PhishTank listed your URL. We handle the dispute process.
About the vendor
PhishTank is one of the world's most widely used community-based anti-phishing platforms, operated by Cisco/OpenDNS. Users submit suspected phishing URLs, and the community verifies them. Verified URLs are published in a freely available database integrated into Chrome, Firefox, email security products, and anti-phishing tools globally. PhishTank data is among the most broadly distributed phishing intelligence in the world.
PhishTank's verified database is integrated into browsers used by billions of users. A PhishTank listing triggers browser security warnings in Firefox (which uses PhishTank data) and is consumed by many security products. Because verification is community-driven, even a wrongly submitted URL can accumulate verifications before you are aware of the listing.
Common causes
From our own case data
Not enough data yet for median days to removal, removal success rate, most common reason and last delisting date.
We have not handled a PhishTank removal case yet. We only show a removal figure once we have at least 5 cases.
Removal at a glance
Last updated
Complete removal guide
On VirusTotal, confirm PhishTank flags your URL or domain and note the label and scan date. Check the vendor lookup too: https://phishtank.org/phish_search.php. Click Reanalyze first; stale cached verdicts are common.
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
Use the PhishTank entry vote at https://phishtank.org/. Find each entry with the search tool and vote "Site is not a phish" (free account required). Enter the exact URL(s), pick the correct category if asked and say why the verdict is wrong. Save the confirmation or ticket number. Also use the PhishTank contact form (https://www.phishtank.com/contact.php): For entries that stay listed. PhishTank lists individual URLs, not whole domains. Each listed URL must be handled separately.
No reply or change on VirusTotal after 24 hours? Reply once in the same thread or ticket with your reference; never open duplicates. Then try the other form. If declined, ask what evidence they need.
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
The evidence checklist, follow-up routine and checks after removal are the same for every vendor. We keep them in one place so this page can focus on what is specific to PhishTank.
Read the VirusTotal false positive guideFAQ
We check that your site is clean, send PhishTank the evidence it needs through its official channel and follow up until the flag is gone. You only pay once the removal is confirmed, and the full process for 90+ vendors is explained on our website blacklist removal page.
Picked for the same vendors and the same kind of problem.
Ask AI
Open this page in your favourite AI assistant with a ready-made question, and ask follow-ups about your own domain.