CTI Malicious URL Feed

A public Cyber Threat Intelligence feed — malicious URLs in STIX 2.1 & Atom RSS.

MethodEndpointDescription
GET/feed.xmlAtom 1.0 RSS feed
GET/stix/STIX 2.1 Bundle (all)
GET/stix/{id}STIX 2.1 Bundle (single)
GET/stix/exportDownload full Bundle
POST/submitAdd a single malicious URL
POST/uploadBulk upload via CSV
GET/docsInteractive API docs (Swagger)
GET/redocAPI docs (ReDoc)