PhishTank

Phishing Site Detection
Powered by Multimodal AI

One API call. Twenty layers of analysis.

PhishTank combines a comprehensive set of perceptual hashes, deep learning, text extraction, semantic understanding, and visual feature matching to create the most comprehensive phishing fingerprint available—catching 95% of variants.

View API Docs Learn More

95%

Variant Detection

Analysis Layers

Hash Algorithms

<1s

Search Speed

Why Developers Choose PhishTank

Simple REST API with powerful multimodal detection—integrate in minutes, not days

Simple REST API

Standard HTTP endpoints with JSON responses. Upload images, search for matches, and get detailed similarity scores.

Fast Integration

Get started in minutes with our Python SDK or use direct HTTP requests. Full OpenAPI documentation included.

95% Detection Accuracy

Multimodal AI catches phishing variants that simple MD5 hashing misses—95% vs 33% detection rate with deep learning and semantic analysis.

Batch Processing

Upload and analyze thousands of screenshots in parallel. Async job processing with webhook notifications for results.

Real-Time Search

Search your entire database in under a second. Get similarity scores, matched campaigns, and detailed comparison metrics via JSON.

Multimodal Fingerprinting Architecture

PhishTank creates a comprehensive digital fingerprint using 5 hash algorithms, deep learning, and semantic analysis

Phishing Screenshot

Visual Hashing

pHash (DCT-based)
aHash (Brightness)
dHash (Gradient)
wHash (Wavelet)
PDQ (Perceptual)

Text Extraction

Tesseract OCR
Token extraction
Brand detection
URL parsing

Deep Learning

AWS Nova (1024-dim)
EfficientNet (1280-dim)
AWS Rekognition
AKAZE features

Composite Fingerprint

10-layer multimodal signature combining visual hashes, text tokens, semantic meaning, and deep learning embeddings

API Integration in 3 Steps

Integrate PhishTank into your security stack with simple REST API calls

POST /api/images

{
  "image": "base64_encoded_image",
  "metadata": {
    "source": "email_gateway",
    "timestamp": "2024-01-15T10:30:00Z"
  }
}

Upload via API

POST your phishing screenshot as base64 or multipart form data. PhishTank generates 5 perceptual hashes, extracts text with OCR, and creates deep learning embeddings.

GET /api/search?image_id=abc123

{
  "matches": [
    {
      "id": "xyz789",
      "similarity_score": 0.94,
      "campaign_id": "camp_001",
      "matched_hashes": ["phash", "dhash"]
    }
  ]
}

Search for Matches

Query the API to find similar images. Get JSON responses with similarity scores, matched campaigns, hash comparisons, and detailed metrics from all 20 analysis layers.

GET /api/campaigns/camp_001

{
  "campaign_id": "camp_001",
  "image_count": 47,
  "first_seen": "2024-01-10",
  "brands": ["PayPal", "Chase"],
  "avg_similarity": 0.89
}

Analyze Campaigns

Retrieve campaign data via API to track phishing patterns, monitor trends, and integrate with your security orchestration platform for automated response.

Join Security Teams Protecting Millions

PhishTank is trusted by security professionals to detect and prevent phishing attacks at scale. Our intelligent comparison technology has analyzed over 112,000 screenshots and identified 500+ phishing campaigns.

Open Source

MIT License, fully transparent

Self-Hosted

Deploy on your infrastructure

API Ready

Integrate with your tools

Ready to Stop Phishing Attacks?

Start protecting your users today with intelligent phishing detection that saves time and catches more threats.