Report a threat Beta

Report a phishing siteWe take it down.

Paste a link or a domain. The same pipeline that powers @PhishDestroy_bot checks it against eight independent sources and returns an evidence-backed verdict in about a minute. Confirmed threats go straight into the takedown queue.

  • 8 independent sources
  • Verdict in 20–60 s
  • No account, anonymous
  • Public evidence record
Report in Telegram Look up a domain API for researchers

Defanged input such as hxxps:// or example[.]com is accepted. One target per report. Government and verified legitimate domains are never processed.

Anonymous report. Link your @PhishDestroy_bot account so every report is attributed to your profile and every verdict arrives in Telegram.
  1. 1Resolve and fetchDNS, HTTP status, CDN, TLS issuer
  2. 2RegistrationRDAP or WHOIS age, registrar
  3. 3Threat intelligenceSafe Browsing, VirusTotal, URLScan, OTX
  4. 4AI pass and verdictConfirm, decline or send to an analyst
  5. 20–60 stypical end to end

How web reports are processed

  1. Protection first

    Government domains, the curated allowlist of legitimate sites and partner infrastructure are never processed. Established top-ranked domains are never taken down automatically.

  2. Duplicate check

    A domain already confirmed or awaiting review is not checked twice. You see its current status and the public report.

  3. Evidence

    DNS, HTTP, TLS, registration age, Google Safe Browsing, VirusTotal for the domain and the exact URL, URLScan, AlienVault OTX and an AI content pass. Sources that fail are shown as unavailable, never as clean.

  4. Decision

    Independent detections confirm a threat and queue it for takedown. Offline sites are closed as dead. Everything inconclusive goes to a human analyst.

  5. After the verdict

    Confirmed domains get abuse reports to the registrar and hosting provider, a public domain report on this site, and follow-up until the site is confirmed offline. You track it through the status link or in Telegram.

Limits during beta

Verification
Cloudflare Turnstile on every report
Per network
10 reports per hour, 30 per day
Per report
One link or domain
Linked Telegram account
Higher limits, bulk submission for trusted agents

Repeated reports of protected or legitimate sites pause reporting from that network for one hour, then longer. Verified agents get bulk submission and higher limits in @PhishDestroy_bot.

Privacy

Web reports are anonymous. We store the submitted link, a keyed hash of your network address used only for rate limiting, and the verdict for 30 days. No account and no tracking cookies. Confirmed domains become part of the public domain reports and the open dataset; the submitter is never published.