Dark Web & Threat Intelligence

Tools for accessing and searching Tor services, scanning URLs and files, and checking or sharing indicators of compromise.

Interactive online malware sandbox that runs suspicious files and URLs and records their behaviour.

Community-maintained database of reported malicious IP addresses, with reputation lookups and a free API tier.

Search engine for Tor hidden services (.onion), excluding abuse material.

Open Threat Exchange sharing community indicators of compromise.

Open-source platform for sharing and correlating threat intelligence.

Privacy-focused browser that routes traffic through the Tor network and can open .onion hidden services.

Scans files and URLs against many engines and aggregates threat intel.

Sandboxes and analyzes websites, capturing requests, screenshots and tech.