← back to evaluation
Feed status
Are the feeds we compare to actually fresh?
The blind-spot claim depends on the feeds being live. This page shows each feed's last fetch, latest row count (or error), cumulative rows we have, and how many of our lookalikes appear there. If a feed is broken, that's not hidden — it's the first thing on the page.
loading…
Feed sources
Where each feed comes from.
- PhishTank —
online-valid.csv, only currently-online phish. - URLhaus — abuse.ch
urls.txt, malware/phish URL list. - CryptoScamDB —
blacklist.json, crypto-specific scams. - OpenPhish — public feed (community-curated).
- ThreatFox — abuse.ch CSV (IOC dump).
- Phishing.Database — mitchellkrogza
ALL-phishing-domains.txt(huge, includes historical). - MetaMask eth-phishing-detect — actively-curated crypto-phishing list (MIT, GitHub).
- Phishing Army — aggregated phishing list, attribution required.
- abuse.ch MalwareBazaar — recent malware sample drops (CC0).
- abuse.ch Feodo Tracker — botnet C2 IPs (CC0).
- abuse.ch SSLBL — malicious TLS cert SHA1 fingerprints (CC0).
live coverage / freshness for each feed in the cards above; a feed returning 0 rows on the latest fetch is marked broken.