01 · URLS↗
Phishing & malicious URLs
Ranked web indicators collected from public threat feeds.
100 indicatorsPUBLIC REVIEW FEEDS
Useful signals.
With their context.
Browse the Malicious Top 100 indicator snapshot from the feeds-dl archive. Review source, confidence, score, and threat context, or download plain TXT and structured JSON.
Explore downloadsArchived snapshot — not a live feed
This dataset was generated loading…. It may be stale. Verify indicators with current telemetry and the listed publishers before making a blocking or incident-response decision. Publisher terms apply to the underlying data.
FREE FEED LIBRARY
Choose a feed to review or download.
Each category includes a reviewable JSON file with provenance and a line-oriented TXT file for easy inspection.
02 · IPV4⌁
Suspicious IPv4 addresses
Public IPv4 indicators with overlap, confidence, and source context.
100 indicators03 · SHA-256◉
Malware file hashes
SHA-256 hashes from public malware intelligence sources.
100 indicatorsAll three categoriesOne JSON bundle with metadata, methodology, source links, and 300 ranked indicators.
Download complete JSON ↓FULL FEED · FEEDS-DL
Full Unique IP Feed
Explore the complete validated IPv4 and IPv6 snapshot, with JSON context and a clean TXT export.
126,492 unique IP records · 123,515 IPv4 + 2,977 IPv6 · snapshot through October 5, 2026REVIEW THE SNAPSHOT
Inspect the indicator context.
Indicators are displayed as plain text and are not linked or fetched by this page. Confidence and rank summarize the archived source data; they are not proof of malicious activity.
| Rank | Indicator | Score | Sources | Threat / reason |
|---|---|---|---|---|
| Loading archived feed… | ||||
Loading indicators…
SOURCE PROVENANCE
Know where the signal came from.
Ranking is a composite of publisher weight, feed confidence, overlap across sources, recency metadata when available, and source-feed position. Scores help prioritize review; they do not mean a publisher independently confirmed every indicator.
Loading source list…
Use with care. These indicators are supplied for defensive review and enrichment. Listings can be stale, misclassified, or affected by shared infrastructure. Confirm context before blocking. Check each publisher’s current license and terms before redistributing source data.
Back to Castle SecTel products ↗