Phishing database.
PhishStats is a phishing intelligence database and real-time feed, operating since 2014. It provides verified phishing URLs, IPs, domains, and threat scores through a web search interface and a JSON REST API, with search filterable by URL, IP, country, ASN, and date range, plus data visualization, mapping, and export capabilities. The database updates every 90 minutes and includes a phishscore, a confidence rating calculated from 22 features using machine learning to assess how likely a URL is a phishing site.
The platform is built for SOC analysts, threat hunters, security teams, and academic researchers conducting phishing research and incident response. Users can submit phishing URLs and report false positives, with submissions scored by a hybrid rule-based and machine-learning engine and reviewed by an AI system. Monitoring and webhook alerts for new phishing URLs are available, integrating with Slack, Microsoft Teams, Discord, Google Chat, and Telegram. Record detail pages support pivoting on title, IP, domain, body hash, tracking IDs, and redirect chains to identify shared infrastructure and correlated campaigns.
API access is tiered: anonymous requests are capped at 50 per day per IP, free registered users get 150 per day with an API key, Premium plans allow 1,000 per day, and Enterprise plans allow 10,000 per day, with all quotas resetting at UTC midnight. Read-only access to the search interface and API requires no signup, while paid Premium and Enterprise plans offer higher API volume, submission limits, and monitoring limits, billed monthly or annually.
Yes, PhishStats is a free phishing database and feed with no signup required for read-only access; paid Premium and Enterprise plans unlock higher API limits.
Anonymous requests are capped at 50/day per IP, free registered users get 150/day with an API key, Premium gets 1,000/day, and Enterprise gets 10,000/day.
Create an API key under Settings, then send it as an X-API-Key or Authorization Bearer header on requests to api.phishstats.info.
The database is updated every 90 minutes with the latest phishing intelligence.
It is built for SOC analysts, threat hunters, security teams, and academic researchers doing phishing and threat intelligence work.
Show your product to thousands of developers
· 100k monthly pageviews
· 7k newsletter subscribers
U.S. National Vulnerability Database.
Automated security testing API for web apps.
Generate random passwords of varying complexities.
Scans the requesting client's IP for open TCP ports with fast or deep modes on IPv4/IPv6.
Generate merchant-specific and one-time use credit card numbers that link back to your bank.
Scan, search and collect threat intelligence data in real-time.