[codezero]

I think the urls in that repo are just short url services. You need to provide IOC (indicators of compromise) files in a specific format and it will check any short urls to expand them out and compare against the provided list.

https://oasis-open.github.io/cti-documentation/stix/intro