diff --git a/src/Api/Controllers/PhishingDomainsController.cs b/src/Api/Controllers/PhishingDomainsController.cs
new file mode 100644
index 0000000000..433db97ccc
--- /dev/null
+++ b/src/Api/Controllers/PhishingDomainsController.cs
@@ -0,0 +1,17 @@
+using Bit.Core.Repositories;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Bit.Api.Controllers;
+
+[Route("phishing-domains")]
+[Authorize("Application")]
+public class PhishingDomainsController(IPhishingDomainRepository phishingDomainRepository) : Controller
+{
+    [HttpGet]
+    public async Task<ActionResult<ICollection<string>>> GetPhishingDomainsAsync()
+    {
+        var domains = await phishingDomainRepository.GetActivePhishingDomainsAsync();
+        return Ok(domains);
+    }
+}