Why this server?
This server is an excellent fit as it provides third-party enrichment lookups for security observables like IP addresses, domains, and URLs (which include landing pages), leveraging services such as VirusTotal and Shodan, directly addressing 'malware info' for 'domains' and 'landing pages'.
FlicenseCqualityCmaintenanceA Model Context Protocol server that enables users to perform third-party enrichment lookups for security observables (IP addresses, domains, URLs, emails) through services like VirusTotal, Shodan, and others.Last updated14Why this server?
This server is highly relevant because it offers direct malware analysis capabilities and specifically supports URL analysis, which is crucial for identifying malicious landing pages related to malware campaigns.
AlicenseBqualityCmaintenanceProvides LLMs with access to Threat.Zone's malware analysis capabilities through standardized MCP tools, allowing for file and URL analysis, sandbox execution, and threat intelligence retrieval.Last updated3113GPL 3.0Why this server?
This server is a strong match due to its focus on YARA rule-based threat analysis for files and URLs, providing detailed scanning results that are directly applicable to detecting malware associated with domains and landing pages.
Alicense-qualityCmaintenanceA Model Context Protocol server that enables AI assistants to perform YARA rule-based threat analysis on files and URLs, supporting comprehensive rule management and detailed scanning results.Last updated22MITWhy this server?
This server provides comprehensive threat intelligence aggregation and is capable of analyzing various indicators, including IP addresses, domains, and URLs, making it highly suitable for gathering 'malware info' related to all specified areas.
Alicense-qualityCmaintenanceA threat intelligence aggregation server that provides unified access to multiple security sources for analyzing indicators (IPs, domains, hashes, URLs) with confidence scoring.Last updated7MITWhy this server?
This server directly supports malware analysis through terminal commands and tools, offering a direct way to investigate 'malware info' once detected or suspected.
FlicenseBqualityCmaintenanceA specialized MCP server for Claude Desktop that allows executing terminal commands for malware analysis with support for common analysis tools like file, strings, hexdump, objdump, and xxd.Last updated73Why this server?
This server is relevant as it provides rich analysis and IOC (Indicator of Compromise) extraction capabilities from Joe Sandbox, a tool often used for in-depth malware analysis.

JoeSandboxMCPofficial
AlicenseAqualityCmaintenanceA Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM agents).Last updated1510MITWhy this server?
This server directly integrates with the VirusTotal API to scan URLs (landing pages), analyze file hashes (malware info), and retrieve IP address reports (domains), making it a core tool for the user's request.
Alicense-qualityCmaintenanceA MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.Last updated266126MITWhy this server?
This server is directly relevant to 'ads' by searching Google's public ads database and using AI to analyze ad content, which is important for identifying malicious advertisements often used in malware distribution.
Alicense-qualityCmaintenanceThis MCP server searches Google's public ads database and uses AI to analyze ad images/videos, with intelligent caching for performance.Last updated6MITWhy this server?
Similar to the Google Ads server, this tool specifically targets 'ads' on Facebook's platform, allowing for retrieval and analysis of brand ads, which can be a vector for malware distribution.
Alicense-qualityCmaintenanceThis MCP server lets you search Facebook's Ad Library, retrieve brand ads, and analyze ad images/videos using AI - all with intelligent caching and batch processing for efficiency.Last updated226MIT