PyMISPWarningLists/example_domaincheck.py

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
'''
Koen Van Impe

Demo script for domain check against warninglists

'''

from pymispwarninglists import WarningLists


def init():
    '''
        Template to get the module started.
        If set slow_search=True, uses the most appropriate search method. Can be slower.
    '''
    return WarningLists(slow_search=False)


if __name__ == '__main__':
    warninglists = init()

    # Fetch this list of domains from MISP via PyMISP search
    # For demo purpose we put it in a Python list
    domain_list = ['google.com', 'circl.lu']

    for domain in domain_list:
        r = warninglists.search(domain)
        if r:
            # Now update the attribute for the domain
            # Attribute ID can be included when querying the domains via PyMISP
            # If a hit is found, set the tag for the attribute
            print("Hit found for %s in warninglists" % (domain))
            for hit in r:
                print(" %s %s %s %s" % (hit.type, hit.name, hit.version, hit.description))