Cloud Feeds
Where can
We Help You?
Data You Can Trust
Since their public release in 2013, over 2,000 organizations spanning 140+ countries have come to rely on these feeds in their security protocols and products. Both feeds are integrated with most threat intelligence platforms.
DGA Feed
This self-curating feed monitors malicious networks to observe current criminal activity. All domains are actionable. Live data of between 750 and 1,500 domains. which are used by 57 malware families and over 800,000 domains. Limited to current relevance. High-confidence data, extremely low false-positives.
Sinkhole IP Feed
This is a manually-curated list of over 1,350 known sinkholes. The feed is used to capture traffic headed toward criminal destinations. Catch traffic headed toward them, and you know you have an infected machine.