Check the live operational status and response times for all PhishCan API endpoints. Stay informed about service availability and performance.
View API StatusPhishCan provides free, regularly updated threat intelligence feeds for Canadian phishing domains. These API endpoints allow you to programmatically access the data in various formats so you can integrate it with your security tooling.
All endpoints start with the following root.
https://phishcan.comFeeds refresh every 12 hours.
The metadata field nextScheduledRun indicates the upcoming refresh window.
No API key is required. All endpoints are public.
100 requests per minute per IP.
Exceeding the limit returns 429 Too Many Requests with a Retry-After header.
Cross-Origin Resource Sharing is enabled for every endpoint.
Append ?limit=N (or ?limit=all) to adjust the number of domains returned.
Current approximate sizes: Banking 592, Utilities 150, Government 53.
lastUpdated: Timestamp when the feed was last refreshedtotalDomains: Number of phishing domains contained in the feedfeedType: Category identifier (banking, utilities, government)newSinceLastRun: Count of new domains added since the previous runnextScheduledRun: Scheduled time for the next automated refreshsource: Always "PhishCan"Caching: Cache responses on the client side to minimise load and redundant requests.
Attribution: Appreciated when the data is displayed or redistributed. Refer to the Terms of Service.
Disclaimer: Provided for security research and protection. Validate suspicious domains with official sources.