Non-commercial, volunteer project. We are an open community focused on identifying, documenting, and disrupting phishing and scam infrastructure for public benefit.
- Open by design. Where safe and lawful, indicators and scans are publicly accessible.
- No user databases. We do not store personal data. For appeals and takedown status we use a ticket ID only.
- No direct takedowns. We submit evidence to registrars, hosting providers, and trusted vendors; enforcement is their decision.
- Safe for legitimate sites. Our passive scans and reports do not harm lawful resources.
- No warranties. Content is provided “as is”, without guarantees of completeness or fitness.
- Lawful cooperation. For qualifying cases, artifacts may be shared with competent authorities.
- Scanning. We perform safe, passive checks to collect artifacts and indicators.
- Escalation. We request professional services to verify resources and ask registrars/hosts to review clients via abuse teams.
- Investigations. We occasionally conduct hobby-level OSINT; results are published, shared with peers, or forwarded to authorities. We do not hoard private data.
- Collaboration. We are open to partnerships. Certain private tools and materials can be shared for defensive purposes on request.
No whitelist or ignore list. We do not maintain any whitelist/ignore program. Duplicate suppression only prevents re-adding the same domain.
Appeal removes the domain. If an appeal is approved, the domain is removed from our database and from any places where we published it.
Ticket-only tracking. We do not store personal data. For status checks and takedown requests we use a ticket ID only.
- Open access. The bot is open to everyone, which does not change its purpose: faster disruption of fraud.
- No paid leniency. We have never asked for or accepted payment for unbans or favors. The process and database are open and verifiable.
- Trusted reporters. Reputable users may report without pre-moderation and submit bulk complaints for speed.
Act fast and preserve evidence: URLs, TXIDs, wallet addresses, screenshots, timestamps, chat logs. File an official report.
- United States: https://www.ic3.gov/
- United Kingdom: https://www.actionfraud.police.uk/
- Other countries: contact your national cybercrime unit or local police
Personal Recommendation
For any incident, I strongly recommend contacting the SEAL 911 Bot. This is a rapid response group of professionals who really know their stuff and can help in any situation.