Spot a phishing URL? Report it once and we relay it to Google Safe Browsing, Cloudflare, and other security providers.
We'll verify it and relay to all major providers.
No account needed. We don't track you.
How it works
You shouldn't have to fill out five forms to report one phishing site. LooksPhishy takes your single report, verifies it, and relays it everywhere that matters.
The problem
When you report a phishing site to Google, Cloudflare has no idea. Neither does the registrar. The site stays up on every platform you didn't report to.
Coverage
Each report triggers multiple actions across different layers of the internet's security infrastructure.
Google Web Risk flags the URL in Chrome, Firefox, Safari, and Android. 4+ billion devices protected.
Google Web Risk
Netcraft initiates takedown procedures with direct relationships to hosting providers worldwide.
Netcraft
If the site is behind Cloudflare, the abuse report goes directly to their trust and safety team.
Cloudflare
Automated abuse reports to the domain registrar and hosting provider, identified via RDAP lookups.
Registrar + Hosting
Email forwarding
Got a phishing email? Don't bother copying the URL. Forward the entire email to this@looksphishy.org and we'll handle the rest.
---------- Forwarded message ----------
From: security@bankofamerica-verify.com
Subject: Verify your account immediately
Dear Customer, your account has been limited. Please verify your identity at http://bankofamerica-verify.com/login
Built on trust
The relay platform is fully open source. Audit how reports are processed and where they go.
No cookies, no analytics, no fingerprinting. We don't track reporters. Your IP isn't stored with reports.
Every URL is verified against threat intelligence before any report is sent. No false positives wasting provider time.