OpenPhish alternatives
6 tools in the catalogue cover the same ground as OpenPhish and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- abuse.ch HuntingfreeCross-search over the abuse.ch feeds: malicious URLs, samples, botnet command servers and SSL fingerprints, from one of the most cited non-profit sources.
- Feodo TrackerfreeTracks command-and-control servers of banking trojans such as Emotet, Dridex and TrickBot.
- GTFOBinsfreeCurated list of Unix binaries that can bypass local security restrictions in misconfigured systems.
- MISP GalaxyfreeOpen, machine-readable knowledge base of threat actors, tools and techniques, used to share intelligence between organisations in a common vocabulary.
- MITRE ATT&CKfreeGlobal knowledge base of adversary tactics and techniques based on real-world observations. The industry standard framework for describing and categorizing cyber attack behaviors.
- OPENHUNTING.IO Threat LibraryfreeOpen library of threat actors, malware families and campaigns, cross-referenced and sourced. A free alternative to commercial platforms.
OpenPhish
Threat Intelligence
Also written Open Phish
Real-time phishing intelligence platform providing curated phishing URLs and targets. Free feed of active phishing sites updated continuously for threat analysts and security teams.
RECOMMENDED USE
Active phishing feed, real-time threat intelligence
Information
Video tutorials
Learn to use OpenPhish
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
PhishTank
Threat IntelligenceCommunity-based phishing URL database. Verify and report phishing sites, access real-time feeds of known phishing URLs. API available for integration into security tools.
BI.ZONE Threat Intelligence
Threat IntelligenceThreat portal with strong coverage of groups active in the post-Soviet space, an area where Western sources are thin.
URLhaus (abuse.ch)
Threat IntelligenceCommunity-driven database of malicious URLs used for malware distribution. Searchable by URL, domain, IP, CIDR, or hash. Integrates with threat feeds and blocklists.
PhishStats
Threat IntelligenceContinuously updated phishing database, searchable by URL, IP, domain or ASN, with a public feed.
User reviews
Be the first to leave a review