▧ I have a file / doc

LevelBlue (formerly AT&T) Open Threat Exchange. Community threat pulses, passive DNS and indicator lookups for IPs, domains, hashes and URLs.

MuckRock's platform for uploading, OCR-ing, annotating and searching primary-source documents. Hosts millions of public newsroom documents.

The reference command-line tool for reading, writing and stripping metadata (EXIF, IPTC, XMP, GPS, maker notes) in images, video, audio and documents. Supports hundreds of formats.

Windows tool that finds documents published on a domain, downloads them and extracts metadata such as usernames, software, printers and internal paths.

CLI that uses Google dorks to find public documents (pdf, doc, xls, ppt) on a target domain and downloads them for metadata analysis.

OCCRP's searchable archive of leaks, company registries, court records and gazettes used in cross-border investigative journalism.

abuse.ch database of malware IOCs (C2 IPs, domains, URLs, hashes) tagged by malware family, free to search and export.

abuse.ch database of URLs used for malware distribution, searchable by URL, host, hash or tag, with downloadable feeds.

Scans files, URLs, domains and IPs against 70+ engines. The relations graph shows passive DNS, communicating files, subdomains and historical WHOIS.