<img src="https://ml.globenewswire.com/Resource/Download/327cd442-c5d8-4cfc-aa0c-aa4ecd50f60c?size=2" nborder="0" align="left" hspace="5" vspace="5" title="Screenshot 2024-09-12 125354.png" alt="Criminal IP"/><img alt="OpenClaw_Part_II_The_Growing_Security_Risks_Behind_1782355030QoWU2e1jD5-915x549" height="360" src="https://ml.globenewswire.com/Resource/Download/e14c20d0-a607-4706-922a-3b891a94c330/openclaw-part-ii-the-growing-security-risks-behind-1782355030qowu2e1jd5-915x549.jpg" width="600" data-dpi="96" data-caption="Turning Indicators into Intelligence in OpenCTI with Criminal IP" data-filename="OpenClaw_Part_II_The_Growing_Security_Risks_Behind_1782355030QoWU2e1jD5-915x549.jpg" /> TORRANCE, Calif., July 06, 2026 (GLOBE NEWSWIRE) -- <a href="https://www.criminalip.io/" rel="nofollow" target="_blank" title="Criminal IP">Criminal IP</a> has announced the official availability of its threat intelligence integration with OpenCTI, an open-source cyber threat intelligence platform. The integration enables security teams to automate the transformation of IP addresses, domains, and URLs into structured intelligence within the OpenCTI knowledge graph. The integration automatically enriches ingested indicators with Criminal IP's infrastructure intelligence, dual-perspective reputation scoring, vulnerability data, behavioral signals, and phishing analysis. The enriched data is structured as OpenCTI entities and relationships, allowing analysts to investigate connected infrastructure, map attack surfaces, and prioritize indicators. <img alt="Image inside text 1" height="304" src="https://ml.globenewswire.com/Resource/Download/768b72e9-a9b4-430e-a361-6705de0c54a5/image-inside-text-1.jpeg" width="600" data-dpi="96" data-caption="Turning Indicators into Intelligence in OpenCTI with Criminal IP" data-filename="Image inside text 1.jpeg" /> Integration Highlights <ul type="disc"><li style="margin-bottom:8pt;">Contextual Risk Scoring: Criminal IP delivers dual-perspective risk scoring reflecting both inbound targeting and outbound behavior. This model provides signals to assist analysts with the prioritization of high-risk infrastructure. </li></ul> <img alt="Image inside text 2" height="296" src="https://ml.globenewswire.com/Resource/Download/c68ee647-5826-406b-8f7c-bc95d995ee28/image-inside-text-2.jpeg" width="600" data-dpi="96" data-caption="Turning Indicators into Intelligence in OpenCTI with Criminal IP" data-filename="Image inside text 2.jpeg" /> <ul type="disc"><li style="margin-bottom:8pt;">Infrastructure Intelligence: The integration creates structured OpenCTI entities and relationships, mapping vulnerabilities (CVEs), Autonomous Systems (ISPs), and geolocation to allow analysts to pivot across components within the graph.</li><li style="margin-bottom:8pt;">Service Exposure &amp; Vulnerability Correlation: By linking observed services to known CVEs, the integration provides insight into whether an IP is malicious, exploitable, or actively leveraged in attacks.</li><li style="margin-bottom:8pt;">Threat Labeling &amp; Behavioral Signals: Generated labels incorporate multiple data points including anonymization technologies (VPN, proxy, TOR), hosting characteristics, and malicious classifications.</li><li style="margin-bottom:8pt;">Domain &amp; Phishing Intelligence: Criminal IP performs URL analysis for domains to detect phishing activity, credential harvesting, suspicious files, and impersonation techniques, providing tied confidence scores.</li><li style="margin-bottom:8pt;">Infrastructure Mapping: Indicators are linked to network ownership (Autonomous Systems), physical locations, and resolved IP infrastructure to identify hosting patterns and regional clustering. </li></ul> Key Use Cases <ul type="disc"><li style="margin-bottom:8pt;">SOC Triage and Alert Validation: Validates suspicious IPs and domains using risk scoring, infrastructure context, and phishing intelligence to prioritize high-risk indicators.</li><li style="margin-bottom:8pt;">Threat Hunting and Infrastructure Pivoting: Utilizes enriched relationships such as CVEs, Autonomous Systems, and geolocation to trace connected infrastructure and attacker operations.</li><li style="margin-bottom:8pt;">Phishing and Campaign Analysis: Identifies malicious domains, credential harvesting pages, and supporting infrastructure to track broader campaign patterns. </li></ul> About OpenCTI Platform   OpenCTI is an open-source cyber threat intelligence platform designed to structure, store, and analyze threat data using a graph-based model. It enables organizations to connect indicators, vulnerabilities, threat actors, and campaigns into a unified knowledge base for investigation, collaboration, and intelligence sharing. About Criminal IP  <a href="https://www.criminalip.io/" rel="nofollow" target="_blank" title="Criminal IP">Criminal IP</a> delivers cyber threat intelligence by analyzing IP addresses, domains, and URLs across the global internet. Powered by AI and OSINT, it provides reputation scoring, infrastructure visibility, and real-time detection of malicious activity, including phishing, exposed services, and anonymization technologies such as VPNs and proxies. Its API-first architecture enables integration into security platforms to enhance visibility, automation, and response. Contact: Michael Sena AI SPERA support@aispera.com Photos accompanying this announcement are available at: <a href="https://www.globenewswire.com/NewsRoom/AttachmentNg/e14c20d0-a607-4706-922a-3b891a94c330" rel="nofollow" target="_blank" title="">https://www.globenewswire.com/NewsRoom/AttachmentNg/e14c20d0-a607-4706-922a-3b891a94c330</a> <a href="https://www.globenewswire.com/NewsRoom/AttachmentNg/768b72e9-a9b4-430e-a361-6705de0c54a5" rel="nofollow" target="_blank" title="">https://www.globenewswire.com/NewsRoom/AttachmentNg/768b72e9-a9b4-430e-a361-6705de0c54a5</a> <a href="https://www.globenewswire.com/NewsRoom/AttachmentNg/c68ee647-5826-406b-8f7c-bc95d995ee28" rel="nofollow" target="_blank" title="">https://www.globenewswire.com/NewsRoom/AttachmentNg/c68ee647-5826-406b-8f7c-bc95d995ee28</a> <img alt="" src='https://ml.globenewswire.com/media/NGEzMGNmNmYtYjMyMi00YTcwLTgwYjQtY2RlOTI4OWQ2Zjk5LTUwMDEyNzk5Ni0yMDI2LTA3LTA2LWVu/tiny/Criminal-IP.png' referrerpolicy='no-referrer-when-downgrade' />

GlobeNewswire Inc.

Criminal IP Announces Availability of Threat Intelligence Integration with OpenCTI Platform

Latest news from the world of business and finance – both local and global

MONEY FM 89.3 is Singapore's first and only Business and Personal Finance station, featuring local and international business and financial news.

MONEY FM 89.3

Discover newsletters from our DJs on LinkedIn