Total Indicators
953.2K
Unique (1 source)
570.2K
Feed-exclusive
Corroborated
383K
2+ sources
Sources
247
Corroboration — How Many Feeds Report Each Indicator
Left = feed-exclusive (potential gaps or unique intel). Right = widely corroborated (high confidence).
Compare Two Feeds (Gap Analysis)
Per-Feed Coverage (Top 100)
| Feed / Source | Category | Total IoCs | Feed-Exclusive | Uniqueness |
|---|---|---|---|---|
FireHOL: firehol_abusers_30d.netset |
IP Blocklists | 60,053 | 0 | 0.0% |
Phishing.Database Domains |
Phishing | 60,000 | 58,832 | 98.1% |
FireHOL: stopforumspam.ipset |
IP Blocklists | 60,000 | 0 | 0.0% |
IPsum Level 1 |
IP Blocklists | 60,000 | 14,837 | 24.7% |
MetaMask Phishing List |
Cryptocurrency | 60,000 | 58,558 | 97.6% |
CERT-PL phishing |
Phishing | 60,000 | 5,531 | 9.2% |
FireHOL: firehol_level4.netset |
IP Blocklists | 60,000 | 0 | 0.0% |
ScamAdviser-esque OISD |
Scam | 60,000 | 48,655 | 81.1% |
FireHOL: stopforumspam_90d.ipset |
IP Blocklists | 60,000 | 0 | 0.0% |
FireHOL: blocklist_net_ua.ipset |
IP Blocklists | 60,000 | 11,720 | 19.5% |
phishing.army Extended |
Phishing | 60,000 | 0 | 0.0% |
ThreatView Domain |
Malware Domains | 60,000 | 59,139 | 98.6% |
FireHOL: stopforumspam_365d.ipset |
IP Blocklists | 60,000 | 35,207 | 58.7% |
FireHOL: stopforumspam_30d.ipset |
IP Blocklists | 48,316 | 17,201 | 35.6% |
IPsum Level 2 |
IP Blocklists | 32,318 | 0 | 0.0% |
URLhaus (tags/family) |
Malware URLs | 31,969 | 15,993 | 50.0% |
Ransomwhere payments |
Ransom Payments | 30,088 | 0 | 0.0% |
Ransomwhere |
Ransomware | 30,088 | 0 | 0.0% |
Blocklist.de All |
IP Reputation | 27,023 | 0 | 0.0% |
Blocklist.de: all |
IP Blocklists | 27,023 | 0 | 0.0% |
FireHOL: cleantalk_updated_30d.ipset |
IP Blocklists | 26,978 | 17,865 | 66.2% |
CryptoScamDB Reporter |
Cryptocurrency | 23,698 | 22,354 | 94.3% |
ThreatView IP |
IP Blocklists | 22,211 | 7,670 | 34.5% |
FireHOL: firehol_level2.netset |
IP Blocklists | 20,637 | 0 | 0.0% |
Ransomware Abuse Domains |
Ransomware | 20,175 | 19,273 | 95.5% |
Maltrail Malware |
Domains/URLs | 20,052 | 19,882 | 99.2% |
FireHOL: nixspam.ipset |
IP Blocklists | 17,139 | 16,514 | 96.4% |
URLhaus Recent |
Domains/URLs | 15,960 | 0 | 0.0% |
IPsum Level 3 |
IP Blocklists | 15,948 | 0 | 0.0% |
FireHOL: stopforumspam_180d.ipset |
IP Blocklists | 15,358 | 0 | 0.0% |
FireHOL: cleantalk_new_30d.ipset |
IP Blocklists | 15,210 | 0 | 0.0% |
URLhaus Online |
Domains/URLs | 15,021 | 13,914 | 92.6% |
FireHOL: ciarmy.ipset |
IP Blocklists | 15,005 | 0 | 0.0% |
CINSscore Bad Guys |
IP Reputation | 15,000 | 0 | 0.0% |
CI Army |
IP Blocklists | 15,000 | 0 | 0.0% |
FireHOL: firehol_level3.netset |
IP Blocklists | 14,334 | 0 | 0.0% |
FireHOL: iblocklist_ciarmy_malicious.netset |
IP Blocklists | 14,236 | 0 | 0.0% |
ScamSniffer Blacklist |
Cryptocurrency | 14,182 | 13,595 | 95.9% |
FireHOL: stopforumspam_7d.ipset |
IP Blocklists | 13,994 | 0 | 0.0% |
FireHOL: cruzit_web_attacks.ipset |
IP Blocklists | 13,883 | 13,528 | 97.4% |
Blocklist.de: postfix |
IP Blocklists | 12,355 | 0 | 0.0% |
Blocklist.de: mail |
IP Blocklists | 12,355 | 0 | 0.0% |
FireHOL: coinbl_hosts.ipset |
IP Blocklists | 10,433 | 10,218 | 97.9% |
SSL Blacklist (family) |
C2 Certificates | 10,336 | 10,334 | 100.0% |
FireHOL: proxylists_30d.ipset |
IP Blocklists | 9,927 | 0 | 0.0% |
Blocklist.de: ssh |
IP Blocklists | 9,804 | 0 | 0.0% |
Blocklist.de: apache |
IP Blocklists | 9,249 | 0 | 0.0% |
FireHOL: proxylists_7d.ipset |
IP Blocklists | 8,106 | 0 | 0.0% |
MISP Galaxy Ransomware |
Ransomware Actors | 7,861 | 7,331 | 93.3% |
Feodo Aggressive |
IP Blocklists | 7,609 | 7,578 | 99.6% |
FireHOL: et_tor.ipset |
IP Blocklists | 7,595 | 0 | 0.0% |
FireHOL: dm_tor.ipset |
IP Blocklists | 7,582 | 0 | 0.0% |
FireHOL: bitcoin_nodes.ipset |
IP Blocklists | 7,200 | 0 | 0.0% |
MITRE ATT&CK Groups (STIX) |
ATT&CK Actors | 7,103 | 0 | 0.0% |
MITRE ATT&CK Enterprise |
ATT&CK | 7,103 | 0 | 0.0% |
FireHOL: proxyspy_30d.ipset |
IP Blocklists | 6,637 | 0 | 0.0% |
FireHOL: darklist_de.netset |
IP Blocklists | 6,013 | 5,770 | 96.0% |
FireHOL: cleantalk_updated_7d.ipset |
IP Blocklists | 5,986 | 0 | 0.0% |
NVD Recent CVEs |
Vulnerabilities | 5,805 | 0 | 0.0% |
NVD CVE 2.0 API |
Vulnerabilities | 5,805 | 0 | 0.0% |
FireHOL: bm_tor.ipset |
IP Blocklists | 5,753 | 5,178 | 90.0% |
FireHOL: firehol_abusers_1d.netset |
IP Blocklists | 5,145 | 0 | 0.0% |
FireHOL: proxylists_1d.ipset |
IP Blocklists | 5,036 | 0 | 0.0% |
FireHOL: firehol_level1.netset |
IP Blocklists | 4,606 | 0 | 0.0% |
ThreatFox Recent |
Malware Attribution | 4,332 | 0 | 0.0% |
FireHOL: socks_proxy_30d.ipset |
IP Blocklists | 4,151 | 0 | 0.0% |
Spam404 |
Scam | 4,071 | 0 | 0.0% |
FireHOL: stopforumspam_1d.ipset |
IP Blocklists | 4,013 | 0 | 0.0% |
FireHOL: cleantalk_new_7d.ipset |
IP Blocklists | 3,952 | 0 | 0.0% |
FireHOL: botscout_30d.ipset |
IP Blocklists | 3,724 | 0 | 0.0% |
GreenSnow |
IP Reputation | 3,716 | 0 | 0.0% |
FireHOL: greensnow.ipset |
IP Blocklists | 3,704 | 0 | 0.0% |
MalwareBazaar Recent (hash→family) |
Malware Attribution | 3,467 | 0 | 0.0% |
Blocklist.de: bots |
IP Blocklists | 3,124 | 0 | 0.0% |
MISP Galaxy Threat Actors |
Threat Actors | 3,068 | 0 | 0.0% |
Blocklist.de: imap |
IP Blocklists | 2,988 | 0 | 0.0% |
Blocklist.de: pop3 |
IP Blocklists | 2,988 | 0 | 0.0% |
FireHOL: proxyspy_7d.ipset |
IP Blocklists | 2,821 | 0 | 0.0% |
FireHOL: socks_proxy_7d.ipset |
IP Blocklists | 2,709 | 0 | 0.0% |
FireHOL: proxylists.ipset |
IP Blocklists | 2,673 | 0 | 0.0% |
ScamSniffer Addresses |
Cryptocurrency | 2,530 | 0 | 0.0% |
ThreatFox IPs Recent |
APT/IoC | 2,505 | 0 | 0.0% |
FireHOL: sslproxies_30d.ipset |
IP Blocklists | 2,286 | 0 | 0.0% |
CISA Known Exploited Vulns (KEV) |
Vulnerabilities | 2,057 | 0 | 0.0% |
CISA Known Exploited Vulns |
Vulnerabilities | 2,057 | 0 | 0.0% |
Ransomware.live groups |
Ransomware Actors | 2,005 | 0 | 0.0% |
CIRCL (LU) OSINT feed |
CERT Advisories | 1,882 | 0 | 0.0% |
CIRCL OSINT |
APT/IoC | 1,882 | 0 | 0.0% |
OFAC SDN List (CSV) |
Sanctions | 1,856 | 0 | 0.0% |
Binary Defense |
IP Blocklists | 1,844 | 0 | 0.0% |
MITRE ATT&CK Mobile |
Mobile ATT&CK | 1,750 | 0 | 0.0% |
ET FWIP rules |
IP Reputation | 1,692 | 0 | 0.0% |
ET Block IPs |
IP Blocklists | 1,692 | 0 | 0.0% |
Spamhaus DROP |
IP Reputation | 1,682 | 0 | 0.0% |
ThreatView C2 Hunting |
C2 Attribution | 1,673 | 0 | 0.0% |
FireHOL: et_block.netset |
IP Blocklists | 1,595 | 0 | 0.0% |
FireHOL: spamhaus_drop.netset |
IP Blocklists | 1,585 | 0 | 0.0% |
FireHOL: et_spamhaus.netset |
IP Blocklists | 1,571 | 0 | 0.0% |
FireHOL: socks_proxy_1d.ipset |
IP Blocklists | 1,464 | 0 | 0.0% |
FireHOL: myip.ipset |
IP Blocklists | 1,411 | 0 | 0.0% |
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Ingest sources for thin categories
- Prioritize multi-source (high-confidence) IoCs
- Compare complementary feeds