start.me
Threat intelligence resource board with links for indicators, malware, security research, and monitoring.
Directory
Search results
Published directory entries matching your search.
Filters
webscout.io
Webscout provides intelligence on IP addresses for defenders of democracies and critical infrastructure. Its platform ingests network and intelligence feeds, adds context, detects threats, and supports investigation and response. It enriches IPs with data on geolocation, network ownership, VPNs, Tor, residential proxies, and provider attribution, delivered by API, bulk feed, or SIEM integration. It also offers honeypots and domain intelligence.
cybermap.kaspersky.com
Kaspersky map showing real-time cyber threat activity and detected security events worldwide.
maltiverse.com
Threat intelligence search platform for malware indicators, IPs, domains, URLs, and hashes.
threatbutt.com
Humorous cyber threat map showing global attack-style visualizations for awareness and demos.
darktracer.io
Dark-web intelligence company publishing monitoring, ransomware and underground-ecosystem analysis.
flashpoint.io
Intelligence analysis covering illicit communities, ransomware groups and underground online activity.
nerd.cesnet.cz
The Network Entity Reputation Database IP search is a CESNET page that searches and lists IP addresses with hostname, ASN, country, events, reputation score, threat category, other properties, time added and last activity. It provides links to services including Shodan, Censys, AbuseIPDB, Talos Intelligence Center, Greynoise Visualizer and DShield. Results shown include DShield reports and OTX pulses.
zoomeye.ai
ZoomEye is a cybersecurity search engine focused on internet asset discovery. It indexes internet-connected devices and supports open-source intelligence (OSINT) and threat intelligence use cases. The platform has offered Black Friday lifetime deals with one-time payments for permanent access, and allows users to create free accounts to get started.
github.com
GitHub awesome list collecting OSINT tools, datasets, training links, and research resources.
cipher387.github.io
Cipher387's large OSINT tool collection covering social media, domains, people, maps, and more.
hunting.abuse.ch
Abusech helps search threat intelligence, IP reputation, domains, and security investigation data.
abuseipdb.com
Abuseipdb helps search threat intelligence, IP reputation, domains, and security investigation data.
start.me
Start.me toolbox with anti-money-laundering, sanctions, corporate, and financial investigation resources.
awesomelists.top
Directory for browsing curated awesome lists, developer resources, and topic collections.
bazaar.abuse.ch
MalwareBazaar is a platform from abuse.ch and Spamhaus for sharing malware samples with the infosec community, antivirus vendors, and threat intelligence providers. Users can upload samples, browse the database, set alerts for newly observed malware, and use APIs to push or pull signals and automate bulk queries. Spamhaus datasets enhanced with MalwareBazaar samples are also available.
blockaid.io
Blockaid is a real-time onchain security platform for web3 builders. It offers transaction security, address scanning, token scanning and dApp scanning, and combines its data network with a policy engine so threat verdicts reflect both its intelligence and customer policies. It also lists end user protection, onchain monitoring, crypto fraud prevention and cosigner products for wallets, DeFi operators, exchanges, banks and asset managers.
blocksec.com
BlockSec provides blockchain security, monitoring, threat intelligence, or compliance tools.
brightcloud.com
BrightCloud helps search threat intelligence, IP reputation, domains, and security investigation data.
censys.com
Censys provides a map of the internet that security teams use to defend attack surfaces and hunt for threats. It offers security operations and exposure management with real-time internet intelligence. Products listed include attack surface management, Censys Search and adversary investigation.
chainalysis.com
Chainalysis provides blockchain security, monitoring, threat intelligence, or compliance tools.
arxiv.org
CRATOR is a proposed dark web crawler described in an arXiv paper. It is designed to extract pages that handle security protocols such as captchas, using seed URL lists, link analysis and scanning to discover content, with user-agent rotation and proxy usage for anonymity. The authors report evaluation using coverage, performance and robustness metrics, and suggest threat intelligence, cybersecurity and online investigation applications.
digitalattackmap.com
Digital Attack Map is a live data visualization of DDoS attacks around the globe, presented by Jigsaw. It shows top daily DDoS attacks worldwide and offers modes for large, unusual and combined attacks, plus a map and table view and historical data.
ecrime.ch
eCrime.ch is an extortion exposure monitoring platform for enterprise security, incident response and third-party risk teams. It detects, verifies and delivers ransomware and data-leak signals with context such as entity mapping, artifacts, links and timelines. The site states it monitors 280+ extortion and leak sources and delivers alerts through dashboard, email, Slack, API and reports. A REST API provides tracker, intelligence, file-search, screenshot, actor, leak-site and torrent-monitoring data.