IOCs intelligence

• Offensive-OSINT-Tools: https://github.com/wddadk/Offensive-OSINT-Tools
• Awesome threat intelligence: https://github.com/hslatman/awesome-threat-intelligence

IP address reputation

Name	Url
Abuseipdb	https://www.abuseipdb.com/
Abuseat	https://www.abuseat.org/
Riskiq (paid)	https://www.riskiq.com
Spur	https://spur.us/
Talos Intelligence	https://talosintelligence.com/
VirusTotal	https://www.virustotal.com/

URL reputation

Name	Url
Sucuri	https://sitecheck.sucuri.net/
Urlhaus	https://urlhaus.abuse.ch/
Urlscan	https://urlscan.io/
Urlscore	https://urlscore.ai/
VirusTotal	https://www.virustotal.com/

Sandbox

Name	Url
AnyRun	https://any.run/
Browserling	https://www.browserling.com/
Cape	https://capesandbox.com/
Hybrid	https://www.hybrid-analysis.com/
Kaspersky	https://opentip.kaspersky.com
Pandora	https://pandora.circl.lu/
VirusTotal	https://www.virustotal.com/
WDSI	https://www.microsoft.com/en-us/wdsi

DNS history

Name	Url
Dnshistory	https://dnshistory.org/
Securitytrails	https://securitytrails.com/
TI.defender.microsoft	https://ti.defender.microsoft.com/
Viewdns	https://viewdns.info/

Certifications

Name	Url
Crt.sh	https://crt.sh/
Web Check	https://web-check.as93.net/

Recon and search engine

Name	Url
BGP tools	https://bgp.tools/
Censys	https://search.censys.io/
Chaos Projectdiscovery	https://chaos.projectdiscovery.io
Columbus Project	https://columbus.elmasy.com/
Fofa	https://en.fofa.info/
MISP warninglist	https://misp.github.io/misp-warninglists/
Netlas.io	https://netlas.io
Opendata Rapid7	https://opendata.rapid7.com/
Recon.dev	https://recon.dev/
Shodan	https://www.shodan.io/
Synapsint	https://synapsint.com
Subdomainfinder	https://subdomainfinder.c99.nl

Last update: 2025-02-15