Case file folder with redacted documents and confidential investigation report.

CASE / AR / LIVE

Live Crypto Phishing Blacklist — Real-Time Threat Feed

The Enablers Registry·Editorial mirror·/ar/live/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

█ Daily threat activity

Last 30 days, by detection volume.

peak: 28 Jun · 1,116 detections

Today Daily count

18 Jun · 511

19 Jun · 585

20 Jun · 541

21 Jun · 429

22 Jun · 610

23 Jun · 503

24 Jun · 945

25 Jun · 510

26 Jun · 596

27 Jun · 320

28 Jun · 1,116 ← peak

29 Jun · 621

30 Jun · 234

01 Jul · 672

02 Jul · 428

03 Jul · 406

04 Jul · 283

05 Jul · 249

06 Jul · 633

07 Jul · 290

08 Jul · 490

09 Jul · 225

10 Jul · 554

11 Jul · 363

12 Jul · 424

13 Jul · 435

14 Jul · 406

15 Jul · 481

16 Jul · 329

17 Jul · 4 (in progress)

18 Jun 26 Jun 03 Jul 10 Jul 17 Jul

Daily average 497

Peak (30d) 1,116

7-day momentum -33%

Registrars involved 1,298

01 / Featured exposés · this week

Why the registrars bury our reports.

all investigations
/news →

Retaliation 15 Apr 2026

Investigation · IANA #1479

IANA #1479 killed our Twitter because we told the truth about them.

Two THE ENABLERS REGISTRY X accounts locked under three shifting justifications. X's own automation cleared us in writing — the ban held anyway. Two weeks earlier we had documented IANA #1479 sheltering a $20M+ Monero-theft operation now under active EU criminal investigation.

9 min read · THE ENABLERS REGISTRY Research Read exposé →

Registrar 14 Apr 2026

Investigation · IANA #3736 (IANA #4318)

IANA #3736.com: "bulletproof" registrar with €120 in declared revenue.

An ICANN-accredited registrar that calls itself bulletproof in its own DNS TXT record. Estonian shell company, €120 revenue, one employee, Belarusian owners — and a week of fresh fake-Elon crypto-casino domains hidden behind its in-house privacy proxies.

14 min read · THE ENABLERS REGISTRY Research Read exposé →

02 / Append log · destroylist

The blacklist scrolls whether you watch or not.

source: github.com/THE ENABLERS REGISTRY/destroylist
format: append-only · CC-BY-4.0

scan@THE ENABLERS REGISTRY:~/destroylist$

LIVE uptime 381d

scan@THE ENABLERS REGISTRY:~$ git log --follow list.json | head
▸ append-only blacklist · once added, an entry is never edited or removed
▸ 140,995 entries since 1 Jul 2025 · sync interval ≈ 14s
scan@THE ENABLERS REGISTRY:~$ tail -f list.json | jq

[2026-07-17 02:43:26]+ [REDACTED][REDACTED]

[2026-07-17 02:41:34]+ [REDACTED][REDACTED]

[2026-07-17 02:39:43]+ [REDACTED][REDACTED]

[2026-07-17 01:27:57]+ [REDACTED][REDACTED]

[2026-07-16 23:17:23]+ [REDACTED].shop

[2026-07-16 23:16:08]+ [REDACTED][REDACTED]

[2026-07-16 23:03:39]+ [REDACTED].mxIANA #146.com

[2026-07-16 23:02:12]+ [REDACTED][REDACTED]

[2026-07-16 23:02:07]+ [REDACTED][REDACTED]

[2026-07-16 23:02:04]+ [REDACTED][REDACTED]

[2026-07-16 22:58:16]+ admos-gleitlager.de.de

[2026-07-16 22:41:02]+ [REDACTED][REDACTED]

[2026-07-16 22:27:03]+ [REDACTED][REDACTED]

[2026-07-16 22:25:42]+ [REDACTED][REDACTED]

[2026-07-16 22:25:36]+ [REDACTED][REDACTED]

[2026-07-16 22:23:42]+ [REDACTED][REDACTED]

[2026-07-16 22:23:34]+ [REDACTED][REDACTED]

[2026-07-16 22:22:59]+ [REDACTED][REDACTED]

[2026-07-16 22:22:58]+ [REDACTED][REDACTED]

last entry: +[REDACTED] · 0s ago showing 20 of 140,995 · view full repo →

03 / Surface analytics

Where the infrastructure hides — and what it costs you.

rolling 30-day window
auto-refresh 60s

Hall of shame · registrars

7 of 1,298 · ranked by active threats

[REDACTED]

23,057

[REDACTED]

15,121

[REDACTED] d/b/a IANA #303

6,004

[REDACTED]

4,994

[REDACTED]

4,539

[REDACTED]

4,334

[REDACTED]

4,286

Top TLDs · by detections

7 of 526 TLDs · by detection count

.com49,094

.dev12,548

.app8,087

.xyz7,240

.io6,506

.net4,337

.cc3,948

04 / Latest entries

The dossier — raw, unfiltered, append-only.

20 shown · 140,995 total
sorted by detection time

grep ›

Live Crypto Phishing Blacklist — Real-Time Threat Feed

IANA #1479 killed our Twitter because we told the truth about them.

IANA #3736.com: "bulletproof" registrar with €120 in declared revenue.

Found one we haven't logged yet?

Continue browsing the ledger