Question 1

Is PhishDown free to use?

Accepted Answer

Yes, PhishDown is completely free to use. You can check unlimited URLs, domains, and IP addresses without any signup or payment required. Unlike premium services, we believe phishing protection should be accessible to everyone.

Question 2

How accurate is the phishing detection?

Accepted Answer

Our detection system combines multiple data sources including DNS records, WHOIS data, SSL certificates, reputation databases, and threat intelligence feeds to provide comprehensive analysis. We continuously improve our detection algorithms to minimize both false positives and false negatives, achieving >99% accuracy.

Question 3

What's the difference between Safe, Suspicious, and Malicious?

Accepted Answer

Safe means we found no indicators of phishing or malicious activity. Suspicious means we detected some warning signs (like newly registered domain, unusual DNS configuration, or weak SSL certificate) that warrant caution. Malicious means we have strong evidence that the target is involved in phishing or other malicious activities, such as being listed in threat intelligence databases or matching known phishing patterns.

Question 4

Can I check URLs, domains, and IP addresses?

Accepted Answer

Yes! You can submit full URLs (like https://example.com/page), domains (like example.com), or IP addresses (like 192.168.1.1). Our system automatically detects the type of input you provide and performs the appropriate analysis. We also trace redirect chains to analyze the final destination.

Question 5

How long does a scan take?

Accepted Answer

Most scans complete within a few seconds. Simple domain checks are fastest, while complex URLs with multiple redirects may take slightly longer as we trace the entire redirect chain. We also perform deeper analysis for suspicious sites, which may add a few more seconds.

Question 6

Do you store the URLs I check?

Accepted Answer

We may store anonymized lookup data to improve our detection capabilities and build threat intelligence, but we do not store any personally identifiable information or track individual users. Your privacy is important to us.

Question 7

What should I do if a link is marked as malicious?

Accepted Answer

Do not visit the link. If you received it via email or message, report it as phishing to the Anti-Phishing Working Group (APWG) or PhishTank. If you've already clicked it or entered information, immediately change any passwords that may have been compromised, enable two-factor authentication, and monitor your accounts for suspicious activity.

Question 8

Can I report a false positive or false negative?

Accepted Answer

Yes! We encourage feedback to improve our service. If you believe a site was incorrectly flagged (false positive) or missed (false negative), please contact us with details. We review all reports and use them to continuously improve our detection algorithms.

Question 9

How do I integrate PhishDown into my application?

Accepted Answer

PhishDown provides a REST API for integration into your applications and workflows. Check our API Documentation for endpoints, authentication, and code examples. We also support integrations with popular security tools and platforms.

Resources

Documentation & Links

API Documentation

Blog

Contact Support

PhishTank

APWG

Frequently Asked Questions

Still Have Questions?