destroy.scanBY PHISHDESTROY
OPEN INTELLIGENCE. INFORMED DECISIONS.

Before you click,
check the link.

A suspicious message. An unfamiliar domain.
Get a second opinion from PhishDestroy's
public threat intelligence.

Domain threat check

NO SIGNUP · NO API KEY

Only the hostname is sent to the API. We don't open the link.

Every link deserves a second look.

Your result will appear here, with the domain verdict and any risk signals returned by the API.

AWAITING A DOMAIN
ONE CLEAR WORKFLOW01 Extract the domain02 Query threat intelligence03 Review the evidence
KEEP INVESTIGATING

A result is a starting point.

UNDERSTAND THE CHECK

Clarity matters.

Threat signals help you make a decision.
They don't replace your judgment.

What does this checker actually do?
It extracts the hostname from your input and queries the public PhishDestroy domain-check endpoint. It displays the response's threat verdict and any available score, severity, matched lists, and flags. It does not visit or execute the submitted page, scan downloads, or request a takedown.
Does “no blocklist match” mean safe?
No. A new, compromised, or previously unknown site may not appear in a blocklist. A missing score means the API did not provide a score; it is not treated as a zero-risk verdict.
What happens to the URL I paste?
The path, query string, and fragment are discarded before the request. Only the normalized hostname is sent to api.destroy.tools. This interface does not save a lookup history. The API and hosting providers may process connection information under their policies. Read the project privacy policy.
Can an AI agent use the checker?
Yes. Agents can read the agent guide and Markdown documentation, or call the public API. Browsers with a supported WebMCP interface can also expose the same domain-check action as the form. Browser support varies.
Think a listing is wrong?Use the free appeals process.No paid delistings. Ever.