Security Flag Detected

Phishing Database Delisting Service: We Get Your Domain Removed

Phishing Database listed your domain. We handle the removal.

Do it yourself: step-by-step guide
Response time: No published SLA; typically 3-10 business days
Difficulty: Moderate
No cure, no pay

About the vendor

What is Phishing Database?

Phishing Database is an open-source community project that aggregates phishing URLs from multiple sources into one freely available blocklist maintained on GitHub. The database is continuously updated and widely used by security researchers, self-hosted DNS filtering setups, and commercial security products that import open-source threat feeds. Because it is publicly accessible, any person or system can query whether your domain is listed.

Because Phishing Database is freely available and open-source, it is integrated into an enormous variety of security setups, from individual server firewall rules to commercial products importing open-source feeds. A listing can propagate into thousands of independently-maintained security configurations simultaneously.

Common causes

Why was your site flagged?

  • Your domain was submitted to the open-source database as hosting a phishing page
  • A URL on your site was identified in a phishing campaign and included in a community threat report
  • Your domain appeared in another open-source phishing feed that feeds into this database
  • A subdomain or path on your server temporarily hosted phishing content without your knowledge
  • Automated scanning correlated your domain with known phishing infrastructure patterns

From our own case data

Phishing Database in our monitoring and cases

Flagged in the last 90 days
0monitored domains newly listed by Phishing Database

Not enough data yet for median days to removal, removal success rate, most common reason and last delisting date.

We have not handled a Phishing Database removal case yet. We only show a removal figure once we have at least 5 cases.

Removal at a glance

How Phishing Database handles removal requests

Submission method
Requests go through the Phishing Database form at github.com.
Account needed
You need a Phishing Database account to file the request.
Phishing Database response time
No published SLA; typically 3-10 business days
Where to check the verdict
virustotal.com

Last updated

Complete removal guide

How to remove your domain from Phishing Database

Expected time: No published SLA; typically 3-10 business daysDifficulty: ModerateAccount required: Yes

What you will need

Flagged URL(s), defangedVirusTotal label and dateSite descriptionRemediation notesProof of domain control (DNS TXT record or file)
1

Confirm the Phishing Database detection

This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step

2

Clean the site and prepare evidence

This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step

3

Submit Phishing Database's official form

Use the Phishing Database GitHub issue at https://github.com/Phishing-Database/Phishing.Database/issues. Open an issue using the false-positive template, or open a pull request adding your domain to the false-positives list in the Phishing-Database "phishing" repository. Free GitHub account required. Enter the exact URL(s), pick the correct category if asked and say why the verdict is wrong. Save the confirmation or ticket number. The maintainers may ask you to prove ownership with a DNS TXT record at _phishingdb.<your-domain>.

4

Follow up if there is no response

This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step

5

Verify on VirusTotal before closing

This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step

The evidence checklist, follow-up routine and checks after removal are the same for every vendor. We keep them in one place so this page can focus on what is specific to Phishing Database.

Read the VirusTotal false positive guide

FAQ

Questions about Phishing Database delisting

How our Phishing Database removal service works

We check that your site is clean, send Phishing Database the evidence it needs through its official channel and follow up until the flag is gone. You only pay once the removal is confirmed, and the full process for 90+ vendors is explained on our website blacklist removal page.

Read how website blacklist removal works

Related guides

Picked for the same vendors and the same kind of problem.

Part of: Website blacklist removal

Ask AI

Get a summary from your AI assistant

Open this page in your favourite AI assistant with a ready-made question, and ask follow-ups about your own domain.