Skip to content
Install MCP

Threat feed

Phishunt

Last fetched

Phishing · refreshed hourly · last verified

Phishunt is a Phishing threat-intelligence feed, refreshed hourly, indexed by WhisperGraph. WhisperGraph currently records 496 indicators listed by it.

What is Phishunt

Phishunt is an automated phishing-URL tracking feed that continuously scans newly-registered and newly-observed domains for phishing indicators — brand-impersonation content, suspicious registration patterns, and known phishing-kit signatures — publishing matches as a public feed shortly after detection. Its fully-automated pipeline trades some of the precision a human-verified feed like PhishTank offers for substantially lower detection latency, making it useful as an early-warning signal that a human-verified feed will later confirm or reject. It is indexed here as a fast-detection phishing source complementary to the community-verified feeds elsewhere in this catalogue.

Source
https://phishunt.io/
Refresh cadence
hourly

Category drift. The curated category for this feed is Phishing, while WhisperGraph currently files it under phishing.

Indicators currently listed

496 indicators across 1 node type.

HOSTNAME · 496

Related pages

Pivot from Phishunt into the indicators it lists.

Queries

Resolves the feed's categories.


MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categories
Run yourself →

The indicator-kind rollup and sample listed above.


MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESC
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.