BlackDome Threat Intel runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 7 Nov 2026.
Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.
Nothing serious here today
Today is the operative word: we check BlackDome Threat Intel every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Alternatives to BlackDome Threat Intel
same job, measured the same wayHoneypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.
Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.
OpenPanel analytics: metrics, live visitors, top pages, referrers. Needs client credentials.
Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Threat intel and DFIR: IOCs, CVEs, actors, SBOMs, domain scans, cases, memory, Kubernetes, Proxmox.
Housing Intel MCP — Meta-pack that chains FRED, BLS, ATTOM, and HUD APIs into higher-level housing…
OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.
BlackDome Threat Intel — questions
Answers built from our own checks of this server.