MalShare

Extra Credit builds an outline of MalShare's docs the first time your work uses it. Until then, start at the official documentation.

• AbuseIPDB IP/domain/URL reputation
• AlienVault Open Threat Exchange (OTX) IP/domain/URL reputation
• CAPEsandbox Malware execution and analysis
• Google Safe Browsing Google Link/Domain Flagging
• IPWhois.net Blacklist Community IP blacklist to check and report abusive IP addresses
• MalDatabase Provide malware datasets and threat intelligence feeds
• Malwagon Detonates files and URLs in instrumented VMs and returns behaviour, IOCs and ATT&CK
• MalwareBazaar Collect and share malware samples
• NoPhishy Check links to see if they're known phishing attempts
• Phisherman IP/domain/URL reputation
• Scanii Simple REST API that can scan submitted documents/files for the presence of threats
• ScanMalware Scan URLs in a sandboxed browser and search past scans by domain, IP, ASN, JARM or favicon hash