F
licenseC
qualityD
maintenanceA Model Context Protocol server that enables users to perform third-party enrichment lookups for security observables (IP addresses, domains, URLs, emails) through services like VirusTotal, Shodan, and others.
1
5
Why this server?
This server is an excellent fit as it provides third-party enrichment lookups for security observables like IP addresses, domains, and URLs (which include landing pages), leveraging services such as VirusTotal and Shodan, directly addressing 'malware info' for 'domains' and 'landing pages'.
Why this server?
This server is highly relevant because it offers direct malware analysis capabilities and specifically supports URL analysis, which is crucial for identifying malicious landing pages related to malware campaigns.
AlicenseBqualityDmaintenanceProvides LLMs with access to Threat.Zone's malware analysis capabilities through standardized MCP tools, allowing for file and URL analysis, sandbox execution, and threat intelligence retrieval.3114GPL 3.0Why this server?
This server is a strong match due to its focus on YARA rule-based threat analysis for files and URLs, providing detailed scanning results that are directly applicable to detecting malware associated with domains and landing pages.
Alicense-qualityDmaintenanceA Model Context Protocol server that enables AI assistants to perform YARA rule-based threat analysis on files and URLs, supporting comprehensive rule management and detailed scanning results.23MITWhy this server?
This server provides comprehensive threat intelligence aggregation and is capable of analyzing various indicators, including IP addresses, domains, and URLs, making it highly suitable for gathering 'malware info' related to all specified areas.
Alicense-qualityDmaintenanceA threat intelligence aggregation server that provides unified access to multiple security sources for analyzing indicators (IPs, domains, hashes, URLs) with confidence scoring.8MITWhy this server?
This server directly supports malware analysis through terminal commands and tools, offering a direct way to investigate 'malware info' once detected or suspected.
FlicenseBqualityDmaintenanceA specialized MCP server for Claude Desktop that allows executing terminal commands for malware analysis with support for common analysis tools like file, strings, hexdump, objdump, and xxd.73Why this server?
This server is relevant as it provides rich analysis and IOC (Indicator of Compromise) extraction capabilities from Joe Sandbox, a tool often used for in-depth malware analysis.
JoeSandboxMCPofficial
AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM agents).1511MITWhy this server?
This server directly integrates with the VirusTotal API to scan URLs (landing pages), analyze file hashes (malware info), and retrieve IP address reports (domains), making it a core tool for the user's request.
AlicenseAqualityBmaintenanceA MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.11331144MITWhy this server?
This server is directly relevant to 'ads' by searching Google's public ads database and using AI to analyze ad content, which is important for identifying malicious advertisements often used in malware distribution.
AlicenseAqualityCmaintenanceThis MCP server searches Google's public ads database and uses AI to analyze ad images/videos, with intelligent caching for performance.711MITWhy this server?
This server is a direct fit for 'malware info' and 'landing pages' due to its specialized tools for URL scanning, threat detection, and malicious content analysis.
urlDNA MCP Serverofficial
AlicenseAqualityDmaintenanceEnables security-focused LLM agents like GPT-4.1 and Claude 3 to interact with the urlDNA threat intelligence platform, providing tools for URL scanning, threat detection, and malicious content analysis.47Apache 2.0