MalwareBazaar
bazaar.abuse.ch
Malware samples
Web
Malware & C2 FeedsOpen ↗
Threat Intelligence Feeds
SpecializedContains sensitive tools36 tools in this domain.
Malware & C2 Feeds
ThreatFox
threatfox.abuse.ch
IoC aggregator
Web
Malware & C2 FeedsOpen ↗
Feodo Tracker
feodotracker.abuse.ch
C2 IPs
Web
Malware & C2 FeedsOpen ↗
SSL Blacklist
sslbl.abuse.ch
Malicious SSL certs
Web
Malware & C2 FeedsOpen ↗
URLhaus
urlhaus.abuse.ch
Malware URLs
Web
Malware & C2 FeedsOpen ↗
MalShare
malshare.com
Malware repository
Web
Malware & C2 FeedsOpen ↗
VirusShare
virusshare.com
Sample sharing
Web
Malware & C2 FeedsOpen ↗
Malware Domain List
malwarepatrol.net
Malicious domains
Web
Malware & C2 FeedsOpen ↗
AlienVault OTX
otx.alienvault.com
Community threat intel
Web
Malware & C2 FeedsOpen ↗
IBM X-Force
exchange.xforce.ibmcloud.com
Threat exchange
Web
Malware & C2 FeedsOpen ↗
Recorded Future
recordedfuture.com
Commercial feed (free blog)
WebFree
Malware & C2 FeedsOpen ↗
Microsoft Threat Intelligence
microsoft.com
MS-curated
Web
Malware & C2 FeedsOpen ↗
KEV catalog
Web
Malware & C2 FeedsOpen ↗
Vulnrichment
github.com
CISA enriched CVEs
CLI
Malware & C2 FeedsOpen ↗
Phishing & Fraud Feeds
PhishTank
phishtank.com
Phishing URLs
Web
Phishing & Fraud FeedsOpen ↗
OpenPhish
openphish.com
Phishing URLs
Web
Phishing & Fraud FeedsOpen ↗
FraudGuard
fraudguard.io
Fraud intelligence
Web
Phishing & Fraud FeedsOpen ↗
HaveIBeenPwned
haveibeenpwned.com
Breach notification
WebSensitive
Phishing & Fraud FeedsOpen ↗
DeHashed
dehashed.com
Breach search
WebSensitive
Phishing & Fraud FeedsOpen ↗
IntelligenceX
intelx.io
Dark web + leaks
WebSensitive
Phishing & Fraud FeedsOpen ↗
LeakCheck
leakcheck.io
Real-time breach
WebSensitive
Phishing & Fraud FeedsOpen ↗
Snusbase
snusbase.com
Recent breaches
WebSensitive
Phishing & Fraud FeedsOpen ↗
Hudson Rock
hudsonrock.com
Infostealer intel
Web
Phishing & Fraud FeedsOpen ↗
IP & Domain Reputation
Spamhaus
spamhaus.org
IP/domain reputation
Web
IP & Domain ReputationOpen ↗
FireHOL
iplists.firehol.org
IP blocklists
Web
IP & Domain ReputationOpen ↗
AbuseIPDB
abuseipdb.com
IP abuse reports
Web
IP & Domain ReputationOpen ↗
GreyNoise
greynoise.io
Internet scanner noise
Web
IP & Domain ReputationOpen ↗
CINS Score
cinsscore.com
Botnet IPs
Web
IP & Domain ReputationOpen ↗
Binary Defense
binarydefense.com
Banlist
Web
IP & Domain ReputationOpen ↗
IPsum
raw.githubusercontent.com
Curated IPs
Web
IP & Domain ReputationOpen ↗
CTI Platforms (ingest & correlate)
MISP
misp-project.org
Open-source CTI platform
WebFree
CTI Platforms (ingest & correlate)Open ↗
OpenCTI
opencti.io
CTI platform
Web
CTI Platforms (ingest & correlate)Open ↗
Yeti
yeti-platform.github.io
IoC platform
Web
CTI Platforms (ingest & correlate)Open ↗
aegistrace-threat-intelligence
github.com
Python CTI pipeline (author's)
Python
CTI Platforms (ingest & correlate)Open ↗
ThreatMiner
threatminer.org
Threat intel search
Web
CTI Platforms (ingest & correlate)Open ↗
PulseDive
pulsedive.com
IoC enrichment
Web
CTI Platforms (ingest & correlate)Open ↗
Sensitive area
A note before you continue
This section links to tools that can surface personal or private information (people, phone/email, breach data, faces). They are provided for lawful, authorised, and ethical research only.
- ✓ Investigate only where you have a legitimate, lawful basis.
- ✓ Minimise and protect any personal data you handle.
- ✗ No stalking, harassment, doxxing, or selling data.
By continuing you agree to our legal & ethics guidance. This choice is remembered on this device only.