DNSTwist detects lookalike domains used in homograph phishing, typosquatting, and brand impersonation.
Phishstats API Network
This Python tool visualizes phishing networks by querying the PhishStats API and mapping URLs, domains, hosts, IP addresses, and related data.

About Phishstats API Network
Phishstats API Network is a Python tool that queries the phishstats.info API to visualize related phishing incidents. It generates an interactive graph using the pyvis library, with nodes for URLs, website titles, hostnames, domains, IP addresses, countries, ASNs, and ISPs. It processes up to the last 100 incidents per query and saves the result as an HTML file for viewing in a browser. Queries use field-operator-search syntax, and the graph may not be viewable directly when run on a headless server.
Key features
- Queries phishstats.info API with field, operator, and search term
- Builds interactive graph with pyvis library
- Shows URLs, titles, hostnames, domains, IPs, countries, ASNs, ISPs as nodes
- Processes up to last 100 phishing incidents per query
- Supports exact and partial matching with eq and like operators
- Saves network visualization as HTML file
- Open source code under MIT license
- Visualizes multiple indicator types in one interactive graph
- Supports targeted queries by title, IP, TLD, country, ASN, and ISP
- Limited to the last 100 phishing incidents per network build
- HTML output may not be viewable directly on a headless server
Phishstats API Network at a glance
- Category
- Privacy & Security › Breach & Phishing Checks
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Phishstats API Network alternatives
Tools and sites you could use instead, ranked by how closely they match.
openSquat detects look-alike domains that resemble an organization’s legitimate domains, helping identify possible impersonation.
isMalicious checks IP addresses, domains, URLs, emails, phone numbers, and cryptocurrency wallets against threat intelligence data.
HaGeZi publishes DNS blocklists for filtering ads, trackers, malware, and other unwanted domains.
Pulsedive provides threat intelligence tools to search, scan, and enrich IP addresses, URLs, domains, and other indicators.
CrowdSec provides open-source intrusion prevention, web application firewall, and bot detection tools.
Popular in Breach & Phishing Checks
Well-known listings from the same topic.
Phishstats API Network FAQ
How do I search for phishing incidents?
What does the tool output?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.












