# Destroy Tools

> Free phishing threat intelligence, public evidence, and open resources from PhishDestroy.

Destroy Tools is a directory for the PhishDestroy ecosystem. PhishDestroy is an independent, non-commercial project active since 2019. Its work connects suspicious-domain discovery, evidence preservation, reporting, and public records. Registrars and hosting providers decide on enforcement.

## Official services

- [PhishDestroy main platform](https://phishdestroy.io/): Public domain reports, threat feeds, and investigations.
- [Destroy API](https://api.destroy.tools/): Free REST API for domain checks, bulk checks, search, feeds, and statistics.
- [Destroy Scan](https://ban.destroy.tools/): Browser interface for checking suspicious URLs and domains.
- [Domain Analyzer](https://analyze.destroy.tools/): Domain threat intelligence analysis.
- [DestroyList on GitLab](https://gitlab.com/phishdestroy/destroylist): Public phishing and scam domain blocklists.
- [PhishDestroy on GitHub](https://github.com/phishdestroy): Project code, tools, and investigations.

## Public API

The public API requires no API key. The documentation lists five endpoints: GET /v1/check, POST /v1/check/bulk (up to 500 domains), GET /v1/search, GET /v1/feed/{list}, and GET /v1/stats.

```sh
curl --fail-with-body "https://api.destroy.tools/v1/check?domain=example.com"
```

Use risk signals together with other evidence. An unlisted domain is not necessarily safe. The example domain is reserved for documentation; the result must come from a real request.

- [API documentation](https://api.destroy.tools/)
- [Structured service directory](https://destroy.tools/services.json)

## Contact and community

- [General inquiries](mailto:contact@phishdestroy.io)
- [Abuse reports](mailto:abuse@phishdestroy.io)
- [Telegram alerts](https://t.me/destroy_phish)
- [Telegram bot](https://t.me/PhishDestroy_bot)
- [Mastodon](https://mastodon.social/@phishdestroy)

## Policies

- [Legal hub and terms](https://phishdestroy.io/terms)
- [Privacy](https://phishdestroy.io/privacy)
- [Disclaimer](https://phishdestroy.io/disclaimer)
- [Appeals](https://phishdestroy.io/appeals)

Delisting is free. The project does not accept payment to remove detections.

## Questions

### Is the API really free?

Yes. The public PhishDestroy API is free to access and does not require an API key. The documentation covers domain checks, bulk requests, search, feeds, and statistics.

### How is destroy.tools related to PhishDestroy?

Destroy Tools brings the PhishDestroy ecosystem into one place. The main investigation platform is phishdestroy.io; the API lives at api.destroy.tools, the URL scanner at ban.destroy.tools, and the domain analyzer at analyze.destroy.tools.

### Does a clean result mean a domain is safe?

No. Blocklists and risk signals reflect available information and can miss new threats. An unlisted domain is not a safety certificate, and false positives are possible.

### How do I report a false positive?

Use the official appeals process and include supporting evidence. Delisting is free; PhishDestroy does not accept payment to remove detections.

Documentation reviewed: 2026-10-08. Sources: the linked official service pages, the PhishDestroy FAQ, and the PhishDestroy About page.