Skip to main content
Data Products

Phishing URLs Active phishing database

Real-time feed of active phishing URLs. Protect users from credential theft, brand impersonation, and scam pages.

Get the full list — Basic, €49/month

Monthly billing · cancel anytime

GET/downloads/blocklist/blocklist-urls-phishing.txt
# IsMalicious.com Blocklist - URLs (All Levels)# Format: Plain# Generated: 2026-10-05T21:19:03.006895483+00:00# Total entries: 1104057# Update frequency: every 12 hours# Category: Phishing# Threat level: All Levels# Website: https://ismalicious.com# © 2026 IsMalicious (compilation). Licensed to the downloading account under https://ismalicious.com/terms; redistribution of the compilation prohibited. Third-party entries remain under their providers' licences — see https://ismalicious.com/sources.# Filtered by category: phishinghttps://managehosting-rinnovare-domini.technosonline.com/aruba/AreaUtenti_Lang.phphttps://cathomas.info/g/j/j/nrd/4fbfb66/sign_in.phphttps://94.154.32.228/Bin/ScreenConnect.ClientSetup.exehttps://evliklikrdswihsnxz.com/giris.php
1 104 057 entriesgenerated 1 hr. ago
Download the free sample (110 405 entries)10 % of the list · no account needed

Same family, other types

  • blocklist-domains-phishing.txt8 028 736 entriesFree sample
All lists and formats

1M+

URLs Tracked

Hourly

Updates

Hourly

Feed Refresh

<2hr

Detection Time

Capabilities

Key features. Everything you need to protect your infrastructure and users.

Continuous detection

New phishing URLs added within hours.

Brand Targeting

Track which brands are being impersonated.

URL Analysis

Page screenshots, form fields, and kit info.

Active Status

Only active URLs included, dead URLs removed.

Domain Data

Associated domains and hosting infrastructure.

Multiple Formats

JSON, CSV, and plain URL lists.

Applications

Use cases. How security teams use this tool.

Email Security

Block phishing links in emails.

Browser Protection

Warn users before visiting phishing pages.

Brand Protection

Monitor for impersonation of your brand.

Takedowns

Identify targets for abuse reports.

Support

Frequently asked questions.

How do you detect phishing URLs?

Combination of user reports, honeypots, email feeds, web crawling, and machine learning classification.

Are all URLs verified?

High-confidence URLs are automatically added. Lower-confidence samples are human-verified before inclusion.

What brands are targeted?

We track phishing targeting 10,000+ brands including banking, tech, retail, and government.

How quickly are new URLs added?

Most phishing URLs are added within 1-2 hours of detection.

Cite this data

These figures may be quoted in research, articles and reports. Attribute them to isMalicious with a link to this page, so readers can check the numbers at the source and see how they move.

Attribution text: Source: isMalicious, Phishing URL Database — https://ismalicious.com/data/phishing-urls

Get Started

Ready to get started?

Join thousands of security teams using isMalicious to protect their infrastructure.

No credit card required · Free API key