Data sources & methodology

Every technical signal in AlertaSpam retains its source, date, and license. This page lists integrated or planned sources.

AlertaSpam community reports

Reports submitted by users, published only after human moderation.

ThreatFox (abuse.ch)

Malware-related indicators of compromise. Not currently enabled in this deployment.

URLhaus (abuse.ch)

URLs distributing malware. Not currently enabled in this deployment.

Phishing.Database

Community-maintained phishing domain/URL lists. Not currently enabled in this deployment.

Destroylist

Community-maintained phishing indicators. Not currently enabled in this deployment.

disposable-email-domains

Known disposable email domain list — a functional signal, not a fraud signal.

See also our scoring methodology. Methodology