Frequently Asked Questions

Find answers to common questions about PhishStats API, data, and services

API Usage

How many API requests can I make?

Users can make up to 20 requests per minute. If you need more, please contact us for a custom plan.

Where can I find API documentation?

You can find comprehensive API documentation with examples and parameters at our API Docs page. It includes detailed information about filtering, sorting, pagination, and various query examples.

What data fields are available in the API response?

Our API returns comprehensive data including the following fields:

id - Record ID
url - Phishing URL
ip - IP address
countrycode - Country code
countryname - Country name
regioncode - Region code
regionname - Region name
city - City
zipcode - ZIP code
latitude - Latitude
longitude - Longitude
asn - ASN
bgp - BGP info
isp - ISP
title - Page title
date - Date added
date_update - Last update
hash - URL hash
score - Phish score
host - Host
domain - Domain
tld - Top-level domain
domain_registered_n_days_ago - Domain age
screenshot - Screenshot URL
abuse_contact - Abuse contact
ssl_issuer - SSL issuer
ssl_subject - SSL subject
rank_host - Host rank
rank_domain - Domain rank
n_times_seen_ip - IP seen count
n_times_seen_host - Host seen count
n_times_seen_domain - Domain seen count
http_code - HTTP status
http_server - HTTP server
google_safebrowsing - Safe Browsing status
virus_total - VirusTotal data
abuse_ch_malware - Abuse.ch malware
vulns - Vulnerabilities
ports - Open ports
os - Operating system
tags - Tags
technology - Technology stack
page_text - Page content
ssl_fingerprint - SSL fingerprint

How often is the data updated?

Our database is updated every 90 minutes with the latest phishing intelligence. We recommend checking for updates no more frequently than this interval to ensure optimal performance.

What is the phishscore and how is it calculated?

The phishscore is a confidence rating calculated using 22 different features and machine learning algorithms. It provides a numerical assessment of how likely a URL is to be a phishing site, helping you prioritize threats based on confidence levels.

Can I export data in different formats (CSV, JSON, etc.)?

Our CSV feed has been deprecated in favor of our more flexible API. The API provides JSON-formatted responses that can be easily processed and integrated into your existing systems and workflows.

Is there a way to get custom data feeds for my organization?

You can create custom data feeds by filtering specific brand names and IP addresses directly through our API. This allows you to tailor the data to your organization's specific monitoring needs and threat landscape.

Data & Research

Can I get historical data beyond the current dataset?

For academic researchers and institutions, we may be able to provide access to extended historical datasets. Please reach out to [email protected] with your research requirements and institutional affiliation.

How do you verify that URLs are actually phishing sites?

We collect URLs from trusted, reliable sources within the cybersecurity community. While we strive for accuracy, there may be occasional false positives in our dataset. We continuously work to improve our verification processes and data quality.

What sources do you use to collect phishing data?

We currently gather data from open-source feeds within the cybersecurity community. The real value of PhishStats lies in our processing, enhancement, and long-term storage of this data, making it easily accessible and useful for the information security community.

How long do you keep phishing URLs in your database?

We maintain phishing URLs in our database indefinitely, providing a comprehensive historical record of phishing activity. This long-term storage enables trend analysis, historical research, and comprehensive threat intelligence.

Upcoming Features

Is there a way to submit phishing URLs to your database?

Phishing URL submission functionality is currently in development and will be available soon. This feature will allow users to contribute to our database through both a web interface and API endpoints.

Do you offer webhook notifications for new phishing URLs?

Webhook notification capabilities are planned for future release. This feature will enable real-time alerts for new phishing URLs, allowing seamless integration with your existing security infrastructure.

What integrations do you support (Slack, Teams, etc.)?

Integration support for popular platforms like Slack, Microsoft Teams, and Google Chat is currently in development. These integrations will provide convenient ways to receive phishing intelligence directly in your team's communication channels.

Do you offer premium plans with higher rate limits?

Premium API tiers with enhanced rate limits and additional features are currently in development. These plans will be designed for organizations requiring higher throughput and priority access to our phishing intelligence.

How can I get notified about new features and updates?

Feature notifications will be implemented alongside our upcoming user account system. In the meantime, you can stay informed by following our updates or contacting us directly at [email protected].

Support

How to get support for the product?

For any questions or support, please send an email to [email protected]. We'll be happy to assist you with any questions or concerns you may have.

Still have questions?

Can't find what you're looking for? Our support team is here to help.

Contact Support