PhishDestroy Open Dataset

Name: PhishDestroy Phishing Domain Threat Intelligence Dataset
Creator: PhishDestroy
Published: 2019-01-01
License: https://creativecommons.org/publicdomain/zero/1.0/

125,000+ verified phishing domains, crypto drainers, and scam infrastructure. Free, open-source threat intelligence for researchers, browser vendors, ML training, and academic use.

CC0 License Updated Daily JSON / API 125K+ Domains Since 2019

125,185

Domains Tracked

77,824

Takedowns

32,313

Abuse Reports

391+

Brands Protected

Download Options

Full Phishing Domain List (JSON)

Complete dataset — phishdestroy/destroylist on GitHub

Active Domains Feed

Currently DNS-resolving phishing domains

HuggingFace Dataset

ML-ready dataset for model training

Public REST API

Programmatic access, no API key required

Academic Citation (BibTeX)

@misc{phishdestroy2026, title = {PhishDestroy: Open-Source Phishing Domain Threat Intelligence Dataset}, author = {PhishDestroy Team}, year = {2026}, publisher = {PhishDestroy}, howpublished = {\url{https://phishdestroy.io/dataset}}, note = {125,000+ verified phishing domains, CC0 license} }

Data Fields

domain — phishing domain name
ip_address — resolved IP
registrar — domain registrar
target_brand — impersonated brand (MetaMask, Coinbase, etc.)
drainer_type — crypto drainer kit identification
vt_detections — VirusTotal detection count
detected_at — first detection timestamp
site_status — alive / dead / banned / parked
ssl_issuer, ssl_valid_to — SSL certificate data
asn, ip_country, ip_org — hosting intelligence

License: Released under CC0 1.0 Universal — no restrictions, no attribution required. Use freely for research, commercial products, or ML training.

← Back to PhishDestroy