Threat Intelligence Tools

• URLScan.io: https://urlscan.io/  (Scan and analyze websites)
• MalwareBazaar: https://bazaar.abuse.ch/  (Malware repository)
• FeodoTracker: https://feodotracker.abuse.ch/  (C2 servers)
• SSL Blacklist: https://sslbl.abuse.ch/  (Detect and identify malicious SSL connections)
• URLHaus: https://urlhaus.abuse.ch/  (Malware downloads)
• ThreatFox: https://threatfox.abuse.ch/  (IOCs)
• PhishTool: https://www.phishtool.com/  (Email analysis)
• Talos Intelligence: https://talosintelligence.com/  (General)
• Alien Vault: https://otx.alienvault.com/  (Domain/WHOIS)
• Threat Miner: https://www.threatminer.org/ 
• Hybrid Analysis: https://www.hybrid-analysis.com/  (Malware Sandbox)
• CAPE: https://capev2.readthedocs.io/en/latest/introduction/what.html  (Malware Sandbox)
• Any.Run: https://any.run/  (Malware Sandbox)
• JoeSecurity: https://www.joesecurity.org/  (Malware Sandbox)
• VirusTotal: https://www.virustotal.com/ 
• Triage: https://tria.ge/ 
• CSV URL Extractor: https://www.convertcsv.com/url-extractor.htm 
• Reversing Labs: https://register.reversinglabs.com/file_reputation  (File Reputation)
• PhishTool: https://www.phishtool.com/  (Analyze Email)
• MXToolbox: https://mxtoolbox.com/  (Email Lookup)
• Spamhaus: https://www.spamhaus.org/  (Email Lookup)
• Dmarcian: https://dmarcian.com/  (SPF, DKIM, DMARC Lookup)