maltrail icon indicating copy to clipboard operation
maltrail copied to clipboard

[Feature Request] API for checking domain/url

Open alex-bender opened this issue 3 years ago • 7 comments

Hello,

That would be great to have an API which could provide a way to check if some resource is malicious or not. At least check if url\ip\domain present in database. I'm contributing to the https://github.com/Pithus/bazaar which is a platform for android security analysis so that API would be helpful.

Thanks

alex-bender avatar Jul 19 '21 13:07 alex-bender

You can make it pretty easy.

Choose some lang (php maybe) and search inside this folders for ip/url/domain -> https://github.com/stamparm/maltrail/tree/master/trails

cor3 avatar Jul 31 '21 11:07 cor3

So no way to do that in a http way?

alex-bender avatar Jul 31 '21 11:07 alex-bender

install apache2/nginx and bam ;) 5 minute job in php

cor3 avatar Jul 31 '21 12:07 cor3

ok, got it, thanks. I'm closing issue then

alex-bender avatar Jul 31 '21 12:07 alex-bender

there was not need for closing it down :)

this is a nice idea to have. though, as everything for free, i would hope that it wouldn't be abused (too much) with zillion requests

stamparm avatar Aug 02 '21 10:08 stamparm

p.s. this https://raw.githubusercontent.com/stamparm/aux/master/maltrail-static-trails.txt is updated every 24h with fresh trails. if you want a standalone solution, download it every day, and just do search on it

stamparm avatar Aug 02 '21 10:08 stamparm

reopening it then. thank you, I've been thinking about pulling that file occasionally.

alex-bender avatar Aug 02 '21 10:08 alex-bender