Identifying and assessing malicious resources

An apparatus comprising:

• a processor;
• and
• one or more memories storing computer-readable instructions that, when executed by the processor, cause the processor to:
• receive via a user interface a string of text that comprises a de-fanged uniform resource identifier (URI), wherein the de-fanged URI partially identifies a malicious location and wherein the de-fanged uniform resource locator includes a pair of brackets surrounding a dot (.);
• convert the de-fanged URI into a re-fanged URI, wherein the re-fanged URI fully identifies the malicious location and wherein the re-fanged URI does not include the pair of brackets;
• retrieve data from the malicious location identified by the re-fanged URI, wherein retrieving the data comprises operating a headless browser to render the data via the headless browser, resulting in rendered data;
• categorize, by the computing device, based on the rendered data, the malicious location;
• generate, by the computing device, one or more notifications based on the categorizing;
• transmit, by the computing device, the one or more notifications to another device to update a record stored at the another device and associated with the network location to include information indicating that the network location is malicious.

One or more non-transitory computer readable media storing instructions that, when executed by a processor, cause the processor to:

• receive via a user interface a string of text that comprises a de-fanged uniform resource identifier (URI) associated with a potentially malicious location, wherein the de-fanged URI includes a pair of brackets surrounding a dot (.);
• convert the de-fanged URI into a clickable URI, wherein the clickable URI does not include the pair of brackets;
• retrieve data from the malicious location identified by the clickable URI, wherein retrieving the data comprises launching a browser in a non-display mode to receive the data;
• render the data, resulting in rendered data;
• categorize, based on the rendered data, the malicious location;
• generate one or more notifications based on the categorizing;
• transmit, the one or more notifications to another device to update a record stored at the another device and associated with the network location to include information indicating that the network location is malicious.