Cloud Feeds

Home / Cloud Feeds
Our Services

Where can
We Help You?

DGA & Sinkhole IP Feeds

Data You Can Trust

Since their public release in 2013, over 2,000 organizations spanning 140+ countries have come to rely on these feeds in their security protocols and products. Both feeds are integrated with most threat intelligence platforms.


DGA Feed

This self-curating feed monitors malicious networks to observe current criminal activity. All domains are actionable. Live data of between 750 and 1,500 domains. which are used by 57 malware families and over 800,000 domains. Limited to current relevance. High-confidence data, extremely low false-positives.


Sinkhole IP Feed

This is a manually-curated list of over 1,350 known sinkholes. The feed is used to capture traffic headed toward criminal destinations. Catch traffic headed toward them, and you know you have an infected machine.