About the feed
- What
- Scans someone made public. A scan is private until its owner shares it.
- Verdict
- The engines' verdict at scan time. “Reviewed” means an analyst has looked at it since.
- Tags
- A detection family, or a tag the submitter wrote. Each one filters this feed.
In aggregate
The families, the impersonated brands, the staging hosts and the commands caught this week, each linked to its scan.
This week on the Threat Landscape →Pivot
Every report lists its fingerprints: the favicon, the script hashes, the certificate, the JARM. Any one of them finds the other public scans that share it.
Fingerprint search →