#

CATERGORY

TITLE

DESCRIPTION

RATING

VIEW

1

Malware Lookup Search Engines

VirusTotal

VirusTotal analyses files, URLs, domains and IP addresses against dozens of antivirus engines and shares community intelligence on each indicator. It is the standard first stop for checking whether something is malicious. A free tier covers everyday lookups, with paid enterprise access for deeper hunting and relationships.

2

Social Media Investigation Search Engines

AbuseIPDB

AbuseIPDB is a community-driven database of IP addresses reported for abusive activity such as scanning, brute-force attempts and spam. Analysts check it to gauge an address's reputation and history. It is free to search, with API access for automated blocking and enrichment.

3

Social Media Investigation Search Engines

AlienVault OTX

AlienVault Open Threat Exchange is an open threat-intelligence community where researchers publish and search indicators of compromise grouped into pulses. It lets defenders pivot from one indicator to related infrastructure and campaigns. The platform is free and widely used for collaborative threat research.

4

Social Media Investigation Search Engines

ThreatMiner

ThreatMiner and similar services let analysts pivot from a single indicator, such as a domain, hash or IP, to related infrastructure and malware. This data-mining approach speeds up the mapping of an attacker's wider footprint. Note that ThreatCrowd has been consolidated into AlienVault OTX, so pair these tools with OTX for current coverage.