Editorial mirrorBrand mentions redacted to public IDs. Hover to inspect. Everything else is theatre.How it works
THE ENABLERS REGISTRYRegistrar accountability archive
Archive LiveRead-only public record · No ads · No tracking
ICANN accredited registrar seals stamped NEGLIGENT — enablers accountability poster.
Live feed / archive shell

The feed is live enough for an archive

Fresh cases belong to the upstream operator. This mirror only preserves the stream, strips the self-congratulation, and leaves a clean read-only view behind.

Live intake mirrorRead-only copyWrapped outbound
Open source gate Briefings desk Registrar ledger
File /live/·Source voice preserved·Brand labels redacted

█ Daily threat activity

Last 30 days, by detection volume.

peak: 28 Jun · 1,116 detections

Today Daily count
22 Jun 30 Jun 07 Jul 14 Jul 21 Jul
Daily average 476
Peak (30d) 1,116
7-day momentum -12%
Registrars involved 1,322

01 / Featured exposés · this week

Why the registrars bury our reports.

all investigations
/news →
Retaliation 15 Apr 2026

Investigation · IANA #1479

IANA #1479 killed our Twitter because we told the truth about them.

Two THE ENABLERS REGISTRY X accounts locked under three shifting justifications. X's own automation cleared us in writing — the ban held anyway. Two weeks earlier we had documented IANA #1479 sheltering a $20M+ Monero-theft operation now under active EU criminal investigation.

9 min read · THE ENABLERS REGISTRY Research Read exposé →
Registrar 14 Apr 2026

Investigation · IANA #3736 (IANA #4318)

IANA #3736.com: "bulletproof" registrar with €120 in declared revenue.

An ICANN-accredited registrar that calls itself bulletproof in its own DNS TXT record. Estonian shell company, €120 revenue, one employee, Belarusian owners — and a week of fresh fake-Elon crypto-casino domains hidden behind its in-house privacy proxies.

14 min read · THE ENABLERS REGISTRY Research Read exposé →

02 / Append log · destroylist

The blacklist scrolls whether you watch or not.

source: github.com/THE ENABLERS REGISTRY/destroylist
format: append-only · CC-BY-4.0
scan@THE ENABLERS REGISTRY:~/destroylist$
LIVE uptime 385d
scan@THE ENABLERS REGISTRY:~$ git log --follow list.json | head
▸ append-only blacklist · once added, an entry is never edited or removed
▸ 142,705 entries since 1 Jul 2025 · sync interval ≈ 14s
scan@THE ENABLERS REGISTRY:~$ tail -f list.json | jq
[2026-07-21 04:04:20]+ [REDACTED][REDACTED]
[2026-07-21 04:01:56]+ [REDACTED][REDACTED]
[2026-07-21 04:01:56]+ [REDACTED][REDACTED]
[2026-07-21 04:01:53]+ [REDACTED][REDACTED]
[2026-07-21 04:01:53]+ [REDACTED][REDACTED]
[2026-07-21 04:00:27]+ teams-room.us.us
[2026-07-21 04:00:00]+ [REDACTED][REDACTED]
[2026-07-21 03:59:52]+ [REDACTED][REDACTED]
[2026-07-21 03:59:50]+ [REDACTED][REDACTED]
[2026-07-21 03:59:16]+ [REDACTED][REDACTED]
[2026-07-21 03:59:16]+ [REDACTED][REDACTED]
[2026-07-21 03:59:12]+ [REDACTED][REDACTED]
[2026-07-21 03:59:10]+ [REDACTED][REDACTED]
[2026-07-21 03:57:28]+ [REDACTED][REDACTED]
[2026-07-21 03:57:19]+ [REDACTED][REDACTED]
[2026-07-21 03:57:15]+ [REDACTED][REDACTED]
[2026-07-21 03:57:15]+ [REDACTED][REDACTED]
[2026-07-21 03:57:07]+ [REDACTED][REDACTED]
[2026-07-21 03:56:49]+ [REDACTED][REDACTED]
[2026-07-21 03:56:29]+ [REDACTED][REDACTED]
last entry: +[REDACTED] · 0s ago showing 20 of 142,705 · view full repo →

03 / Surface analytics

Where the infrastructure hides — and what it costs you.

rolling 30-day window
auto-refresh 60s

Hall of shame · registrars

7 of 1,322 · ranked by active threats
01
[REDACTED]
23,281
02
[REDACTED]
15,138
03
[REDACTED] d/b/a IANA #303
6,097
04
[REDACTED]
5,062
05
[REDACTED]
4,571
06
[REDACTED]
4,382
07
[REDACTED]
4,308

Top TLDs · by detections

7 of 526 TLDs · by detection count
.com49,754
.dev12,560
.app8,171
.xyz7,346
.io6,615
.net4,393
.cc3,983

04 / Latest entries

The dossier — raw, unfiltered, append-only.

20 shown · 142,705 total
sorted by detection time
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:04
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:01
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:01
Registrar: [REDACTED]
IP Address: 34.117.33.233
Created: N/A
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:01
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:01
Registrar: [REDACTED]
IP Address: 104.21.74.212
Created: Sep 15, 1997
urlscan VirusTotal Browserling Hybrid Analysis
teams-room.us Reported
Screenshot of teams-room.us
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:00
Registrar: REGISTRAR_NOT_FOUND
IP Address: 192.64.119.133
Created: Jul 17, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 04:00
Registrar: [REDACTED]
IP Address: 94.103.1.156
Created: Jul 14, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:59
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:59
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:59
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:59
Registrar: [REDACTED]
IP Address: 104.21.52.92
Created: Jul 14, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:59
Registrar: [REDACTED]
IP Address: 45.9.148.81
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:59
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:57
Registrar: [REDACTED]
IP Address: 34.117.33.233
Created: N/A
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:57
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:57
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:57
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:57
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:56
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
[REDACTED] Reported
Screenshot of [REDACTED]
Screenshot pending
SCAM
Detected: Jul 21, 2026 03:56
Registrar: [REDACTED]
IP Address: 186.2.175.103
Created: Jul 20, 2026
urlscan VirusTotal Browserling Hybrid Analysis
Load 20 more → Stream JSON

█ Submit · escalation desk

Found one we haven't logged yet?

Drop the URL — it lands in our triage queue with a median pickup time of 14 minutes. No account, no sign-in. The bot does the rest.

▸ Or via [REDACTED]: @EnablersRegistry
▸ Bulk via API: POST /v1/check/bulk (500/req) — no key required

Archive note

If the page below still says “we” or sounds suspiciously confident, that remains the upstream publisher speaking. TER only preserves the record, strips the house branding, and keeps exits wrapped through the source gate.

Visit upstream via gate How the mirror works