NewsPublished 31 Jul 2026

API da Ruleset julioliraup/Antiphishing on air

Source Reddit Cybersecurity

Discussion

The julioliraup/Antiphishing project provides a publicly accessible, read-only JSON API that exposes detailed information about phishing-related Suricata rules. It includes data on individual phishing URLs and vector-based rules that match DNS and TLS queries against a large blocklist of suspicious domains. The API is hosted on GitHub Pages and does not require authentication or strict rate limiting. It serves as a threat intelligence source for identifying phishing domains and URLs, with data updated regularly. There is no indication of a vulnerability or exploit in the API itself.

r/cybersecurity (opens in a new tab)u/Limp_Durian_68500 points0 comments

Now, it is possible to query phishing-suspect FQDNs through the free API, featuring database information on WHOIS, IP, Geolocation, and threat mapping

https://github.com/julioliraup/AT/wiki/REST-API-USE

A frontend interface is also available: https://julioliraup.github.io/AT

Links cited in the discussion

Impact

There is no direct security impact or vulnerability described. The API provides threat intelligence data to help defenders identify phishing threats. It does not expose sensitive information or have known exploits. The data can assist security teams in detecting and mitigating phishing attacks by providing up-to-date phishing domain blocklists and Suricata rule details.

Defensive guidance

No mitigation is required as this is not a vulnerability or exploit. The API is a security resource intended for defensive use. Users should consume the API responsibly, respecting the recommended rate limits.

Summary

This is a public threat intelligence API offering detailed Suricata IDS rules related to phishing detection. It includes endpoints to retrieve specific rule details by SID, a compact index of all rules, and vector-based rules that cover DNS and TLS SNI queries against a blocklist of over 243,000 suspicious domains. The API is read-only, hosted on GitHub Pages, and designed for querying phishing-suspect fully qualified domain names (FQDNs) with metadata such as WHOIS, IP, geolocation, and threat mapping.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 31 Jul 2026, 20:03 UTC

Technical details

References

Community reviews