Skip to content
View phishdestroy's full-sized avatar
🚨
Scammers will be caught, the time of reckoning has come!
🚨
Scammers will be caught, the time of reckoning has come!
2.3k followers · 58 following

Achievements

Achievement: Pair ExtraordinaireAchievement: Galaxy BrainAchievement: Starstruckx3Achievement: Public SponsorAchievement: Pull SharkAchievement: YOLOAchievement: Quickdraw

Achievements

Achievement: Pair ExtraordinaireAchievement: Galaxy BrainAchievement: Starstruckx3Achievement: Public SponsorAchievement: Pull SharkAchievement: YOLOAchievement: Quickdraw

Highlights

Block or report phishdestroy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
phishdestroy/README.md

PhishDestroy Banner

⚔️ PhishDestroy

Volunteer-Driven Threat Intelligence • Infrastructure Takedowns • OSINT Automation

Mission • Operations • Operational Matrix • Projects • Expertise • Statistics • Contact

🎯 Mission

PhishDestroy is a volunteer-driven threat intelligence initiative focused on large-scale detection, analysis, and elimination of:

  • Crypto drainers
  • Phishing networks
  • Scam infrastructure
  • Fraudulent applications
  • Threat actor clusters

Since 2019, we have:

  • Neutralized 500,000+ malicious domains
  • Eliminated 25+ actor-controlled infrastructures
  • Investigated 15+ threat actor groups
  • Maintained global OSINT feeds and takedown workflows

📊 Operations Overview

RECONNAISSANCE │ ████████████████████ │ CONTINUOUS
ANALYSIS │ ████████████████████ │ ACTIVE
COORDINATION │ ████████████████████ │ ONGOING
NEUTRALIZATION │ ████████████████████ │ RELENTLESS

🛡️ Operational Matrix

🌐 SCAN

• CT logs monitoring
• DNS anomaly detection
• Passive DNS + feeds
• Automated scanners
• Community submissions

🎯 HUNT

• Infra correlation
• Actor attribution
• Fingerprinting
• Network graphing
• Validation workflows

⚡ STRIKE

• Registrar escalation
• Hosting abuse pipeline
• Null-routing requests
• Evidence reporting
• Multi-team ops

🔥 ERASE

• Infra shutdown
• Persistence monitoring
• Re-emergence detection
• Intelligence linking
• Zero-tolerance control

📡 Highlighted Projects

🧠 OSINT Detection Methods

  • Certificate Transparency API
  • DNS anomalies & registrar drift
  • Hosting & ASN correlation
  • Blockchain scam transaction analysis
  • Malware reverse engineering
  • AI-enhanced phishing kit detection
  • Automated intelligence clustering

🧩 Expertise & Stack

📈 Statistics & Activity

📊 More Stats

📬 Contact & Community

Evidence-based threat neutralization since 2019
📧 github@phishdestroy.io
💪 Powered by volunteers, protected by community

Pinned Loading

  1. destroylist destroylist Public

    Real-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats

    HTML 1.6k 419

  2. ScamIntelLogs ScamIntelLogs Public

    Open-source intelligence archive of crypto scam operations — internal chats, admin panels, victim records, and infrastructure data for research and investigation

    HTML 292 32

  3. DestroyScammers DestroyScammers Public

    Scam intelligence, phishing attribution, drainer mapping. Legal OSINT only. Public data. Real cases. For researchers and victims.

    JavaScript 254 20

  4. namesilo-evidence namesilo-evidence Public

    NameSilo (IANA #1479) registrar abuse investigation — 5,281,151 domains scanned, 204,460 classified IOC (122,119 HIGH), largely behind NameSilo's own PrivacyGuardian WHOIS shield. Filed with ICANN …

    HTML 130 19

  5. DO-NOT-USE-xmrwallet-com DO-NOT-USE-xmrwallet-com Public

    Forked from XMRWallet/Website

    ⚠️ xmrwallet.com steals your private view key on every request. Technical proof inside. If you lost funds — read LOST_FUNDS.md

    205 35

  6. trustname-evidence trustname-evidence Public

    Phase II evidence package: complete-zone scan of ICANN registrar #4318 Trustname.com / Fewmoretaps OÜ — 15,040 domains tracked, 4,276 classified IOC (3,293 HIGH). Daily updated IOC feeds, SIEM CSV,…

    Python 109 9