Botd vs PhishStats

BotD is FingerprintJS's open-source, MIT-licensed JavaScript library that runs entirely in the browser to flag basic automation -- headless Chrome, PhantomJS, Selenium, and similar tools -- without any server round-trip for the detection itself. It ships as an npm package or as a CDN-hosted ES module and returns a plain detected/bot-kind result object from a single detect() call. It is free for any use with no signup; FingerprintJS separately sells a more sophisticated, paid, server-side Bot Detection API for teams that need those extra signals.

PhishStats crowdsources and republishes a running feed of phishing URLs, screenshots, and detection metadata, giving anyone a free real-time phishing blocklist to query or download. The REST API — now served from api.phishstats.info after moving off its old port-based endpoint — supports complex filter queries against the phishing database and returns JSON records ready to stream into an existing security stack. Anonymous lookups are capped at 50 requests/day per IP; a free registered key raises that to 150/day, with paid tiers for higher volume.