Hunt the cybercrime economy.

INVITE ONLY · BETA · LEVEL 0 OPEN TO ALL

CybrCrime.com is a community threat-intelligence project. Twelve trackers collect and share indicators on the infrastructure behind online crime: scam websites, money-mule wallets, infostealer servers, phishing kits, bulletproof hosts and more. Defenders use the feeds to block attacks. Newcomers learn the craft in the CybrCrime Arcade.

LEVEL 0 · FREE

Cyber Security Essentials

8 sections, 40 lessons and 50 real-world attack cases. About 24 hours of play, built for complete beginners.

community trackers
12
shared schema and API
1
real cases in Level 0
50
for researchers and non-profits
Free

What does CybrCrime.com do?

Criminals share tools, hosting and cash-out routes. CybrCrime.com helps defenders share what they know just as easily. Members collect, verify and distribute intelligence on the infrastructure behind fraud, scams and online crime, so it can be blocked, reported and taken down faster.

The work is split into twelve trackers in three areas: delivery infrastructure, fraud and monetisation, and underground services. Every tracker uses the same data format and API, so a SOC, a fraud team or a researcher can pull all of it into their own tools.

Who is CybrCrime.com for?

  • Threat hunters and SOC, CERT and CSIRT analysts
  • Detection engineers and DevSecOps teams
  • Fraud, AML and trust-and-safety teams
  • Compliance and GRC teams
  • CISOs, Field CISOs and CTOs
  • Sales engineers and technical sales
  • Researchers, journalists and non-profits
  • Students and anyone curious about cybersecurity

What is the CybrCrime Arcade?

The Arcade is a free, game-style training path. Short daily lessons, real attack cases, streaks, leagues and badges teach how cybercrime really works. Each level ends with a quest: contribute real intelligence to the matching tracker to unlock the next level and its full feed.

How the Arcade works

Level 0 covers

  • Cyber basics and how attacks start
  • Passwords, MFA and passkeys
  • Phishing, smishing and deepfake fraud
  • Devices, updates and backups
  • Safe browsing and fake sites
  • Scams, money mules and crypto fraud
  • Privacy and identity theft
  • Security at work and careers

How do I join?

Create a player account and start Level 0 straight away. Full intel feeds open in one of two ways: complete the training and get your contributions accepted, or, if you already work in the field, ask the Site Review team to verify you. See both paths.

Frequently asked questions

What is CybrCrime.com?

CybrCrime.com is a community threat-intelligence project. Its twelve trackers collect indicators on the infrastructure behind online crime, such as scam websites, money-mule wallets, infostealer servers, phishing kits and bulletproof hosts, and share them with defenders through one API. It also runs the CybrCrime Arcade, a free game-style course that trains new defenders.

Is CybrCrime.com free?

Yes for researchers, students, non-profits and the public learning track. Commercial organisations will later be offered paid API tiers with higher limits, which fund the free tier.

Why is CybrCrime.com invite-only?

The data describes live fraud infrastructure and, in some projects, sensitive details about victims and suspects. During the beta every member is reviewed while moderation, evidence standards and abuse controls are tested with a small community.

Do I need cybersecurity experience to join?

No. Level 0 of the CybrCrime Arcade, Cyber Security Essentials, is open to anyone. It teaches the basics through short lessons and 50 real-world cases. Experienced professionals can ask for a review instead.

What data does CybrCrime.com track?

Indicators such as domains, URLs, IP addresses, network ranges, crypto wallets, mule accounts, leak sites and detection rules. It does not host malware, phishing kits or working exploits, and it never stores stolen credentials.

How does CybrCrime.com protect people's privacy?

Only TLP:CLEAR aggregate statistics are public. Records that name a person need evidence, a confidence level and a dispute path before publication, and contributors can hide their own records from public view.

Last updated by CybrCrime.com