A continuously updated feed of C2 infrastructure indicators — IPs, domains, and certificates fingerprinted from known command-and-control frameworks, enriched with passive DNS, TLS, and reputation data.
Published in MISP feed format for direct import into MISP instances, plus a plain JSON/CSV export for everything else.
Feed is not live yet — this page will link directly to the published feed once Voyager is producing verified output.
Follow progress or contribute on GitHub.