Blacklist Intelligence

Defend your organization from known threats

What is Blacklist Intelligence?

RiskIQ ingests and analyzes terabytes of data and content daily to provide curated information to our customers. We aggregate blacklist feeds from internet service providers, phishing solutions, fraud prevention, and other internet security organizations to consolidate and further enrich our own, proprietary blacklists.

Our blacklist intelligence is built off of this ingestion and analysis delivering curated lists of known bad URLs, Domains, and IP addresses associated with malware, phishing, and scam events.

Additionally, our content blacklists offer customers an easy way to block employees from visiting undesirable sites on the internet.

Malware Feed

Malware feeds are provided by a number of internet security organizations and internet service providers that detail URLs and sites that host malicious files. Sometimes the sites that are included in these feeds are not something that a typical user would stumble on to while browsing the internet, but rather websites which are part of malicious redirection chains in compromised websites or advertisements.

Phishing Feed

Phishing feeds are provided by various email providers, internet security organizations, and internet services providers that have confirmed URLs to be hosting sites meant to steal user credentials. While RiskIQ gathers and confirms phishing pages in our crawls of the internet, additional phishing feeds ensure greater coverage for customers. RiskIQ also provides our confirmed phish URLs to Google Safe Browsing and Microsoft SmartScreen to help block phish from impacting other internet users.

Scam Feed

Scam feeds are provided by a number of internet security organizations and internet service providers that detail URLs and sites that target unsuspecting individuals via fake software, tech support, banking, and scareware campaigns. These sites are usually low level criminal campaigns that seek to take advantage of unsuspecting internet users for financial gain.

How Can it Help?

RiskIQ’s blacklist intelligence allow customers to harness our globally distributed crawling capability and internet scale visibility to defend their enterprises from emerging threats. Our consolidated blacklist data enables customers to easily ingest RiskIQ intelligence into existing security products to proactively block threats as we detect them on the internet.

How to Use It:

  • Proactive blocking of URLs, Domains, and IP addresses
  • Content filtering