Phishing.Database
The Phishing.Database project is a comprehensive and regularly updated repository designed to help the community identify and mitigate phishing threats.
We believe that threat intelligence on phishing, malware, and ransomware should always remain free and open-source. By openly sharing data about criminal activities, we aim to protect the internet users, help organizations mitigate threats, and contribute to a safer online environment for everyone by contributing to the global effort to identify and shutdown malicious sites. Unlike proprietary systems that sell access to phishing data, we focus on transparency and collaboration for the greater good.
Join us in our mission to keep threat intelligence free and open-source by contributing to the project, sharing the data, and supporting the maintainers.
Version: V.2026-10-02.17
:boom: Latest Threats
@ 17:30:22 |
:boom: Active Threats
Friday 2026-10-02 |
Total Links
Discovered Today |
| :warning: 59223 |
:warning: 0 |
3 |
Total Phishing Domains Captured: 497247 << (FILE SIZE: 4.4M tar.gz)
Total Phishing Links Captured: 784405 << (FILE SIZE: 14M tar.gz)
Phishing.Database contributes to the global security ecosystem as an official data vendor for VirusTotal. We are happy to provide our feeds to help add context to their global efforts.
Found us on VirusTotal? If you are here to report a False Positive found on VirusTotal, please Open an Issue. We appreciate your help in keeping our data accurate.
How are you using this project?
Whether you are an organization integrating our project, a researcher, or a developer building tools to enhance security and awareness around phishing, we’d love to hear and showcase your use case or project here!
If you’d like to have your project or product and/or logo showcased here:
Community Mentions & Articles
We are honored when the community writes about our work. If you’ve featured Phishing.Database in an article or research paper, let us know (see above) so we can share it here!
File Sources
The links below will direct you to the latest data files for this project.
The checksums for the files are available in the checksums repository.
| File Name |
Official Source |
Checksums |
| ALL-phishing-domains.lst |
Download |
md5, sha1, sha256, sha512 |
| ALL-phishing-links.lst |
Download |
md5, sha1, sha256, sha512 |
| ALL-phishing-domains.tar.gz |
Download |
md5, sha1, sha256, sha512 |
| ALL-phishing-links.tar.gz |
Download |
md5, sha1, sha256, sha512 |
| phishing-domains-ACTIVE.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-domains-INACTIVE.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-domains-INVALID.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-IPs-ACTIVE.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-IPs-INACTIVE.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-IPs-INVALID.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-links-ACTIVE.txt |
Download |
md5, sha1, sha256, sha512 |
| phishing-links-INACTIVE.txt |
Download |
md5, sha1, sha256, sha512 |
The files are updated regularly.
Automated Testing
The testing of the domains and URLs is automated using the awesome PyFunceble Testing Suite written by Nissar Chababy (AKA @funilrys). Over many years in development, this tool has become a robust and reliable source of domain and URL status. We use it in an automated environment which actively retests domains and URLs on a regular basis.
Requests & Support
To report an issue or a false positive, please submit a new issue using our predefined templates. This is our primary and fastest support channel.
If you cannot fulfill the requested validation steps or need to reach us for other reasons, you can use our fallback email channels:
We maintain this project in our spare time. For the quickest resolution, please use our GitHub Issues page rather than email.
Data Contributions
We welcome and encourage manual contributions!
Please note that all changes are managed in our Phishing Source Repository.
Please use the matrix below to identify the correct file based on your intended action:
Not sure which file to use ? Please take the time to read this file.
Support & Sustainability
Phishing.Database is an independent, community-driven project maintained and operated in our spare time by the founders and a core group of community Safekeepers. However, running and maintaining the infrastructure behind it incurs costs for servers, bandwidth, and other resources. Those costs are currently covered by the founders out of their own pockets — or through small sponsorships.
To keep our global infrastructure thriving and our feeds free for everyone, we rely on the support of our community and sponsors.
We are seeking partners to help us strengthen our infrastructure. Sponsors have the opportunity to have their logo and project showcased in our Integrations & Community section or actively help us in other ways.
Authors
The Safekeepers team is entrusted with operating and maintaining the Phishing Source Repository, which is central to managing all community-driven changes for the project.
These members have demonstrated exceptional trust through their direct contributions and ongoing support. We are honored to have them managing the heart of our data:
Their vigilance ensures that every community contribution is validated, keeping our threat intelligence accurate and reliable for everyone.
License
MIT License
Copyright (c) 2018-2025 Mitchell Krog - @mitchellkrogza
Copyright (c) 2018-2025 Nissar Chababy - @funilrys
Copyright (c) 2018-2025 Phishing.Database Contributors - @Phishing-Database
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
评论