CTI Malicious URL Feed

Cyber Threat Intelligence — Malicious URL Indicators in STIX 2.1 & Atom RSS

Subscribe via RSS Subscribe via STIX 2.1

Latest Indicators of Compromise

Embed this IOC table on your own site 
<iframe src="https://YOUR-DOMAIN/embed" width="100%" height="520"
        frameborder="0" style="border:1px solid #1f2b45;border-radius:6px;"></iframe>

API Endpoints

MethodEndpointDescription
GET/feed.xmlAtom 1.0 RSS feed
GET/stix/STIX 2.1 Bundle (all indicators)
GET/stix/{id}STIX 2.1 Bundle (single indicator)
GET/stix/exportDownload full Bundle (.json)
POST/submitAdd a single malicious URL (API key required)
POST/uploadBulk upload via CSV (API key required)
GET/docsInteractive API docs (Swagger)
GET/embedEmbeddable IOC table