Find Indicators of compromise (IOCs) from a domain

SpiderFoot

Automated OSINT reconnaissance framework

VirusTotal

Analyze files, URLs, domains, and IPs

Wireshark

Network protocol analyzer

urlscan.io

Scan and analyze URLs safely

ANY.RUN Threat Intelligence Lookup

ANY.RUN sandboxed runs IOC lookup

AlienVault OTX

a community threat intelligence exchange for pulses, indicators, malware, and

Anomali ThreatStream

Anomali TIP and feed management platform

BitSight

External cyber-risk rating by BitSight

Blacklist Checker

Check IPs and domains against 100+ DNS blacklists

CIRCL Passive DNS

CIRCL passive DNS service for researchers

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

Censys Search Pro

Censys attack-surface management platform

Cisco Talos Intelligence

a threat reputation portal for IPs, domains, malware, vulnerabilities, and sp

Cisco Umbrella Investigate

Cisco DNS-resolver threat intel

Cortex

an observable analysis and active response engine used with TheHive and secur

Criminal IP

CTI search engine scoring IPs and domains for threats

CryptoScamDB

Check a crypto address or domain against known scams

CyberChef

a browser-based data transformation workbench for decoding, parsing, hashing,

Cyberbro

Extract IOCs from raw text and enrich them across reputation services

DNSChecker Malicious

Cisco Talos free reputation lookup

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

Farsight DNSDB

Commercial passive DNS by DomainTools

Feodo Tracker

an abuse.ch tracker for botnet command-and-control indicators associated with

FortiGuard Web Filter Lookup

Look up a URL, domain or IP reputation and category

GitGuardian Public Monitoring

Monitors public GitHub for an org's leaked secrets and credentials

Google Safe Browsing

a Google service and API for checking URLs against unsafe web resource lists

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

Group-IB Threat Intelligence

Russian-region-focused TI platform

Grype

a vulnerability scanner for container images, filesystems, and software bills

Hunt.io

Adversary infrastructure tracking service

IBM X-Force Exchange

a threat intelligence sharing and enrichment platform for indicators, malware

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

JA3 Fingerprint

Salesforce TLS client-fingerprint standard

JARM Fingerprint Hash

Salesforce TLS server-fingerprint tool

Jaeles

a signature-based web application scanner for detecting security issues and e

MISP

an open-source threat intelligence platform for sharing indicators, events, g

Maltrail

Detect traffic to malicious domains and IPs from blacklists

Malwarebytes Labs

a threat research publication and malware intelligence source for campaigns a

Mandiant Advantage

Mandiant TI and APT analytics platform

Microsoft Defender Threat Intelligence

Microsoft passive DNS and TI graph

Mnemonic ARGUS

Mnemonic passive DNS and TI platform

Multi-RBL Check

Free multi-DNSBL and FCrDNS check for mail servers

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

NerdyData

a search engine for website source code, technologies, tracking IDs, and expo

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OONI Explorer

OONI internet censorship measurement archive

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln

OWASP ZAP

an open-source web application security scanner and intercepting proxy for au

OpenCTI

an open-source cyber threat intelligence platform for modeling entities, rela

OpenPhish

a phishing intelligence service that detects and publishes active phishing in

Packet Storm Security

a long-running archive of exploits, advisories, tools, and security research

PhishTank

a community phishing verification service for checking and submitting suspect

Phishstats Threat Stats

Free phishing-IOC community feed

Phishunt.io

Free phishing-domain IOC feed

PublicWWW

a source-code search engine for finding HTML, JavaScript, analytics IDs, and

Pulsedive

a threat intelligence platform for enriching indicators, domains, IPs, and UR

Pulsedive Explore

Pulsedive free pivoting interface

Pulsedive Threat Browse

Malicious URL and ASN tracker