data/sources.yaml

domain:
  - name: crt.sh
    url: "https://crt.sh/?q={query}"
    risk: low

  - name: SecurityTrails
    url: "https://securitytrails.com/domain/{query}"
    risk: low

  - name: urlscan.io
    url: "https://urlscan.io/search/#{query}"
    risk: low

  - name: CentralOps Network Tools
    url: "https://centralops.net/co/"
    risk: low

  - name: VirusTotal
    url: "https://www.virustotal.com/gui/domain/{query}"
    risk: low

  - name: MXToolbox
    url: "https://mxtoolbox.com/SuperTool.aspx?action={query}"
    risk: low

  - name: SSL Labs SSL Test
    url: "https://www.ssllabs.com/ssltest/analyze.html?d={query}"
    risk: conditional

  - name: Censys
    url: "https://search.censys.io/search?resource=hosts&q={query}"
    risk: low

  - name: Shodan
    url: "https://www.shodan.io/search?query={query}"
    risk: low


username:
  - name: Namechk
    url: "https://namechk.com/{query}"
    risk: low


ip:
  - name: AbuseIPDB
    url: "https://www.abuseipdb.com/check/{query}"
    risk: low

  - name: ARIN Whois
    url: "https://search.arin.net/rdap/?query={query}"
    risk: low

  - name: AlienVault OTX
    url: "https://otx.alienvault.com/indicator/ip/{query}"
    risk: low

  - name: VirusTotal
    url: "https://www.virustotal.com/gui/ip-address/{query}"
    risk: low

  - name: Censys
    url: "https://search.censys.io/hosts/{query}"
    risk: low

  - name: Shodan
    url: "https://www.shodan.io/host/{query}"
    risk: low


url:
  - name: urlscan.io
    url: "https://urlscan.io/search/#{query}"
    risk: low

  - name: VirusTotal
    url: "https://www.virustotal.com/gui/search/{query}"
    risk: low

  - name: Hybrid Analysis
    url: "https://www.hybrid-analysis.com/search?query={query}"
    risk: low

  - name: Lookyloo
    url: "https://lookyloo.circl.lu/"
    risk: low


email:
  - name: Have I Been Pwned
    url: "https://haveibeenpwned.com/"
    risk: low


vulnerability:
  - name: CVE List
    url: "https://cve.mitre.org/cve/search_cve_list.html"
    risk: low


framework:
  - name: OSINT Frame.work
    url: "https://osintframe.work"
    risk: low