Sophisticated structuring

This is what intelligence is made of

Sixgill structures collected data through identifying key items such as threat actor, date, language, site, post type, and post language. It extracts entities such as email addresses, bitcoin wallets and credit card numbers. 

Through this, data is transformed into information that can now be understood, sorted, filtered and searched. 

Seamless integration

Supercharge your SIEM, TIP, SOAR or VM systems

Darkfeed Content


Compromised sites to which access is sold on the dark web

Suspicious domains that are for sale on the dark web


Links to malware files hosted on underground file-sharing sites


Malware hashes 

Hashes of malware claimed to be undetected

IP addresses

Command-and-control server IP addresses for most prevalent malware

Command-and-control server IP addresses for servers involved in botnets, DDoS attacks, and proxy anonymization

Darkfeed integrates with your TIP, SIEM, SOAR or vulnerability management solution and supplies you with malicious indicators of compromise, including domains, URLs, hashes, and IP addresses.