Data Sources

We aggregate data from 41+ external sources to provide comprehensive internet intelligence. All sources are listed below.

Domain Rankings

Majestic Million

Top 1 million domains worldwide ranked by backlink profile strength.

Tranco Top List

Research-grade domain ranking aggregating multiple popularity lists to resist manipulation.

Cisco Umbrella

Top 1 million domains by DNS query volume from OpenDNS resolvers.

Chrome UX Report

Real-world Chrome user experience data with bucketed popularity ranks for ~1M domains.

Cloudflare Radar Domains

Domain popularity rankings derived from Cloudflare's global DNS resolver traffic.

Browser Security & Hardware

HSTS Preload List

Chromium's built-in list of domains that enforce HTTPS-only connections in browsers.

IEEE OUI Database

MAC address vendor lookup from the IEEE Organizationally Unique Identifier registry.

DNS & Domain Blocklists

HaGeZi DNS Blocklists

Curated DNS blocklists for ad blocking, tracking protection, and malware prevention.

Blackbook

Malware and botnet domain blocklist maintained by community threat hunters.

StevenBlack Hosts

Unified hosts file combining several curated sources to block ads, malware, and trackers.

Phishing Database

Community-maintained database of active phishing domains and URLs.

Disposable Email Domains

List of domains used by temporary/disposable email services for spam prevention.

Threat Intelligence

IPsum

Daily threat intelligence feed aggregating 520K+ malicious IP addresses with confidence scores.

FireHOL IP Lists

85+ IP blocklists aggregated from security researchers for firewall and threat analysis.

Tor Exit Nodes

Live list of Tor network exit relay IP addresses from the Tor Project directory.

VPN & Datacenter IPs

IP ranges associated with VPN providers and datacenter hosting, used for bot detection.

C2 Tracker

Tracks active command-and-control (C2) infrastructure used by malware families.

Maltrail

Malicious traffic detection system with curated lists of suspicious IPs, domains, and URLs.

AbuseIPDB

Community-reported abusive IP database with confidence scores from 0-100.

OFAC Sanctions

US Treasury OFAC-sanctioned cryptocurrency addresses linked to designated entities.

Bad ASN List

ASNs associated with bulletproof hosting, botnets, and known-bad infrastructure.

Risk-DB

ASN and network categorization for hosting, VPN, proxy, and residential networks.

CIRCL BGP Ranking

Security ranking for ~80K ASNs based on malicious activity observed in BGP announcements.

Google Safe Browsing

Google's malware, phishing, and unwanted software URL hash database.

ASN & Network Metadata

ASN Info Database

Comprehensive AS number metadata including organization names, countries, and RIR info.

GeoIP Database

IP geolocation mapping IPs to countries, cities, and coordinates.

iptoasn.com

Open IP-to-ASN mapping database compiled from BGP routing tables.

AS WHOIS Data

WHOIS registration data for Autonomous Systems from Regional Internet Registries.

BGP & Routing Data

RouteViews RIB

Full BGP routing table snapshots from the University of Oregon RouteViews project.

RIR Delegated Statistics

IP address and ASN allocation data from all five Regional Internet Registries.

BGP.Tools

Community-maintained BGP analysis tools with AS metadata and looking glass.

CAIDA AS Relationships

Inferred AS-level business relationships (customer-provider, peer-peer) from CAIDA.

IRR Route Objects

Route objects from Internet Routing Registries (RADB + all 5 RIRs) for prefix validation.

RIPE RIS

BGP routing data collected from RIPE NCC's Routing Information Service collectors worldwide.

Cloudflare Intelligence

Cloudflare Intelligence

IP ranges, BGP routing intelligence, and AS-level traffic insights from Cloudflare's global network.

Cryptocurrency

Ransomwhere

Database of 11K+ Bitcoin addresses linked to 136+ ransomware families with payment amounts.

RIPE Database

RIPE Database

RIPE NCC WHOIS objects for European IP allocations, AS numbers, and contact records.

Live Runtime Lookups

DNS Root Servers

Live recursive DNS resolution starting from the 13 root server clusters.

WHOIS (RADB)

Live WHOIS queries to RADB and authoritative registries for IP and ASN ownership.

Tranco API

Real-time domain rank lookups via the Tranco research API.

SMTP/MX Verification

Live mail server verification by connecting to MX records and checking SMTP responses.