Sources
30
Feeds wired into the platform
SOURCES
The live threat-intelligence feeds we continuously ingest — names, type, cadence, and freshness. Updated automatically by the platform; no manual action required.
Sources
30
Feeds wired into the platform
Contributing data
28
Sources that have persisted records
Active now
1
Pulling in the current window
Source coverage
28 feeds contributing to the warehouse — tier, cadence, last pull, and records added.
| source | type | tier | status | cadence | last pull | records contributed |
|---|---|---|---|---|---|---|
| AbuseIPDB | enrichment | T1 | degraded | on trigger |
CONFIGURED_&_READY
2 more feeds wired and on schedule — ready capacity, ingesting as soon as their window or credentials land.
| source | type | tier | status | cadence | last pull | records contributed |
|---|---|---|---|---|---|---|
| Forta | external import | T2 | staged · ready | every 15 min | never |
Attributions
IP geolocation and ASN / hosting-org lookups use the IP2Location LITE databases (CC BY-SA 4.0).
IP-reputation coverage includes the public blocklists Blocklist.de, IPsum, CINS Army, Emerging Threats, Spamhaus DROP.
| 7/21/2026, 9:34:35 AM |
| 1,000 |
| Blocklist.de | external import | T1 | live · recent | every 30 min | 7/21/2026, 4:31:57 PM | 809,557 |
| C2IntelFeeds | external import | T1 | live · recent | 20 */6 * * * | 7/21/2026, 12:21:39 PM | 974 |
| CINS Army | external import | T1 | live · recent | every 6 hours | 7/21/2026, 12:03:15 PM | 92,818 |
| CISA KEV | external import | T1 | degraded | hourly | 7/21/2026, 10:12:55 AM | 1,010,807 |
| Domain → IP resolution | external import | T1 | live · recent | 15 */3 * * * | 7/21/2026, 3:15:17 PM | 777 |
| Emerging Threats Compromised | external import | T1 | live · recent | every 6 hours | 7/21/2026, 12:03:36 PM | 26,961 |
| Etherscan Labels | external import | T1 | live · recent | daily at 05:30 UTC | 7/21/2026, 10:41:22 AM | 6,318 |
| Etherscan Mixers | external import | T1 | live · recent | daily at 05:45 UTC | 7/21/2026, 5:45:32 AM | 1,118 |
| Feodo Tracker | external import | T1 | live · recent | every 30 min | 7/21/2026, 4:31:59 PM | 6,767 |
| IPsum | external import | T1 | live · recent | every 6 hours | 7/21/2026, 12:04:53 PM | 99,465 |
| MalwareBazaar | external import | T1 | live · recent | every 15 min | 7/21/2026, 4:45:59 PM | 175,300 |
| MetaMask eth-phishing-detect | external import | T1 | live · recent | daily at 04:15 UTC | 7/21/2026, 10:44:08 AM | 26,000 |
| MyEtherWallet Darklist | external import | T1 | live · recent | daily at 04:50 UTC | 7/21/2026, 10:44:10 AM | 3,260 |
| NVD CVE | external import | T1 | live · recent | every 20 min | 7/21/2026, 4:40:34 PM | 53,174 |
| OFAC SDN Sanctioned Wallets | external import | T1 | live · recent | daily at 06:00 UTC | 7/21/2026, 10:44:45 AM | 11,196 |
| OpenPhish | external import | T1 | live · recent | every 15 min | 7/21/2026, 4:46:41 PM | 779,100 |
| Ransomwhere | external import | T1 | live · recent | every 12 hours | 7/21/2026, 12:06:18 PM | 223,720 |
| ScamSniffer | external import | T1 | live · recent | every 6 hours | 7/21/2026, 12:06:21 PM | 96,140 |
| ScamSniffer Scam Domains | external import | T1 | live · recent | 25 */6 * * * | 7/21/2026, 12:28:51 PM | 48,000 |
| Spamhaus DROP | external import | T1 | live · recent | every 2 hours | 7/21/2026, 4:04:12 PM | 171,676 |
| SSL Blacklist | external import | T1 | blocked | every 30 min | 6/19/2026, 6:26:31 PM | 2,831,447 |
| ThreatFox | external import | T1 | blocked | every 15 min | 7/20/2026, 9:06:53 AM | 990,329 |
| Tor Exit Nodes | external import | T1 | live · recent | hourly | 7/21/2026, 4:41:14 PM | 18,502 |
| UK Sanctions List Sanctioned Wallets | external import | T1 | live · recent | daily at 06:30 UTC | 7/21/2026, 10:50:21 AM | 260 |
| URLHaus | external import | T1 | live · recent | every 15 min | 7/21/2026, 4:51:07 PM | 1,279,105 |
| AlienVault OTX | external import | T2 | live · recent | every 6 hours | 7/21/2026, 6:00:41 AM | 16,647 |
| GoPlus Security | enrichment | T2 | live | every 6 hours | 7/20/2026, 5:20:24 AM | 924 |
| 0 |
| Chainabuse | external import | T3 | staged · ready | every 30 min | never | 0 |