About Phishcheck

Built for information security analysts, PhishCheck is designed to quickly gather the information required to investigate a suspicious website. Use PhishCheck to check what lies behind a suspicious URL. Our system will screenshot the website, gather information such as WHOIS, ASN, IP Address, IP Geolocation, and record all resources loaded by the website. PhishCheck then displays all the information you need in one place, saving you time.

Don't see the information you need? Suggest it! Email support@phishcheck.me or tweet your feedback using #PhishcheckMe.

Want to support this effort?

Features

• Handles common URL "defanging" techniques (meow://, hxxp[s]://, example[.]com)
• Change browser user-agent in the Advanced options menu
• Display host server information
• IP Address
• AS Number
• IP Owner
• IP Geographic Location (Approx.)
• Whois Record
• Record all HTTP requests
• Check Google SafeBrowsing Reputation
• Check PhishTanks Database Reputation
• 'Phishy' score calculated by PhishCheck's custom classifier
• Display the webpage source code
• Render a high resolution screenshot of the website

Known Issues

• We no longer display screenshots of the entire height of the page. This is a limitation in our current screenshot method due to changes in the library. The screenshot returns only the viewport area. A fix is in development.
• Screenshots unavailable due to timeouts (Phishing webpages aren't built for reliability, and often take too long to return.)