1. Home
  2. Live Cyber Threat Feed
Live · USOM and abuse.ch data

Threats targeting Türkiye, right now.

Follow the malicious links published by Türkiye's Cyber Security Directorate (USOM) and malware servers around the world on one live screen.

499,041Malicious addresses on the USOM list
+71Added to USOM in the last 24 h
0Global malware URLs · 24 h
—Last update

Threat map

Last 24 hours

Locations are approximate and based on the IP registration of the server hosting the malicious address. Sites behind a CDN may appear in the CDN's country.

Live feed

  1. parinbugarantiakbankananinami[.]xyz Phishing
  2. tarlamagirmek[.]com Phishing
  3. eavukatdava[.]com Phishing
  4. takipkamu[.]org Phishing
  5. hizligecisyuklemniz[.]web[.]app Financial Phishing
  6. hgsgecisbakyniz[.]web[.]app Financial Phishing
  7. 5353523424[.]xyz Phishing
  8. hzli-bakye[.]art Phishing
  9. ilkevtoplu[.]com Phishing
  10. facebook--login-inactive[.]ph Financial Phishing
  11. facebook-login-check-meta[.]ph Financial Phishing
  12. facebook-login-berlin-us[.]ph Financial Phishing

Addresses are defanged and not clickable.

USOM categories · last 7 days

  • Phishing812
  • Financial Phishing229
  • Malware Distribution Domain90
  • Malware Command Center46
  • Cyber Attack (Port Scan, Brute Force etc.)22
  • Malware Distribution IP17

Most impersonated · last 7 days

Facebook 79Garanti BBVA 35sahibinden 17Enpara 14e-Devlet 10PTT 9İade / ödeme 6Kampanya / çekiliş 6TEB 6Ziraat Bankası 4

Extracted automatically from malicious domain names.

Countries hosting malicious servers · last 7 days

    Added to the USOM list per day · last 30 days

    Check a link

    Paste a link you are suspicious of and we will check whether it is on the USOM malicious link list.

    Blocklists

    The complete USOM list as plain text, ready to add to firewalls and DNS filters. Updated automatically.

    Quick reminder
    • Banks and public institutions never ask for passwords or card details via SMS.
    • Check the address before clicking links in parcel, fine, refund or prize messages.
    • Report suspicious addresses to USOM, or block them company-wide with DNS filtering.

    Let's add this list to your company firewall.

    We integrate USOM and other threat intelligence feeds into your firewall and DNS filtering automatically, so your staff never reach these addresses.

    Get a quote →

    Data sources: Türkiye Cyber Security Directorate (USOM) malicious links API · abuse.ch URLhaus (CC0) · IP location: regional internet registries (RDAP).

    Newsletter

    Hear about critical vulnerabilities first.

    Get our security advisories, practical guides and announcements by email. A few emails a month, no advertising.

    Which topics would you like to hear about?