Phishing GitHub Repositories (2026) · Open Source Tools

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

Real-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats

oisd blocklist

Zeek-Formatted Threat Intelligence Feeds

A collection of unified blocklists designed to provide complete filtering capabilities for different online threats. Curated from multiple sources (click SOURCES.md to view), these blocklists offer a robust solution for blocking ads, malware, trackers, and other unwanted content.

Aggregation of lists of malicious domains (phishing) that can be integrated into FortiGate firewalls and other products.

Phase II evidence package: complete-zone scan of ICANN registrar #4318 Trustname.com / Fewmoretaps OÜ — 15,040 domains tracked, 4,276 classified IOC (3,293 HIGH). Daily updated IOC feeds, SIEM CSV, operator clusters.

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.