Tools & Services

Battle-tested utilities for phishing analysis, reporting and OSINT — plus PhishDestroy's own tools. Clean, fast, distraction-free.

🔬 Featured

Phishing Kit Analyzer

NEW · Client-Side · No Upload

Drop any phishing file (HTML, JS, PHP, email) to instantly extract every IOC for your investigation — Telegram bot tokens with live API lookup, crypto wallets, exfil URLs, operator comments, hardcoded identifiers, and decoded Base64/hex strings. 100% client-side, nothing leaves your browser.

🤖 Telegram Bots 💰 Wallets🔓 Decode💬 Comments🔑 IdentifiersFree

Discord Bot Killer

OSINT · Client-Side · No Data Sent

Found a Discord bot token in scammer code, phishing kit, or malware? Paste it here to identify the bot, see when it was created, and get instructions to kill it permanently. Once the token is regenerated, stolen data stops flowing.

Discord 🔎 OSINT🔒 TokenFree

PhishDestroy Suite

Core utilities we operate 24/7

Destroy API

Free REST API — real-time domain risk scoring (0—100) across 834K+ threats. Single & bulk check (500/req), keyword search, full feeds. No API key.

FreeRESTBulkScoring

API Docs Try Analyzer

Domain Analyzer

Visual domain checker with full threat report. Risk score, DNS status, blocklist hits, severity breakdown — all in one page.

VisualReportFree

Telegram Bot

Report suspicious links, get instant checks, subscribe to alerts.

ReportsInstant checkAlerts

Use Bot Read the latest threat news

Live Feed

Realtime stream of takedowns and flagged infrastructure.

RealtimeIntel

Keitaro Cloaking Detector

Detect Keitaro TDS cloaking on any URL — uncover hidden redirects, anti-bot filters and scam landing pages behind traffic distribution systems.

KeitaroCloakingTDSDetection

Ban Management

Threat actor mapping, infra tracking, coordinated takedown support.

IntelTakedown

Open

Scam Intelligence Logs

Public interface to explore leaked scam logs & Telegram groups (OSINT).

OSINTLeaks

Developer Tools

90+ Browser-Side Utilities

Hash generators, JWT decoder, regex tester, BIP39 seed phrase tester, security.txt & robots.txt builders, color converters, CIDR calculator and 80+ more — all 100% client-side.

Client-Side90+ ToolsFreeNo Server

Open Developer Tools

Alerts Channel

Immediate alerts on new phishing waves & major campaigns.

AlertsTelegram

Join

🧰 Toolbox

70+ client-side utilities — nothing leaves your browser

Trusted Ecosystem

Organizations & hubs we rely on

SEAL (Security Alliance)

Rapid incident response & community coordination.

Open SEAL 911 Bot

ChainPatrol

Anti-phishing infra for web3 teams & communities.

Open

Chainabuse

Web3 abuse reporting & public case tracking.

Open

Chainalysis hub

Official links & resources for investigations.

Open

Scanners & Analysis

URL behavior, malware signals, infra footprints

phishs.com

Quick risk view for suspected phishing URLs.

IsItPhish

"Is this phishing?" verdicts with context.

Bitdefender Link Checker

Basic link safety checks from Bitdefender.

phish.report /analysis

Deep artifacts & evidence view for phishing sites.

urlquery

Sandboxed URL fetch with requests/JS/network traces.

Norton Safe Web

Reputation & community reports for domains.

PolySwarm

Multi-engine scanning for URLs/files (NectarNet).

Bluecoat SiteReview

Category & risk reputation (Broadcom/Symantec).

McAfee SiteLookup

Malicious reputation & categorization.

Criminal IP

Threat intel around IPs/domains, tech stack, leaks.

urlscan.io

Powerful URL scanning with render, requests, indicators.

VirusTotal (URL)

Multi-AV verdicts, relations, community intel.

Bolster CheckPhish

AI-powered phishing detection for links & pages.

Microsoft — Report unsafe site

Submit malicious links to MS Safe Browsing.

PhishTank

Community submissions & verification of phishing.

Google Safe Browsing — Report

Report phishing to Google's protection lists.

Quttera

Website malware scan & blacklist checks.

Sucuri SiteCheck

Malware/Defacement scan & blacklist status.

ThreatMiner

Search IOCs, passive DNS, SSL, samples, metadata.

Wayback Machine

Historical snapshots; prove prior malicious content.

DNSDumpster

Passive DNS, hosts, MX/NS, subdomains discovery.

ScamAdviser

Trust score & reputation signals for websites.

MyWOT

Crowdsourced reputation & safety ratings.

Yandex — delspam

Abuse/removal requests for spam/phishing in search.

Spamhaus

Blocklists (DNSBL), domain/IP reputation, abuse tools.

crt.sh

Certificate Transparency search — spot suspicious certs.

Netcraft — Report Phishing

Submit phishing for browser/tooling protection.

phish.report (main)

Submit & track phishing takedowns, share artifacts.

Security Resources

Protect yourself with our guides and checklists

Security Checklist

Step-by-step guide to hardening your crypto security — hardware wallets, 2FA, browsing hygiene.

ChecklistPersonal Security

Privacy Arsenal

Recommended privacy tools, secure browsers, VPNs, and operating systems to protect your digital identity.

PrivacyAnonymity

Explore Arsenal

Emergency: I Was Scammed

Immediate steps if your crypto wallet was drained. Revoke approvals, secure remaining assets, report the crime.

EmergencyRecovery

Featured Investigations

In-depth research and active case work from our team

NiceNIC Registrar Investigation

Exposing IANA 3765 — the ICANN registrar powering global cybercrime with a phishing score of 1,141.74 and links to an $8.5M Trust Wallet heist.

ICANNInvestigation

Read Investigation

Steam BlockBlasters Malware Analysis

How a global gaming monopoly covered up malware distribution on Steam, prioritizing profit over player safety.

MalwareGaming

Fake Mozilla Extensions Network

150+ fake browser extensions traced to a single backend with paid media amplification. A Nigerian infrastructure trail disguised as Russian.

ExtensionsDisinformation

Read Investigation

$100K Malvertising Recovery

Wallet access restored and $100K+ returned to the victim. Extra recovered funds donated to SEAL. Full breakdown with IOCs.

RecoveryMalvertising

TON Scam Network Exposure

We exposed the largest Russian TON scammer group — 4,000+ members, internal chats, and operator identities revealed.

TONRussia

Registrar Abuse Report

How ICANN-accredited registrars NameSilo, Webnic, and NiceNic keep scam infrastructure alive by ignoring abuse reports.

RegistrarsICANN

DeFi Hack Explorer

Interactive dashboard tracking major DeFi hacks, exploits, and stolen funds across all chains with real-time data.

DeFiDashboard

Scam Intelligence Dashboard

The dashboard proving scammers are frightened mice. Exposing crypto scammer infrastructure, collecting evidence, and helping victims fight back.

IntelligenceOSINT

Tools for Fighting Scams

A curated collection of free tools and resources for identifying, reporting, and fighting online scams and phishing infrastructure.

GuideResources