Skip to content

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

License

Notifications You must be signed in to change notification settings

Phishing-Database/Phishing.Database

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Phishing Domain Status Testing Repo

Phishing.Database

GitHub License GitHub Issues with false-positive-report label GitHub Issues with phishing-report label GitHub Issues with bug label

The Phishing.Database project is a comprehensive and regularly updated repository designed to help the community identify and mitigate phishing threats.

We believe that threat intelligence on phishing, malware, and ransomware should always remain free and open-source. By openly sharing data about criminal activities, we aim to protect the internet users, help organizations mitigate threats, and contribute to a safer online environment for everyone by contributing to the global effort to identify and shutdown malicious sites. Unlike proprietary systems that sell access to phishing data, we focus on transparency and collaboration for the greater good.

Join us in our mission to keep threat intelligence free and open-source by contributing to the project, sharing the data, and supporting the maintainers.


Version: V.2025-12-31.13

💥 Latest Threats
@ 13:30:24
💥 Active Threats
Wednesday 2025-12-31
Total Links
Discovered Today
⚠️ 782334 ⚠️ 0 3

Total Phishing Domains Captured: 876155 << (FILE SIZE: 7.3M tar.gz)

Total Phishing Links Captured: 782323 << (FILE SIZE: 14M tar.gz)


Integrations & Community

Phishing.Database contributes to the global security ecosystem as an official data vendor for VirusTotal. We are happy to provide our feeds to help add context to their global efforts.

VirusTotal

Tip

Found us on VirusTotal? If you are here to report a False Positive found on VirusTotal, please Open an Issue. We appreciate your help in keeping our data accurate.


How are you using this project?

Whether you are an organization integrating our project, a researcher, or a developer building tools to enhance security and awareness around phishing, we'd love to hear and showcase your use case or project here!

If you’d like to have your project or product and/or logo showcased here:


Community Mentions & Articles

We are honored when the community writes about our work. If you've featured Phishing.Database in an article or research paper, let us know (see above) so we can share it here!


File Sources

The links below will direct you to the latest data files for this project.

The checksums for the files are available in the checksums repository.

File Name Official Source Checksums
ALL-phishing-domains.lst Download md5, sha1, sha256, sha512
ALL-phishing-links.lst Download md5, sha1, sha256, sha512
ALL-phishing-domains.tar.gz Download md5, sha1, sha256, sha512
ALL-phishing-links.tar.gz Download md5, sha1, sha256, sha512
phishing-domains-ACTIVE.txt Download md5, sha1, sha256, sha512
phishing-domains-INACTIVE.txt Download md5, sha1, sha256, sha512
phishing-domains-INVALID.txt Download md5, sha1, sha256, sha512
phishing-IPs-ACTIVE.txt Download md5, sha1, sha256, sha512
phishing-IPs-INACTIVE.txt Download md5, sha1, sha256, sha512
phishing-IPs-INVALID.txt Download md5, sha1, sha256, sha512
phishing-links-ACTIVE.txt Download md5, sha1, sha256, sha512
phishing-links-INACTIVE.txt Download md5, sha1, sha256, sha512

The files are updated regularly.


Automated Testing

The testing of the domains and URLs is automated using the awesome PyFunceble Testing Suite written by Nissar Chababy (AKA @funilrys). Over many years in development, this tool has become a robust and reliable source of domain and URL status. We use it in an automated environment which actively retests domains and URLs on a regular basis.


Requests & Support

To report an issue or a false positive, please submit a new issue using our predefined templates. This is our primary and fastest support channel.

If you cannot fulfill the requested validation steps or need to reach us for other reasons, you can use our fallback email channels:

Important

We maintain this project in our spare time. For the quickest resolution, please use our GitHub Issues page rather than email.


Data Contributions

We welcome and encourage manual contributions!

Please note that all changes are managed in our Phishing Source Repository.

Please use the matrix below to identify the correct file based on your intended action:

Action Intent Data Type File to Edit
➕ Add Phishing Domain domains.list
➕ Add Phishing Link / URL links.list
➕ Add Phishing IP ips.list
❌ Remove False Positive Domain domains.list
❌ Remove False Positive Link / URL links.list
❌ Remove False Positive IP ips.list

Tip

Not sure which file to use ? Please take the time to read this file.


Support & Sustainability

Phishing.Database is an independent, community-driven project maintained and operated in our spare time by the founders and a core group of community Safekeepers. However, running and maintaining the infrastructure behind it incurs costs for servers, bandwidth, and other resources. Those costs are currently covered by the founders out of their own pockets — or through small sponsorships.

To keep our global infrastructure thriving and our feeds free for everyone, we rely on the support of our community and sponsors.

Support @mitchellkrogza on Ko-fi Sponsor @funilrys on GitHub

We are seeking partners to help us strengthen our infrastructure. Sponsors have the opportunity to have their logo and project showcased in our Integrations & Community section or actively help us in other ways.


Authors


Community Safekeepers

The Safekeepers team is entrusted with operating and maintaining the Phishing Source Repository, which is central to managing all community-driven changes for the project.

These members have demonstrated exceptional trust through their direct contributions and ongoing support. We are honored to have them managing the heart of our data:

Important

Their vigilance ensures that every community contribution is validated, keeping our threat intelligence accurate and reliable for everyone.


License

MIT License

Copyright (c) 2018-2025 Mitchell Krog - @mitchellkrogza
Copyright (c) 2018-2025 Nissar Chababy - @funilrys
Copyright (c) 2018-2025 Phishing.Database Contributors - @Phishing-Database

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

About

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Sponsor this project

  •  

Packages

No packages published