Phishing Support

Automated analysis and reporting of phishing threats.

Submit Phishing Threat
Submit a suspicious website URL or email for analysis and to report it.

You can also forward phishing emails directly to:

[email protected]

Right click on the original mail and choose "Forward as Attachment" (.eml) for best results.

Need to report an abusive domain or server?

Use the standalone public service for unified abuse reporting across domains and provider networks.

Open abuse reporting

Recent Submissions

Loading submissions...

How to use it

Phishing Support helps you check and report suspicious emails or links.

  1. Send an email
    • Forward the phishing email to [email protected] or
    • Upload the email as an .eml (EML) file on the form above.
  2. Report a suspicious link
    • Paste the website URL into the Website field and click Report.

What happens next

Phishing Support will:

  • Pull out the important clues (links, domains, sender info, technical headers)
  • Do a quick automated check and label it (e.g. "likely phishing" or "probably safe")
  • Try to report it to the right places (website host, domain registrar, takedown services)
  • Save a record so you (or a security team) can review and follow up if needed

Privacy note

Only submit emails or links you're allowed to share publicly.

Who is behind this?

Samuel ScheitHi, I'm Samuel 👋 and I like building things.
Most of the time that means small open-source projects, often around data science, where I can learn something new and turn an idea into something practical. I keep a website/blog where I write about what I'm working on from time to time, and most of my projects live on GitHub. If you're curious, I also post irregular updates on Twitter.

If you want to reach out, you can email me at [email protected].

How it got started

Phishing emails have been showing up in my inbox for years.
Annoying is one thing, but the part that really got old was how much busywork it takes to do something about them.

Every time I wanted to report one properly, I'd end up repeating the same routine: dig through the headers, trace where it actually came from, figure out the hosting provider, and send an abuse report. If the email pointed to a phishing site, I'd do that whole process again for the website.

Another day, another phishing email landed in my inbox and that was the moment that pushed me over the edge.
I thought: there has to be a better way. Why not automate this whole process?

So I built Phishing Support, an application that automates the analysis and reporting of phishing emails and websites.

Support the project

This project is free and open source, but running automated analysis and AI-powered classification has costs (API calls, compute, hosting). If you find this useful, a small donation helps keep the service online and helps fight phishing.

PatreonPayPalGitHub Sponsors
View source

Thank you, every bit helps! Donations fund hosting, monitoring, and model/API costs.