PhishStats provides a phishing URL database and real-time feed, with web search and a REST API for threat intelligence and research.

phishstats.info
PhishStats homepage screenshot

About PhishStats

PhishStats maintains a database of verified phishing URLs, IPs, domains and threat scores. It provides web search with filters and a JSON REST API at api.phishstats.info, plus URL submission, false-positive reporting, and webhook alerts for new URLs.

Read-only search and API access do not require signup. The database is updated every 90 minutes. API use is capped at 50 requests per day per IP without a key and 150 per day for free registered users with a key, with higher quotas on Premium and Enterprise plans; all quotas reset at UTC midnight.

Key features

  • Search phishing records by URL, IP, country, ASN, date range
  • Filter API queries by URL, title, country and more
  • Export search results in multiple formats
  • Submit URLs and report false positives for scoring
  • Receive new-URL alerts via custom webhooks to chat apps
  • Pivot on detail pages by tracking IDs, redirect chains, body hash
Best for: SOC analysts, threat hunters, and academic researchers working with verified phishing data for incident response and threat intelligence.
Good for
  • Read-only web search and API access available without signup
  • Database updated every 90 minutes
  • Feed includes community-contributed URLs beyond open source lists
Watch out for
  • Anonymous API requests capped at 50 per day per IP
  • Free registered API requests capped at 150 per day with a key
  • Higher API volume, submissions and monitoring limits require paid plans

PhishStats at a glance

Type
Website
Pricing
Not confirmed. Check the site
Platforms
Web
Open source
Not stated
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

PhishStats alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Malwarebytes

malwarebytes.com

Malwarebytes describes its cybersecurity software as combining antivirus, VPN, and scam detection for PCs, Macs, and mobile devices.

Popular in Breach & Phishing Checks

Well-known listings from the same topic.

All 9

PhishStats FAQ

How many API requests can I make?
Anonymous requests are capped at 50/day per IP. Free registered users get 150/day with a key. Premium allows 1,000/day and Enterprise 10,000/day. All quotas reset at UTC midnight.
How often is the data updated?
The database is updated every 90 minutes. PhishStats recommends checking no more frequently than this interval.
What is the phishscore and how is it calculated?
The phishscore is a confidence rating calculated using 22 different features and machine learning algorithms to assess how likely a URL is to be a phishing site.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing