Available Feeds
Threat categories
We cover the most targeted sectors in France:
Pricing
Choose your protection level
Premium
For SOCs, MSSPs, and financial institutions
Custom
16,680
Total domains monitored
6
Sectors covered
30
Targeted entities tracked
- Custom domains per client
- Expanded telemetry
- Dedicated API keys
- Priority ingestion
- Signed data delivery (HTTPS, S3, SFTP)
- Historical data access
- Dedicated onboarding and success support
Integration
How to use the community feeds
# Download the governments feed
curl https://api.phishbud.com/v1/feeds/community/government
# Auto-update with cron (daily)
0 9 * * * curl -s https://api.phishbud.com/v1/feeds/community/banking | jq '.entries[].domain' > /etc/blocklists/banking.txt
| Sector | Examples |
|---|---|
| Government | 2023-amende-gouv.com, ameli-assurance.fr, impots-gouv-auth.com |
| Banking | acces-cr.fr, account-sgsecur.fr, 01labanquepostale.fr |
| Utilities | chronopost-suivi-envoi.fr, edf-client.com, laposte-acheminement.fr |
FAQ
More about PhishBud
What threat feeds are, how to use them, and why it's built for you.
What is a threat feed?▼
A threat feed is a data stream of threat indicators, such as phishing domain names detected and verified by our team. Each feed is organized by sector (government, banking, etc.) and ready to integrate into your firewalls, SIEM, or DNS blocking rules.
How does this data help prevent phishing?▼
By importing our feeds into your security tools, you automatically block access to malicious domains before your users even click. It's passive but highly effective prevention: the domain is identified, listed, and neutralized before it reaches your network.
What makes this data actionable?▼
Every domain is delivered in a simple pipe-delimited plain text format, compatible with virtually every solution on the market. No complex parsing or unnecessary dependencies. Just download, integrate, and block.
Who is behind PhishBud?▼
The French threat intelligence market is dominated by expensive, generic international solutions rarely adapted to local specifics.
PhishBud was born from this observation:
a project run by French cybersecurity experts, specialized in detecting phishing campaigns targeting French organizations.
What's the difference between the free and premium versions?▼
The community version is free, limited to 100 entries per feed, and updated daily. The premium version removes all limits, adds full feeds with enriched telemetry, hourly updates, dedicated API access with authentication keys, and historical data. Ideal for SOCs, MSSPs, and large organizations.
Contact
Let's talk about your needs
A question, a specific need, or a project? Reach out.
contact@phishbud.com