Threat intel distribution

Intel Feeds

Bulk IOC distribution. Domains, IPs, URLs, file hashes per source — refreshed daily in three SIEM-consumable formats. See Sigma Rules for detection logic.

Subscribe: GET /intel/manifest.json for the catalog.

Feeds: 4
Total indicators: 8,283
Window: 7 days
Last refreshed: July 14, 2026

Available feeds

Feed	Source	IOC type	Indicators	Downloads
MISP — Suspicious Domains	`misp`	`domain`	5,000	`CSVMISPSTIX`
MISP — Flagged IPs	`misp`	`ip`	140	`CSVMISPSTIX`
URLhaus — Malware Distribution URLs	`urlhaus`	`url`	2,618	`CSVMISPSTIX`
URLhaus — Malware Distribution Domains	`urlhaus`	`domain`	525	`CSVMISPSTIX`

Intel Feeds

Available feeds

Subscription