PUBLIC REVIEW FEEDS

Useful signals.
With their context.

Browse the Malicious Top 100 indicator feed from feeds-dl. Review source, confidence, score, and threat context, or download plain TXT and structured JSON.

Explore downloads

FREE FEED LIBRARY

Choose a feed to review or download.

Each category includes a reviewable JSON file with provenance and a line-oriented TXT file for easy inspection.

All three categoriesOne JSON bundle with metadata, methodology, source links, and 300 ranked indicators.
Download complete JSON ↓

REVIEW THE FEED

Inspect the indicator context.

Indicators are displayed as plain text and are not linked or fetched by this page. Confidence and rank summarize available source data; they are not proof of malicious activity.

RankIndicatorScoreSourcesThreat / reason
Loading indicators…

Loading indicators…

SOURCE PROVENANCE

Know where the signal came from.

Ranking is a composite of publisher weight, feed confidence, overlap across sources, recency metadata when available, and source-feed position. Scores help prioritize review; they do not mean a publisher independently confirmed every indicator.

Loading source list…

Use with care. These indicators are supplied for defensive review and enrichment. Shared infrastructure can appear in multiple threat lists. Confirm context before blocking. Check each publisher’s current license and terms before redistributing source data.

Back to Castle Cyber Security Intelligence Feeds products ↗