Source Suggestion: PhishDestroy - Cryptocurrency Phishing & Scam Domains

[phishdestroy]

Hi,

I maintain PhishDestroy — a threat intelligence feed focused on cryptocurrency phishing and scam domains.

Repository: https://github.com/phishdestroy/destroylist

Stats:

• 739+ stars, 75 forks
• 13,600+ commits
• Real-time updates via GitHub Actions
• DNS-verified active domains

Focus Areas:

• Seed phrase phishing
• Fake crypto wallets (MetaMask, Trust Wallet, Ledger clones)
• NFT/DeFi scams
• Wallet drainers
• Fake exchanges

Available Formats:

Primary List (curated, real-time):

• TXT: https://raw.githubusercontent.com/phishdestroy/destroylist/main/list.txt
• Hosts: https://raw.githubusercontent.com/phishdestroy/destroylist/main/formats/hosts.txt
• AdBlock: https://raw.githubusercontent.com/phishdestroy/destroylist/main/formats/adblock.txt
• Dnsmasq: https://raw.githubusercontent.com/phishdestroy/destroylist/main/formats/dnsmasq.txt

DNS-Verified Active:

• https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_domains.json

Community Aggregated:

• https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/blocklist.json

Suggested Inclusion:

• TIF (Threat Intelligence Feeds) — crypto-specific phishing
• Fake — scam sites

Thanks for your work!

[hagezi]

@phishdestroy Thanks, I am currently using the following lists. However, only NRDs are extracted from these. When I examined them, the false positive rate was too high, so I am currently only extracting NRDs.

https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/blocklist.json
https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/live_blocklist.json
https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_domains.json

See: https://github.com/hagezi/dns-blocklists/blob/main/sources.md