diff --git a/README.md b/README.md
index 04296d7..9aad480 100644
--- a/README.md
+++ b/README.md
@@ -313,6 +313,7 @@ A curated list of awesome malware analysis tools and resources. Inspired by
   hashes and scan reports.
 * [Multi rbl](http://multirbl.valli.org/) - Multiple DNS blacklist and forward 
   confirmed reverse DNS lookup over more than 300 RBLs.
+* [NormShield Services](https://services.normshield.com/) - Free API Services about possible phishing domains, blacklisted ip addresses, breached accounts.
 * [SenderBase](http://www.senderbase.org/) - Search for IP, domain or network
   owner.
 * [SpamCop](https://www.spamcop.net/bl.shtml) - IP based spam block list.