greatapis

Security — entry 023 of 30

PhishStats

Verified Jul 2026

PhishStats crowdsources and republishes a running feed of phishing URLs, screenshots, and detection metadata, giving anyone a free real-time phishing blocklist to query or download. The REST API — now served from api.phishstats.info after moving off its old port-based endpoint — supports complex filter queries against the phishing database and returns JSON records ready to stream into an existing security stack. Anonymous lookups are capped at 50 requests/day per IP; a free registered key raises that to 150/day, with paid tiers for higher volume.

phishingthreat-intelurl-blocklistiocsecurity
Visit phishstats.info ↗Pricing ↗More Security
AuthenticationNone requiredCall it straight away — no key, no signup.
HTTPSSupportedTraffic is encrypted in transit.
CORSDisabledBrowser calls need a server-side proxy.
PricingFreemiumA usable free tier exists, with paid plans for more volume.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score71out of 100
Authentication25/25No authentication required
Pricing17/20Freemium tier available
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 71 on greatapis.com
<a href="https://greatapis.com/api/phishstats/"><img src="https://greatapis.com/badge/phishstats.svg" alt="Scored 71 on greatapis.com"></a>

Auth quickstart

  1. No key needed — call it now.
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.

Developer reference

Rate limit

Anonymous (no key): 50 requests/day per IP with a 20/minute burst cap; free registered: 150/day (120/minute burst); Premium 1,000/day; Enterprise 10,000/day -- all quotas reset at UTC midnight, per phishstats.info/api-docs.

Featured in

1 collection
No key required

People comparing PhishStats also look at…

All 30 →

PhishStats vs Botd

Botd supports CORS, while PhishStats doesn't — pick Botd for direct browser calls.

Compare →

PhishStats vs Microsoft Security Response Center (MSRC)

Microsoft Security Response Center (MSRC) supports 2 response formats, while PhishStats offers fewer — pick Microsoft Security Response Center (MSRC) for more integration flexibility.

Compare →

PhishStats vs Mozilla http scanner

Mozilla http scanner supports CORS, while PhishStats doesn't — pick Mozilla http scanner for direct browser calls.

Compare →

PhishStats vs National Vulnerability Database

National Vulnerability Database supports CORS, while PhishStats doesn't — pick National Vulnerability Database for direct browser calls.

Compare →

PhishStats vs dead-drop

dead-drop supports CORS, while PhishStats doesn't — pick dead-drop for direct browser calls.

Compare →

PhishStats vs FilterLists

FilterLists is Collin Barrett's independent, actively-maintained directory of filter and host lists used by adblockers, firewalls, and DNS sinkholes to block ads, trackers, malware, and other unwanted content. Its ASP.NET Core REST API serves the same catalog that powers the site -- filter lists, the domains/URLs they target, licenses, and maintainer info -- with an interactive Swagger UI for exploring the schema before writing a query. The API and site are fully free and keyless, open-sourced on GitHub with commits as recent as this week. The API lives entirely on a separate `api.filterlists.com` host -- the intuitive REST paths on the main `filterlists.com` domain just return the site's own SPA shell.

Compare →

IPLogs

Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing

No auth · CORS

UK Police

UK Police data

No auth · CORS

Censys

Search engine for Internet connected host and devices

API Key · CORS

Complete Criminal Checks

Provides data of offenders from all U.S. States and Pureto Rico

API Key · CORS

Domain Intelligence

DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call

API Key · CORS

EmailRep

Email address threat and risk prediction

API Key