Realurls

MISP Threat Sharing

Also known as misp, misp project, misp-project. Wikidata Q63017823. GitHub MISP.

Official domains: misp-project.org

Identity anchored by wikidata:Q63017823/P856 wikidata:Q63017823/P2037. Display name from wikidata:Q63017823.

misp-project.org verified primary · confidence 0.85 · verified 2026-09-06

correlated anchors merged: A8 not independent of the kept one, counted once · 1 independent anchor(s) + 3 independent corroboration(s): meets the verified threshold

EvidenceWhat it shows
A1 anchor GitHub verified this organization's domain (DNS-level check performed by GitHub)
org=MISP org_verified=true blog=https://www.misp-project.org
 source
A8 anchor Anchored repository's homepage points here, and this site links back
repo=MISP/MISP org=MISP repo_anchored=true homepage=https://www.misp-project.org/ backlink=true stars=6503 age_days=4958 contributors=367
 source
A3 not counted Corporate registrar fingerprint (brand-protection registrar, long prepaid term, registry locks)
registrar=OVH sas created=2014-10-18 expires=2027-10-18 remaining_days=407 locks=["delete","transfer"]
 source
A4 not counted TLS certificate carries the organization name (OV/EV)
subject_org= validation_type=DV issuer=Let's Encrypt san_count=2
 TLS handshake misp-project.org:443
B1 corroboration Wikidata official-website claim (P856) on the anchored item
qid=Q63017823 label=MISP Threat Sharing site=https://misp-project.org sitelinks=3 competing_items=0
 source
B5 corroboration Tranco top-1M ranking
rank=480621 source=top-1m list
 source
B4 corroboration Wayback Machine history
first_snapshot=2015-02-02 history_days=4234
 source
2 piece(s) of evidence not counted — why
  • A3: registrar (OVH sas) is not a brand-protection registrar
  • A4: DV certificate carries no organization name (most modern tech companies use DV; this is expected)
Reproduce this yourself
# A1 — GitHub verified this org's domain
curl -s https://api.github.com/orgs/MISP | jq '{name, blog, is_verified}'

# A8 — anchored repo's homepage
curl -s https://api.github.com/repos/MISP/MISP | jq '{homepage, created_at, stargazers_count}'

# A3 — registrar / dates / locks
curl -sL https://rdap.org/domain/misp-project.org | jq '{status, events, registrar: [.entities[]|select(.roles[]=="registrar")|.vcardArray[1][1][3]]}'

# B1 — Wikidata P856
curl -s "https://www.wikidata.org/w/api.php?action=wbgetclaims&entity=Q63017823&property=P856&format=json"

# B5 — Tranco rank
curl -s https://tranco-list.eu/api/ranks/domain/misp-project.org

# B4 — first Wayback snapshot
curl -s "http://web.archive.org/cdx/search/cdx?url=misp-project.org&limit=1&output=json"

# Re-run the whole pipeline for this domain
git clone https://github.com/zhouchungong/realurls-registry && cd realurls-registry && pip install -e . && python -m src.verify misp-project.org

Think this is wrong? Open a dispute — the burden of proof is on us, and the record is downgraded while we check. Source record: YAML.