URLhaus Malware URLs Scraper

Feodo Malware Ips Scraper

benthepythondev/feodo-malware-ips-scraper

Collect abuse.ch Feodo Tracker records and export status, country, port, as name, malware, as number as structured JSON, CSV or Excel data.

IoC Enrichment API

crawland/ioc-enrichment-api

Enrich URLs, domains, IPs, and hashes with threat intelligence, related references, malware associations, adversary links, attack techniques, targeted regions, and affected industries.

Domain Reputation Checker API

dev00/domain-reputation-checker-api

Assess the reputation of a domain using OSINT and SIGINT signals from Spamhaus threat intelligence, showing threat score, dimensions, whois data and abuse tags.

Threat Actor Username Search API

dev00/threat-actor-username-search-api

Search 2M+ threat actor handles across dark web forums, cybercrime sites, and underground markets. Instantly map adversary footprints for OSINT & SOC threat intelligence.

Neuromorphic Threat Intelligence MCP Server

ryanclinton/neuromorphic-threat-intelligence-mcp

MCP intelligence server for neuromorphic threat intelligence detection and analysis.

urlscan.io Threat Intelligence Scraper

parseforge/urlscan-scraper

Scrapes urlscan.io scan results matching a Lucene query. Returns each scan as a flat row with URL, page title, IP, ASN, country, server, and threat tags.

Comprehensive brand reputation threat intelligence engine that runs 8 sub-actors in parallel and applies four proprietary scoring models — Brand Threat Assessment, Domain Impersonation Detection, Review Authenticity Analysis, and Narrative Drift Tracking — to produce a DEFCON-rated threat report...

Google Safe Browsing & Transparency Report Threat Audit API

dev00/google-safe-browsing-checker

Check domain and URL security against Google Transparency Report Safe Browsing database for Malware, Unwanted Software, Phishing, and Harmful Apps. No API Key required.

Domain Security Scanner

trovevault/domain-security-scanner

Scan domains for malware, phishing, crypto scams, botnet C2, blacklist signals, HTTPS weaknesses, and reputation issues across multiple threat-intelligence sources. Returns verdicts, a security score, positive signals, and explicit source coverage. Optional API keys unlock account-only providers.

Threat Intel IOC Feed Aggregator

jungle_synthesizer/threat-intel-ioc-feed-aggregator-scraper

Normalizes and dedupes six free IOC feeds (URLhaus, Feodo Tracker, ThreatFox, MalwareBazaar, OpenPhish, PhishTank) into one schema with cross-feed corroboration counts. Delta mode returns only newly-seen indicators since your last run. Passive: reads published feeds only, never touches listed IOCs.