API & Feeds

phishunt.io


Introduction

This API & Feeds section is used to easily get ALL the information and details at once.

Contact us with any questions, or for more information on the Pro Feed allowing you to gain full access to our data via API.

Last update: November 24, 2020 (15:41:12) CET

Sites
Companies
IPs
Hosting providers
TLS Certificates
833
28
679
186
40
Last update: November 24, 2020 (15:41:12) CET

Sites
Companies
IPs
Hosting providers
TLS Certificates
2043
28
1461
309
55

Pro Features



API Authorisation

GET https://api.phishunt.io/suspicious/{time}/{details}
x-api-key: [your API key]



API's possible values

Values that can be given to the API endpoint

https://api.phishunt.io/suspicious/{time}/{details}
{time} {details} Comments Examples
statistics JSON with all the statistics (companies, ips, hosting providers..) https://api.phishunt.io/suspicious/statistics
feed_json Feed in JSON https://api.phishunt.io/suspicious/feed_json
feed_csv Feed in CSV https://api.phishunt.io/suspicious/feed_csv

all

new

today

yesterday

week

month

year

Get suspicious sites with time filter in "first_seen" field

https://api.phishunt.io/suspicious/all

https://api.phishunt.io/suspicious/new

https://api.phishunt.io/suspicious/today

all

new

today

yesterday

week

month

year

[company]

[ip]

[asn]

[hostingprovider]

[country]

[cert]

Get suspicious sites with time and specific details filter

https://api.phishunt.io/suspicious/all/amazon

https://api.phishunt.io/suspicious/new/GOOGLE

https://api.phishunt.io/suspicious/today/AS13335


Fields

Output data given by the API

# Field Comment
1 identifier ID
2 date Date of the last check (CET)
3 first_seen Date when the URL was seen (CET)
4 new Boolean. True if the first time the URL is included
5 company Potential company affected
6 url Uniform Resource Locator (URL)
7 domain Domain. Also includes subdomains
8 image Path of the screenshot
9 malicious_google "Malicious" if the URL is flagged at Google Safe Browsing. "Not found" otherwise
10 gsb_category Google Safe Browsing category if it is flagged as malicious (e.g. "SOCIAL_ENGINEERING")
11 malicious_openphish "Found" if the URL is at Openphish feed. "Not found" otherwise
12 malicious_phishtank "Found" if the URL is at Phishtank feed. "Not found" otherwise
13 ip Internet Protocol address (IP)
14 asn Autonomous System Number (ASN)
15 hostingprovider Hosting provider
16 country Country where the URL is located
17 cert TLS Certificate

National CERTs


Terms of Service


*Includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.