The PhishFort Blocklist: Phishing Domains Confirmed by Analysts

The PhishFort Blocklist is a feed of phishing domains confirmed by our analysts. Browsers, DNS providers, antivirus tools and crypto wallets use it to warn people before they open a phishing site, reaching 418M+ users. Found a phishing site? Report it below and our analysts will review it.

Report a phishing site

Read the Blocklist API docs

New Threat
PhishFort API

Verified phishing & scams pushed hourly

+25 Global Integrations
Web Browsers
Google
Brave
Opera
Edge
Among
Others
Wallets
Meta
Mask
Trust
Wallet
MEW
Among
Others
Threat Intel
Hyper
native
Chain
Abuse
Abuse
IX
IQ
Abuse
Among
Others
Security Endpoints
Bing/
MSRC
Cloudflare
Vercel
apk
Manager
Clean
DNS
Among
Others
Warning
Deceptive site ahead
Back to safety
MX/SMTP Traffic Halted

Domain MX records are blackholed globally. Zero outbound emails can be sent or delivered from this domain while blocklisted.

Threat Neutralized

Domain access and emails halted instantly

418M+ Users Reached by the PhishFort Blocklist
Our Blocklist is consumed by Web Browsers, Anti-Virus Providers, ISPs, and many others.
First Layer of Defence
We provide instant protection that safeguards before takedowns happen.
Year-Long URL Shielding
Following a takedown, blocked URLs remain on our list for a year, thwarting future attacks.

How it grows

Our blocklist grows with every report from clients and the public, including reports sent through the form on this page.

Once a URL gets reported, the report is classified by one of our analysts and flagged as malicious if it is targeting a legitimate project in any way.

How it grows

How listings work

Sites are added to the PhishFort Blocklist when we begin action on a reported threat. If you believe a listing concerns a legitimate site, you can request a review.
How listings work

Where the Blocklist is used

PhishFort’s blocklisting data is distributed through a network of 25+ global providers via our exclusive Partner Sharing API.

Threat Intelligence

Integrated with premium malware analysis platforms and domain/URL abuse reporting services.

Domain & DNS Services

Consumed by domain registries and DNS providers that block malicious traffic instantly.

Web Browsers

Built-in threat detection for major and privacy-focused browsers (Google, Brave, Edge) and crypto wallets like MetaMask.

Cloud Infrastructure

Cloud service providers implement warning and blocking mechanisms based directly on our API.

Report a phishing site

PhishFort reviews each report. If we accept it, the site is added to the Blocklist and shared across our network.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. See our Privacy Policy for how we handle your information.

Frequently Asked Questions

Learn more about our blocklisting process and partnerships.

What is the meaning of "blocklist"?

Blocklisting is the process of identifying and preventing access to malicious online entities, such as domains, social media accounts, or IP addresses. A blocklist is a meticulously maintained database of these identified threats utilized by security providers, web browsers, antivirus solutions, and internet service providers to automatically alert and protect users before harmful activity can cause damage.

When does PhishFort blocklist an incident?

When our operations team is handling a takedown request, the submission to our partners’ blocklists is triggered automatically for specific incidents: Phishing cases, proven Scam cases, and Malware cases. Every time we begin a takedown process for these three attack types, the system automatically updates the incident’s status to be submitted to all integrated blocklists.

How can partners access the blocklist data?

We manage a private blocklist accessible exclusively through our Partner Sharing API. This API is managed by our Threat Resolution Team and automatically pushes the latest verified incidents from our database every hour, covering data from the past 1, 3, and 12 months.

Do you want to collaborate with us to fight cybercrime?