Warning

The Phish.Report API is still under development, so in the event that you start experiencing unexpected errors, first check if there's an update available or raise an issue in this repository.

This library provides an easy interface for interacting with the Phish.Report APIs. You can create and track phishing takedowns and work with the Indicator of Kit (IOK) platform.

API keys are required to use the API. Create one at: https://phish.report/user

To get started, import the library into your solution with either the NuGet Package Manager or the dotnet CLI.

dotnet add package PhishReport

For the primary classes to become available, import the used namespace.

using PhishReport;

Need more examples? Under the Example directory you can find a working demo project that implements this library.

• Built for .NET 8, .NET 7 and .NET 6
• Fully async
• Coverage of the current beta API
• Extensive XML documentation
• No external dependencies (makes use of built-in HttpClient and JsonSerializer)
• Custom exceptions (PhishReportException) for easy debugging
• Example project to demonstrate all capabilities of the library

• Create phishing takedowns
• Fetch existing reported cases
• Evaluate Urlscan results for Indicator of Kit matches

PhishReportClient phish = new("API KEY");

PhishingTakedown takedown1 = await phish.CreateTakedown("https://alpsautorepairv.ml/?gclid=EAIaIQobChMIsfmc__Ds-wIVSOHICh3oGwtsEAAYASAAEgIxmPD_BwE");

PhishingTakedown takedown2 = await phish.GetTakedown("case_4ExZCRk3PAh");

IokMatch[] matches = await phish.GetIokMatches();

phish.IokMatched += (sender, match) =>
{
	Console.WriteLine($"{match.IndicatorId} match on {match.Url}, source: https://urlscan.io/result/{match.UrlscanUUID}/");
};

• Website: https://phish.report
• Documentation: https://phish.report/docs
• Indicator of Kit: https://phish.report/IOK/, https://github.com/phish-report/IOK

This is a community-ran library. Not affiliated with Phish Report Ltd.