Threat Intelligence

Coordinate threat intelligence processing and analysis at scale with IntelOwl, an open-source project.

openSquat detects look-alike domains that resemble an organization’s legitimate domains, helping identify possible impersonation.

HaGeZi publishes DNS blocklists for filtering ads, trackers, malware, and other unwanted domains.

Cisco Talos provides threat intelligence and directs reputation or categorization inquiries to its support site.

This Python tool visualizes phishing networks by querying the PhishStats API and mapping URLs, domains, hosts, IP addresses, and related data.

Cisco Talos’ Intelligence Center provides IP and domain intelligence for threat detection.

Criminal IP provides IP reputation analysis, attack-surface monitoring, fraud detection and threat intelligence.

This repository curates tools and resources for analyzing malware, including material for researchers and practitioners.

Pulsedive provides threat intelligence tools to search, scan, and enrich IP addresses, URLs, domains, and other indicators.

StealthMole monitors dark-web sources for threat intelligence and cybersecurity investigations.

Threat Radar displays current cyber threat intelligence on a live map, showing security activity from its data sources.

Use community-sourced threat intelligence and blocklists from CrowdSec to support security operations.

Constella provides identity threat intelligence based on breach data, including dark web monitoring and infostealer detection.

isMalicious checks IP addresses, domains, URLs, emails, phone numbers, and cryptocurrency wallets against threat intelligence data.

CrowdSec provides open-source intrusion prevention, web application firewall, and bot detection tools.

DNSTwist detects lookalike domains used in homograph phishing, typosquatting, and brand impersonation.

IBM X-Force Exchange is a threat intelligence sharing platform for researching security indicators and emerging threats.

CyberSources curates more than 540 cybersecurity tools, with the project emphasizing ethical security resources.

Validin provides a community platform for threat intelligence teams to research and share security information.

ONYPHE scans IPs and URLs at internet scale for attack-surface discovery, management and cyber threat intelligence.

ZoomEye searches internet-connected assets for discovery and cybersecurity research.