urlhaus

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Don't Just Search OSINT. Sweep It.

Gather Open-Source Intelligence using PowerShell.

A collection of OSINT websites and tools to aid penetration testers with their info gathering tasks

urlhaus api client

MCP server for URLhaus (abuse.ch) — look up malicious URLs, payloads, and host/signature threat intelligence.

A collection of PowerShell scripts to utilize 3rd party APIs and research IPs, URLs, and Domains

Automated Cyber Threat Intelligence pipeline that collects IOCs from AlienVault OTX, AbuseIPDB & URLhaus, correlates them against Splunk logs, and visualizes active threats on a real-time dark-themed dashboard.

Security-focused URL analysis service built with FastAPI, PostgreSQL, URLhaus, Docker, and automated tests.

CLI tool to search in URLhaus database and submit URLs

The National Cyber Threat Intelligence Hub collects, processes, and visualizes cyber threat data in real time.

Multi-source threat intelligence and IOC investigation platform with evidence normalization, explainable risk scoring, analyst assessments, batch enrichment, and JSON/HTML reporting.

Instant, privacy-first IOC triage for SOC analysts. Copy or scan an IP, domain, URL or hash and get one explainable verdict from VirusTotal, AbuseIPDB, OTX & URLhaus. Privacy Guard keeps internal indicators on-device. Windows, macOS, Linux, Android, iOS. Kotlin Multiplatform.

Open-source Linux antivirus and threat intelligence platform powered by OTX, VirusTotal, MalwareBazaar, URLHaus and YARA.

Phishing Email & URL Analyzer — Python tool that checks URLs and emails for phishing indicators, scores them 0-100, and generates professional HTML reports with detailed findings.

Python mini-SOAR that triages a SOC alert/IOC by enriching it via VirusTotal + AbuseIPDB, scoring the risk, and generating a triage report.

Check URLs against malware databases — URLhaus, VirusTotal, Safe Browsing. Python scripts, no API key needed.

Get a report from common antivirus providers and blocklists

Real-time cyber risk assessment tool that fuses AbuseIPDB, VirusTotal, AlienVault OTX & URLhaus threat feeds and scores IOC risk on a live dashboard.