How about adding the "Malware Bazaar"

[icepaule]

Hello,
I'm using ph0neutria for a long time now. Thaaanks so much for the work you're doing with it.

How would it sound to add https://bazaar.abuse.ch/api/#download as another source of malware samples?

Cheers
Marcus

[phage-nz]

Hi Marcus,

Thanks for the positive feedback! I'm not really working on this project nowadays so it might be some time before I get a chance to add this functionality. Most new functionality I've pulled from a private project of mine but I don't have Malware Bazaar in there as it doesn't store URL's. I do wonder if there's quite a bit of crossover between URLhaus and this service though?

I'll try to set some time aside over the next couple of weeks to add this for you. I've also been meaning to add MISP as a URL source.

Thanks,
Chris