Threat-intelligence feed
Malicious DomainsLast verified Page fetched
CERT.pl Domains is a malicious domains threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for CERT.pl Domains.
CERT.pl Domains is the public malicious-domains feed published by Poland's national CERT (CERT Polska / NASK). It is built from CERT.pl's incident-response work, sandbox runs, and partnerships with European CSIRTs; entries cover phishing pages, exploit-kit landing pages, malware distribution sites, and credential-harvest infrastructure observed targeting Polish and EU users. Inclusion criteria are stricter than open community feeds because every domain passes through CERT.pl analyst review before publication; this gives the feed a reputation for low false-positive rates at the cost of slightly lower coverage volume. It is indexed here as a national-CERT record.
Live data unavailable. WhisperGraph returned an error (WhisperGraph 524) while looking up this FEED_SOURCE node. The editorial content above is authoritative; the live-data check will retry on the next page revalidation.
Indicators: Computing — check back later. The precompute pipeline is building this feed's indicator sample from the host corpus and will populate the count and representative addresses on an upcoming run.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "CERT.pl Domains"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "CERT.pl Domains"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from CERT.pl Domains into adjacent entities.