Check the live operational status and response times for all PhishCan API endpoints. Stay informed about service availability and performance.
View API StatusPhishCan provides free, regularly updated threat intelligence feeds for Canadian phishing domains. These API endpoints allow you to programmatically access the data in various formats so you can integrate it with your security tooling.
All endpoints start with the following root.
https://phishcan.comFeeds refresh every 12 hours.
The metadata field nextScheduledRun indicates the upcoming refresh window.
No API key is required. All endpoints are public.
50 requests per hour per IP.
Exceeding the limit returns 429 Too Many Requests with a Retry-After header.
Premium API keys are provisioned with higher negotiated hourly limits.
Cross-Origin Resource Sharing is enabled for every endpoint.
Append ?limit=N (or ?limit=all) to adjust the number of domains returned.
Current approximate sizes: Banking 592, Utilities 150, Government 53, Investor Alerts 212.
lastUpdated: Timestamp when the feed was last refreshedtotalDomains: Number of domains contained in the feedsourceTotalAlerts (optional): Upstream aggregate count before deduplication (may differ from totalDomains)feedType: Category identifier (banking, utilities, government, investor-alerts)newSinceLastRun: Count of new domains added since the previous runnextScheduledRun: Scheduled time for the next automated refreshsource: Always "PhishCan"Caching: Cache responses on the client side to minimise load and redundant requests.
Attribution: Appreciated when the data is displayed or redistributed. Refer to the Terms of Service.
Disclaimer: Provided for security research and protection. Validate suspicious domains with official sources.