Is someone impersonating
your organization?

Find phishing reports linked to your organization. See who listed each domain and why we matched it.

See each domain’s source report and company match.

Compare matching hostnames with reviewed official domains and DNS checks.

Coming later: brand matches from public certificate logs. A name match alone does not indicate abuse.

Reading a finding

Who reported it? Why did we match it?

Source reports and company matches are separate. Companies receive no overall danger score.

Was it reported as phishing?The named source’s claim and any dates it supplies.

Which brand was targeted?Our match, with its rule and confidence.

What infrastructure was observed?DNS and registration checks, dated separately.

Coverage

Counts from the latest validated source snapshots.

Source records

140,046

in latest validated snapshots

Distinct hostnames

109,260

after hostname normalization

Organizations matched

121

with published findings

Last successful snapshot

2026-10-18 22:03

UTC, across all sources

How it works

CollectDownload feeds every one to two hours.
PrepareGroup related hostnames and redact URL parameters.
MatchMatch companies by source label or brand name. Review ambiguous matches.
Check DNSCheck DNS answers against IP lists.
PublishShow permitted records. Accept free corrections.