Published Feeds
—
| Feed | Format | Endpoint | |
|---|
| Indicator bundle | STIX 2.1 | /feeds/stix
| Open ↗ |
| Blocklist — IPs | plaintext | /feeds/ips.txt
| Open ↗ |
| Blocklist — hashes | plaintext | /feeds/hashes.txt
| Open ↗ |
| Malware URLs | plaintext | /feeds/urls.txt
| Open ↗ |
| Feed metadata | JSON | /feeds/metadata
| Open ↗ |
# consume from a firewall / SIEM
curl -s https://api.shucayb.com/feeds/ips.txt # block at the edge
curl -s https://api.shucayb.com/feeds/hashes.txt # EDR hash blocklist
curl -s https://api.shucayb.com/feeds/urls.txt # malware hosting URLs — proxy/DNS blocklist
curl -s https://api.shucayb.com/feeds/stix # STIX 2.1 — import into MISP / OpenCTI / Microsoft Sentinel (TAXII-less pull)