PhishTank
Depends
Confidence: Medium
Use it if you run a SIEM or SOAR (Splunk, ServiceNow, TheHive) and want a free extra phishing signal for enrichment.
New check
Comparison
PhishTank vs URLhaus (abuse.ch)
PhishTank and URLhaus (abuse.ch) both land on Depends.
URLhaus (abuse.ch)
Depends
Confidence: Low
URLhaus is a free community-run feed of malware URLs for teams that consume threat intel; evidence is thin, so confidence is low.
| Compare | ||
|---|---|---|
| Verdict | Depends | Depends |
| Best for | SOC and threat-intel teams | SOC and threat intel teams |
| Who it's not for | Small businesses wanting end-user phishing protection | Buyers wanting vendor support and SLAs |
| Privacy | No known public vulnerabilities found in the sources reviewed.15 | No known public vulnerabilities found in the sources reviewed.14 |
| Support quality | False-positive removal complaints go unanswered. | Guess: community-run project, no vendor support |
| Public sentiment | Security teams still plug the free feed into Splunk and ServiceNow, but users complain about false positives and slow delisting.⁵ | Reviewed sources contain no user reviews of URLhaus.13 |
| Biggest gotcha | A false listing can get your domain suspended; delisting is slow and unresponsive.⁶ | Guess: community project support is best-effort. No SLAs for enterprise consumers.13 |
Pick PhishTank when
- SOC and threat-intel teams
- Splunk/ServiceNow enrichment
- Phishing-detection researchers
- Network admins feeding blocklists
When PhishTank is not a fit
- Small businesses wanting end-user phishing protection
- Site owners needing fast delisting from a false flag
- Anyone needing an SLA-backed commercial feed
- Teams wanting a sole source of truth for blocking
Pick URLhaus (abuse.ch) when
- SOC and threat intel teams
- Malware researchers sharing findings
- Automation of firewall blocklists
When URLhaus (abuse.ch) is not a fit
- Buyers wanting vendor support and SLAs
- Teams without tooling to process raw feeds
- Non-technical buyers expecting a polished product
- Compliance-driven shops needing vetted vendors
Sources
- PhishTank FAQphishtank.netofficial
- PhishTank . Wikipediaen.wikipedia.orgofficial
- PhishTank on Splunkbasesplunkbase.splunk.comofficial
- ServiceNow PhishTank Integrationstore.servicenow.comofficial
- Phishtank won't remove my legit websitereddit.comreview
- Somebody reported my blog to Phishtanknamepros.comreview
- Why Phishtank should be deprecatedlinkedin.comnews
review
- PhishTank vs URLhaus comparisoncybersectools.comnews
- What happened to phishtank?reddit.comreview
- PhishTank removal services overviewunflagdomain.comnews
- Top 8 Phishing Feeds Comparedbolster.ainews
- URLhausurlhaus.abuse.chofficial
- Product security pageurlhaus.abuse.chsecurity
- phishtank.orgphishtank.orgreview