E
All feeds

Abuse.ch · Continuous

Abuse.ch · URLhaus + MalwareBazaar + ThreatFox

Live phishing URLs, malware C2 infrastructure, and active payload samples.

Three feeds from Abuse.ch fused into one stream: URLhaus for malicious URLs, MalwareBazaar for malware sample sharing, and ThreatFox for indicators of compromise. We deduplicate, rank by your industry's threat profile, and filter out stale entries. Block-list ready.

Records
Active malware C2, phishing URLs, malware samples, IoCs
Refresh cadence
Continuous
Source
Abuse.ch
License
CC0 · public domain

Subscribe

Add this feed to your daily digest.

Subscriptions live in your browser profile until you connect a real account. Edit anytime from your profile.

Detect.Respond.Automate.Predict.Defend.Operate.Detect.Respond.Automate.Predict.Defend.Operate.Detect.Respond.Automate.Predict.Defend.Operate.Detect.Respond.Automate.Predict.Defend.Operate.
Detect.Respond.Automate.Predict.Defend.Operate.Detect.Respond.Automate.Predict.Defend.Operate.Detect.Respond.Automate.Predict.Defend.Operate.Detect.Respond.Automate.Predict.Defend.Operate.
WITONE — Innovate Securely

Ready to run on WIT OS?

Talk to the team about a managed deployment, a pilot, or a custom agent — we typically respond within an hour.