul · 249

06 Jul · 633

07 Jul · 290

08 Jul · 490

09 Jul · 225

10 Jul · 555

11 Jul · 363

12 Jul · 400 (in progress)

13 Jun 21 Jun 28 Jun 05 Jul 12 Jul

Daily average 562

Peak (30d) 1,116

7-day momentum -7%

Registrars involved 1,297

01 / Featured exposés · this week

Why the registrars bury our reports.

all investigations
/news →

Retaliation 15 Apr 2026

Investigation · NameSilo

NameSilo killed our Twitter because we told the truth about them.

Two PhishDestroy X accounts locked under three shifting justifications. X's own automation cleared us in writing — the ban held anyway. Two weeks earlier we had documented NameSilo sheltering a $20M+ Monero-theft operation now under active EU criminal investigation.

9 min read · PhishDestroy Research Read exposé →

Registrar 14 Apr 2026

Investigation · Trustname (IANA #4318)

Trustname.com: "bulletproof" registrar with €120 in declared revenue.

An ICANN-accredited registrar that calls itself bulletproof in its own DNS TXT record. Estonian shell company, €120 revenue, one employee, Belarusian owners — and a week of fresh fake-Elon crypto-casino domains hidden behind its in-house privacy proxies.

14 min read · PhishDestroy Research Read exposé →

02 / Append log · destroylist

The blacklist scrolls whether you watch or not.

source: github.com/phishdestroy/destroylist
format: append-only · CC-BY-4.0

scan@phishdestroy:~/destroylist$

LIVE uptime 376d

scan@phishdestroy:~$ git log --follow list.json | head
▸ append-only blacklist · once added, an entry is never edited or removed
▸ 139,319 entries since 1 Jul 2025 · sync interval ≈ 14s
scan@phishdestroy:~$ tail -f list.json | jq

[2026-07-12 19:56:19]+ molewin.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:53:19]+ winower.comTUCOWS.COM, CO.

[2026-07-12 19:53:07]+ xwild.ccGlobal Domain Group LLC

[2026-07-12 19:35:07]+ winbets.ccGlobal Domain Group LLC

[2026-07-12 19:12:35]+ tuzawin.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:09:03]+ wisp.casinoNameCheap, Inc.

[2026-07-12 19:09:00]+ wildx.ccGlobal Domain Group LLC

[2026-07-12 19:08:36]+ oxdice.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:07:26]+ taomux.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:06:26]+ gambit.bondNICENIC INTERNATIONAL GROUP CO., LIMITED

[2026-07-12 19:06:26]+ stormdice.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:05:35]+ royroll.comTUCOWS.COM, CO.

[2026-07-12 19:05:30]+ romewex.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:05:25]+ rolanflex.comDominet (HK) Limited

[2026-07-12 19:02:23]+ manodex.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:01:53]+ jokerx.ccGlobal Domain Group LLC

[2026-07-12 19:01:34]+ luckio.netFewmoretaps OU d/b/a Trustname.com

[2026-07-12 19:01:19]+ hortinibet.comTUCOWS.COM, CO.

[2026-07-12 18:58:44]+ bemowin.comFewmoretaps OU d/b/a Trustname.com

[2026-07-12 18:58:06]+ finexking.comTUCOWS.COM, CO.

last entry: +molewin.com · 0s ago showing 20 of 139,319 · view full repo →

03 / Surface analytics

Where the infrastructure hides — and what it costs you.

rolling 30-day window
auto-refresh 60s

Hall of shame · registrars

7 of 1,297 · ranked by active threats

NICENIC INTERNATIONAL GROUP CO., LIMITED

22,764

Cloudflare, Inc.

15,100

PDR Ltd. d/b/a PublicDomainRegistry.com

5,930

Gname.com Pte. Ltd.

4,948

NameSilo, LLC

4,506

GoDaddy.com, LLC

4,286

DYNADOT LLC

4,258

Top TLDs · by detections

7 of 524 TLDs · by detection count

.com48,587

.dev12,534

.app8,019

.xyz7,192

.io6,378

.net4,304

.cc3,920

04 / Latest entries

The dossier — raw, unfiltered, append-only.

20 shown · 139,319 total
sorted by detection time

grep ›

Every scam domain. Logged the moment we see it.

NameSilo killed our Twitter because we told the truth about them.

Trustname.com: "bulletproof" registrar with €120 in declared revenue.

Found one we haven't logged yet?

Every scam domain.
Logged the moment we see it.