About
ThreatFox is a project operated by abuse.ch and Spamhaus. The purpose of the project is to collect and share indicators of compromise (IOCs), helping IT-security researchers and threat analysts protect their constituency and customers from cyber threats.
If you are a vendor and you would like to use data provided by ThreatFox, please have a quick look at the Terms of Services (ToS).
Partnering with Spamhaus
Like abuse.ch, Spamhaus has a mission to strengthen trust and safety on the Internet, operating as an independent organization for over twenty years. This shared vision forms the foundation of our partnership, working together to provide the largest, independently crowdsourced intelligence of tracked malware and botnets.
Spamhaus is recognized as the trusted authority on IP and domain reputation. Globally, they protect 4.5 billion mailboxes and help secure networks against 11.7 million indicators of compromise (IOCs). Together, we build and maintain platforms and datasets to make the internet safer.
Users
The following tools, products and services are using ThreatFox:
Technology
ThreatFox uses the following tools and services:
- Fastly as Content Delivery Network (CDN)
- Google Compute Engine for virtual machines
- Ubuntu as prefered server OS
- Apache as prefered webserver
- Python as prefered scripting language
- PHP as prefered web scripting language
- Google Charts for generating statistics and charts
- Chart.js for generating statistics and charts
- Bootstrap for web design
- Font Awesome icons
- jQuery JavaScript library
- Bootstrap Tags Input for malware sample tagging (web)
- Bootstrap-select for form select
- clipboard.js for web copy&paste functionality
- FAMFAMFAM flags
- Twitter OAuth for authentication