[MALICIOUS URLS][PHISHING URLS]

Below is a list of threat intelligence websites that you can use. Cymon.io is an excellent one as it searches around 200 different sources. If you’re looking for a more exhaustive list of threat intel sites, check out https://github.com/rshipp/awesome-malware-analysis

IP and Domain Reputation / Malicious Activity Reports

http://cymon.io

https://www.recordedfuture.com/live/

http://urlquery.net/ (URL Scanner)

https://virustotal.com/

https://otx.alienvault.com/

https://exchange.xforce.ibmcloud.com/

IP Information (open ports, details, WHOIS, etc)

https://www.censys.io

https://www.shodan.io/

https://centralops.net/co/

http://viewdns.info/

https://www.threatcrowd.org

Malware Analysis

https://malwr.com/

https://www.hybrid-analysis.com/

Misc

https://isc.sans.edu/services.html (Port information)

Malware / Malicious Site Samples:

https://malwr.com/

http://vxvault.net/ViriList.php

http://cybercrime-tracker.net/

https://ransomwaretracker.abuse.ch/tracker/

http://malc0de.com/database/



OSINT Framework