Threat intelligence search engine for domains, IPs, hashes, malware, and related indicators.
Directory
Search the directory
Search published websites, apps and repositories.
Triage is a malware analysis sandbox for dissecting malware samples, offering a customizable environment with detections and configuration extraction for many malware families. Public reports can be viewed, and a REST-like API is provided for automating sample analysis.
unsafe activators documents a safety warning, scam report, malware concern, or risky download example.
adware distributor Kape documents a safety warning, scam report, malware concern, or risky download example.
Awesome Android Reverse Engineering is a GitHub repository or organization with source code, releases, documentation, or project resources.
Bitdefender map showing detected cyber threats, malware activity, and attack trends.
DNSViz is a tool for visualizing the status of a DNS zone. It was designed to help understand and troubleshoot deployment of the DNS Security Extensions, providing a visual analysis of the DNSSEC authentication chain and resolution path and listing configuration errors it detects.
Internet asset search engine for discovering exposed services, hosts, domains, and technologies.
Threat intelligence search platform for malware indicators, IPs, domains, URLs, and hashes.
A site for searching MD5 hashes in a database and generating MD5 digests, with hashing and encoding tools. It notes that hashing is one-way and that matches are found by comparing digests or looking up a hash-to-plaintext database.
Metacleaner is an online tool that strips hidden metadata from PDFs, Office and OpenDocument files, images, audio and video. It runs in the browser, keeps file contents intact, and the first file is free without signup. A premium tier offers traffic, API access and cleaning history.
Tor Browser download page for routing web traffic through the Tor anonymity network.
The Webcam Network provides regional webcam listings for places worldwide. It lists locations and points to available webcams there or the nearest available webcams. Webcam data comes from Webcam Galore, and topographical information comes from the GEOnet Names Server; a distance matrix is updated permanently.
A website that presents a searchable list of names under the heading of the Terrorist Security Administration's No-Fly List. It shows database statistics, including total entries and recent additions, and states that entries do not imply participation in terrorist activities. The site describes the organization as independent and non-government.
Security scanning service for checking files, URLs, domains, and hashes across many detection engines.
VPN service from AdGuard for encrypted browsing and privacy-focused network access.
Anubis is a developer resource for coding, documentation, communities, security research, or software tools.
Cisco Talos Intelligence Group is a threat intelligence operation that publishes threat research and an Intelligence Center with web reputation, content categorization, sender IP and domain reputation, file reputation and IPS/IDS resources. It also offers incident response services for emergency network security needs and proactive intelligence-led services.
A website that presents a searchable database of names labeled as suspected terrorists under the name National Surveillance Agency for Telephones and Terrorism. It includes links for reporting a suspect, anti-terror tips, new suspects and an FAQ. The site states that inclusion does not imply participation in terrorist activities and that the agency is independent and non-government.
Digital Attack Map is a live data visualization of DDoS attacks around the globe, presented by Jigsaw. It shows top daily DDoS attacks worldwide and offers modes for large, unusual and combined attacks, plus a map and table view and historical data.
Exploit-DB paper archive with security research, exploitation papers, and technical writeups.
Fake Windows Activators documents a safety warning, scam report, malware concern, or risky download example.
Focsec is an API for detecting VPNs, proxies, TOR and bot traffic. It provides IP check data for protecting applications, identifying suspicious logins, detecting fraudulent signups and stopping scrapers and crawlers. Plans are billed monthly, and a free 14 day trial is offered.
A hash lookup service where users submit hashes and search a database of already-cracked hashes for corresponding plaintext. It supports hash types including MD5, SHA-1, SHA-256, SHA-512, MySQL, NTLM, Bcrypt and Wordpress. The database has been built since August 2007.