URL / Domain Profile

🌐 URL / Domain Profile

Local-first: threat & category, stored DNS, WHOIS, subdomains, related IPs, tags, reporting sources, entity-link graph & analytics — all from the local DB. Live OTX/DoH augment when reachable.

⚠ aS895 was not recognised as a domain or URL (detected type: asn). Enter a bare domain or an http(s) URL.

📊 Domain vs URL indicators

domain
1.3K
url
136.8K

📁 Categories (domains/URLs)

33.8K
6.9K

🌐 Domains & URLs in local intel (120)

Domain / URLTypeCategoryTagsSourcesSightingsThreatLast seen
http://iplists.firehol.org/ URL IP Blocklists auto-tagged, medium-severity, url 15 38 2026-08-06
http://www.projecthoneypot.org/ URL IP Blocklists auto-tagged, medium-severity, url 16 28 2026-08-06
http://www.projecthoneypot.org/?rf=192670) URL IP Blocklists auto-tagged, medium-severity, url 16 28 2026-08-06
http://osint.bambenekconsulting.com/feeds/ URL IP Blocklists auto-tagged, medium-severity, url 14 25 2026-08-06
http://osint.bambenekconsulting.com/feeds/) URL IP Blocklists auto-tagged, medium-severity, url 14 25 2026-08-06
http://urandom.us.to/ URL IP Blocklists auto-tagged, medium-severity, url 12 23 2026-08-06
http://www.stopforumspam.com/ URL IP Blocklists auto-tagged, medium-severity, url 8 18 2026-08-06
http://www.stopforumspam.com) URL IP Blocklists auto-tagged, medium-severity, url 8 18 2026-08-06
http://free-proxy-list.net/ URL IP Blocklists auto-tagged, medium-severity, url 8 15 2026-08-06
http://www.emergingthreats.net/ URL IP Blocklists auto-tagged, medium-severity, url 6 12 2026-08-06
https://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/ URL ATT&CK auto-tagged, medium-severity, url 6 11 2026-08-06
https://feeds.dshield.org/block.txt URL IP Blocklists auto-tagged, medium-severity, url 6 11 2026-08-06
https://cleantalk.org/ URL IP Blocklists auto-tagged, medium-severity, url 7 11 2026-08-06
https://cleantalk.org/) URL IP Blocklists auto-tagged, medium-severity, url 7 11 2026-08-06
https://attack.mitre.org/techniques/T1106)s  URL ATT&CK auto-tagged, medium-severity, url 3 10 2026-08-06
https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf URL ATT&CK auto-tagged, medium-severity, url 6 10 2026-08-06
https://attack.mitre.org/groups/G0034 URL ATT&CK auto-tagged, medium-severity, url 6 10 2026-08-06
https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf URL ATT&CK auto-tagged, medium-severity, url 6 10 2026-08-06
https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide URL ATT&CK auto-tagged, medium-severity, url 6 10 2026-08-06
https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html URL ATT&CK auto-tagged, medium-severity, url 6 10 2026-08-06
https://threatfox.abuse.ch/faq/#tos URL Malware Attribution auto-tagged, medium-severity, url 6 10 2026-08-06
https://dshield.org/ URL IP Blocklists auto-tagged, medium-severity, url 5 10 2026-08-06
https://dshield.org/) URL IP Blocklists auto-tagged, medium-severity, url 5 10 2026-08-06
https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://blog.talosintelligence.com/2019/04/sodinokibi-ransomware-exploits-weblogic.html URL ATT&CK auto-tagged, medium-severity, url 6 9 2026-08-06
https://www.fireeye.com/blog/threat-research/2017/09/zero-day-used-to-distribute-finspy.html URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://unit42.paloaltonetworks.com/oilrig-novel-c2-channel-steganography/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.us-cert.gov/ncas/alerts/TA17-318B URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://cloud.google.com/blog/topics/threat-intelligence/ivanti-post-exploitation-lateral-movement URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/luckymouse-hits-national-data-center/86083/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://unit42.paloaltonetworks.com/hamas-affiliate-ashen-lepus-uses-new-malware-suite-ashtag/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://lab52.io/blog/wirte-group-attacking-the-middle-east/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.crowdstrike.com/blog/big-game-hunting-with-ryuk-another-lucrative-targeted-ransomware/ URL ATT&CK auto-tagged, medium-severity, url 6 9 2026-08-06
https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/blackoasis-apt-and-new-targeted-attacks-leveraging-zero-day-exploit/82732/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://attack.mitre.org/groups/G1004) URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/the-silence/83009/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://go.recordedfuture.com/hubfs/reports/cta-2023-0808.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/a/earth-lusca-employs-sophisticated-infrastructure-varied-tools-and-techniques/technical-brief-delving-deep-an-analysis-of-earth-lusca-operations.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.secureworks.com/blog/revil-the-gandcrab-connection URL ATT&CK auto-tagged, medium-severity, url 6 9 2026-08-06
https://www.secureworks.com/research/revil-sodinokibi-ransomware URL ATT&CK auto-tagged, medium-severity, url 6 9 2026-08-06
https://media.defense.gov/2020/Aug/13/2002476465/-1/-1/0/CSA_DROVORUB_RUSSIAN_GRU_MALWARE_AUG_2020.PDF URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.microsoft.com/security/blog/2020/09/10/strontium-detecting-new-patters-credential-harvesting/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://researchcenter.paloaltonetworks.com/2018/06/unit42-sofacy-groups-parallel-attacks/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/sofacy-apt-hits-high-profile-targets-with-updated-toolset/72924/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/a-slice-of-2017-sofacy-activity/83930/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.microsoft.com/en-us/security/blog/2023/12/07/star-blizzard-increases-sophistication-and-evasion-in-ongoing-attacks/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://info.lookout.com/rs/051-ESQ-475/images/Lookout_Dark-Caracal_srr_20180118_us_v.1.0.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://foxitsecurity.files.wordpress.com/2016/06/fox-it_mofang_threatreport_tlp-white.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.welivesecurity.com/en/eset-research/moustachedbouncer-espionage-against-foreign-diplomats-in-belarus/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.symantec.com/blogs/threat-intelligence/orangeworm-targets-healthcare-us-europe-asia URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.volexity.com/blog/2021/08/17/north-korean-apt-inkysquid-infects-victims-using-browser-exploits/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.symantec.com/blogs/threat-intelligence/seedworm-espionage-group URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.fireeye.com/blog/threat-research/2018/03/iranian-threat-group-updates-ttps-in-spear-phishing-campaign.html URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.trendmicro.com/en_us/research/21/c/earth-vetala---muddywater-continues-to-target-organizations-in-t.html URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.proofpoint.com/us/blog/threat-insight/around-world-90-days-state-sponsored-actors-try-clickfix URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.clearskysec.com/wp-content/uploads/2018/11/MuddyWater-Operations-in-Lebanon-and-Oman.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.fireeye.com/blog/threat-research/2018/09/apt10-targeting-japanese-corporations-using-updated-ttps.html URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://attack.mitre.org/groups/G0096 URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.forcepoint.com/sites/default/files/resources/files/forcepoint-security-labs-monsoon-analysis-report.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.volexity.com/blog/2018/06/07/patchwork-apt-group-targets-us-think-tanks/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://documents.trendmicro.com/assets/tech-brief-untangling-the-patchwork-cyberespionage-group.pdf URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/the-dropping-elephant-actor/75328/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://unit42.paloaltonetworks.com/updated-backconfig-malware-targeting-government-and-military-organizations/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://securelist.com/the-kimsuky-operation-a-north-korean-apt/57915/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.cybereason.com/blog/back-to-the-future-inside-the-kimsuky-kgh-spyware-suite URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://us-cert.cisa.gov/ncas/alerts/aa20-301a URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.secureworks.com/research/threat-profiles/gold-prelude URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.microsoft.com/en-us/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself/ URL ATT&CK auto-tagged, medium-severity, url 6 9 2026-08-06
https://blogs.technet.microsoft.com/mmpc/2016/12/14/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2021GTR.pdf URL ATT&CK auto-tagged, medium-severity, url 6 9 2026-08-06
https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.mandiant.com/resources/blog/investigating-ivanti-zero-day-exploitation URL ATT&CK auto-tagged, medium-severity, url 5 9 2026-08-06
https://www.torproject.org/ URL IP Blocklists auto-tagged, medium-severity, url 5 9 2026-08-06
http://purl.org/dc/elements/1.1/ URL CERT Advisories auto-tagged, medium-severity, url 5 8 2026-08-06
http://www.botvrij.eu URL Domains/URLs auto-tagged, medium-severity, url 4 8 2026-08-06
https://www.crowdstrike.com/blog/double-trouble-ransomware-data-leak-extortion-part-1/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://attack.mitre.org/software/S0029) URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://dragos.com/blog/crashoverride/CrashOverride-01.pdf URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.fireeye.com/blog/threat-research/2021/05/shining-a-light-on-darkside-ransomware-operations.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.microsoft.com/en-us/security/blog/2022/10/27/raspberry-robin-worm-part-of-larger-ecosystem-facilitating-pre-ransomware-activity/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://objective-see.com/blog/blog_0x25.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.brighttalk.com/webcast/10703/275683 URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.secureworks.com/blog/lyceum-takes-center-stage-in-middle-east-campaign URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://vblocalhost.com/uploads/VB2021-Kayal-etal.pdf URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.clearskysec.com/siamesekitten/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://attack.mitre.org/software/S0266) URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.fireeye.com/blog/threat-research/2020/10/kegtap-and-singlemalt-with-a-ransomware-chaser.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.fireeye.com/blog/threat-research/2019/01/a-nasty-trick-from-credential-theft-malware-to-business-disruption.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.us-cert.gov/ncas/alerts/TA17-164A URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://attack.mitre.org/groups/G0032 URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://pan-unit42.github.io/playbook_viewer/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.secureworks.com/research/threat-profiles/cobalt-gypsy URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.fireeye.com/blog/threat-research/2017/12/targeted-attack-in-middle-east-by-apt34.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.proofpoint.com/us/corporate-blog/post/iranian-state-sponsored-and-aligned-attacks-what-you-need-know-and-steps-protect URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-november-helix-kitten/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
http://researchcenter.paloaltonetworks.com/2016/05/the-oilrig-campaign-attacks-on-saudi-arabian-organizations-deliver-helminth-backdoor/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.trendmicro.com/en_us/research/24/j/earth-simnavaz-cyberattacks.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://attack.mitre.org/groups/G0007).(Citation: URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://attack.mitre.org/software/S0365) URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://attack.mitre.org/software/S0368) URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.gov.uk/government/news/uk-exposes-series-of-russian-cyber-attacks-against-olympic-and-paralympic-games URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.secureworks.com/research/threat-profiles/iron-viking URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.justice.gov/opa/press-release/file/1328521/download URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://2017-2021.state.gov/the-united-states-condemns-russian-cyber-attack-against-the-country-of-georgia/index.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.ncsc.gov.uk/news/ncsc-supports-sandworm-advisory URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.infosecurity-magazine.com/news/microsoft-zero-day-traced-russian/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.microsoft.com/en-us/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-january-voodoo-bear/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.fireeye.com/blog/threat-research/2016/01/ukraine-and-sandworm-team.html URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://blog-assets.f-secure.com/wp-content/uploads/2019/10/15163408/BlackEnergy_Quedagh.pdf URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.dragos.com/resource/electrum/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://www.justice.gov/opa/page/file/1098481/download URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06
https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023/ URL ATT&CK auto-tagged, medium-severity, url 5 8 2026-08-06

🔌 Domain tooling

DNS Audit →Passive DNS →OSINT Pivot →Link Analysis →Advanced Search →Worst Offenders →
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown