Most threat tools alert you one malicious incident at a time. Webamon clusters the infrastructure behind an attack into a tracked campaign and re-checks it 6× a day. New domains, liveness, infra rotation. Search it, monitor it, alert on it. Free tier, full API.
Remember when google used to be true search and return everything? Yeah well we decided to scan and index the web like they used too, find anything interesting?