[hexablob]

Summary

Add a new Shuffle app for isMalicious.com threat intelligence platform.

About isMalicious

isMalicious is a threat intelligence aggregation platform that checks IPs and domains against multiple security sources to identify malicious activity.

Actions Available

Action	Description
check_ip	Check if an IP address is malicious
check_domain	Check if a domain is malicious
get_reputation	Get reputation data for an IP/domain
get_location	Get geolocation data for an IP
get_blocklist_stats	Get blocklist statistics

Features

• Risk Scoring: Returns a 0-100 risk score
• Threat Classification: Categorizes threats (phishing, malware, C2, botnet, ransomware, etc.)
• Multiple Enrichment Levels: basic, standard, full
• Reputation Data: Aggregated from multiple sources
• Geolocation: Country, city, coordinates

Authentication

Requires API key and secret from ismalicious.com.

Links

• Website: https://ismalicious.com
• API Docs: https://docs.ismalicious.com
• GitHub: https://github.com/hexablob/ismalicious.com

Testing

Tested locally with valid API credentials.

[frikky]

Heyo and happy new year!

Since this looks like normal API's, it would be better if they are made as an app directly on https://shuffler.io/apps/new and published. That is easier to maintain over time.

Please tell me if I'm wrong

[hexablob]

Thanks for the guidance, @frikky. Agreed: this is an ordinary API integration, so the App Creator route is the right fit. I have prepared a credential-free Swagger 2.0 import specification for the current /check endpoint, covering IPs, domains, URLs and file hashes.

The app has not yet been generated, tested or verified as published through the Shuffle UI. Before calling it ready, I still need to check the generated authentication, timeout/redirect handling and an authenticated action. The older local Python test noted in this PR does not establish those results.

I am keeping this PR as a reference for now; I am not presenting it as a published Shuffle app.