sfp_virustotal.py

Interfaces with VirusTotal API to fetch threat intelligence and reputation data for files, domains, IPs, and URLs.

# Source: https://github.com/smicallef/spiderfoot | License: MIT | Copyright 2022 Steve Micallef <steve@binarypool.com>
# Provided via justclaw.it.com; keep this notice with the code.
# -*- coding: utf-8 -*-
# -------------------------------------------------------------------------------
# Name:         sfp_virustotal
# Purpose:      Query VirusTotal for identified IP addresses.
#
# Author:      Steve Micallef <steve@binarypool.com>
#
# Created:     21/03/2014
# Copyright:   (c) Steve Micallef
# Licence:     MIT
# -------------------------------------------------------------------------------

import json
import time
import urllib.error
import urllib.parse
import urllib.request

from netaddr import IPNetwork

from spiderfoot import SpiderFootEvent, SpiderFootPlugin


class sfp_virustotal(

... (truncated -- full source via MCP)