Add AlienVault OTX domain threat intelligence source

This commit is contained in:
nemunaire 2026-05-15 21:32:00 +08:00
commit faae2f80c5
3 changed files with 358 additions and 0 deletions

View file

@ -21,6 +21,7 @@ widely-used reputation systems.
| Disconnect.me | downloaded list | no | user (default on) |
| OISD | downloaded list | no | user (default on) |
| VirusTotal v3 | HTTPS lookup | yes (admin) | admin |
| AlienVault OTX | HTTPS lookup | free (admin) | admin |
### Obtaining API keys
@ -42,6 +43,11 @@ widely-used reputation systems.
3. Free tier: 4 requests/minute, 500 requests/day. No billing required.
4. The public API key is sufficient; premium keys unlock higher quotas.
**AlienVault OTX** (option: `otx_api_key`)
1. Register a free account at [otx.alienvault.com](https://otx.alienvault.com/).
2. Go to *Settings → API Integration* to find your personal OTX key.
3. Free, no documented rate limits for the indicator lookup API.
DNS-based blocklists are queried in parallel. The OpenPhish feed is
downloaded once per hour by the provider and cached in memory.