Skip to content
ClickFixReport
Every ClickFix campaign, on the record.

Contribute

Submit an indicator

If you have seen a page that asked you to copy something into the Windows Run dialog, a terminal, or the File Explorer address bar, we would like to know about it. You do not need an account.

What happens to this

  • Nothing is published automatically. Every submission goes into a queue and is read by a person before anything appears on the site.
  • Most hosts used in these campaigns are compromised legitimate websites whose owners have no idea, so every host page carries an ownership assessment. Where nobody has assessed one yet, the page says so, and the host is kept out of every export and not submitted for indexing.
  • Your email is optional. We do not email outcomes: submitting takes you to a status page for the report, and that is where the result appears. An address you do give is deleted 90 days after the report is closed. See the privacy notice.

Defanged values are fine — we refang them on the way in.

At least 40 characters. Context is what makes a report usable — a bare value gives us nothing to verify against.

Deleted 90 days after the report closes. We do not email the outcome.

If you are reporting that something on this site is wrong — a domain of yours listed in error, for instance — use the dispute process instead. Disputed entries come down the same working day, before we decide who is right.