⇗ I have a url

Search engine for Tor onion services, reachable from the clearnet, with abuse material filtered out. Also publishes lists of online onion sites.

LevelBlue (formerly AT&T) Open Threat Exchange. Community threat pulses, passive DNS and indicator lookups for IPs, domains, hashes and URLs.

On-demand page archiver (archive.ph / archive.is) that captures a snapshot and screenshot, often working on pages the Wayback Machine can't capture, such as social posts.

Automates archiving of social media posts, videos and web pages from a spreadsheet or CLI, with hashing and timestamping to preserve evidence.

Community reporting platform for scam and fraud crypto addresses, domains and social accounts, run by TRM Labs.

Headless-Chrome screenshot tool for large lists of URLs, with a local web UI to triage results and track changes.

HTTP probing toolkit that checks which hosts are live and grabs titles, status codes, tech stack, TLS details and favicon hashes in bulk.

Search engine and archive of leaks, pastes, dark-web pages, and historical data. Supports email, domain, IP, CIDR, URL, and crypto address selectors.

Browser extension (the "verification Swiss army knife") for checking images and video. Keyframe extraction, multi-engine reverse search, magnifier, metadata, forensic filters and video context lookups.

Finds the numeric Facebook ID of a profile, page or group from its URL, which advanced search tools need.

Hosting history, netblock owner, nameserver, SSL and technology report for any site. Netcraft has tracked hosting since the 1990s.

Free threat intel platform that enriches IPs, domains and URLs with risk scores, linked threats, feeds and WHOIS/DNS context.

Shows removed and deleted Reddit comments and posts for a user, subreddit or thread by comparing live data with archives.

abuse.ch database of malware IOCs (C2 IPs, domains, URLs, hashes) tagged by malware family, free to search and export.

Open-source dark web crawler that maps links from an onion site, gathers page info and can save results as JSON or a tree.

Extracts details from a Telegram bot token and chat ID, such as bot name, owner, chats and invite links. Useful for investigating phishing kits and malware that exfiltrate data to Telegram.

abuse.ch database of URLs used for malware distribution, searchable by URL, host, hash or tag, with downloadable feeds.

Sandbox that loads a URL and records the requests, IPs, domains, screenshots and DOM. Its search across millions of past scans is a pivot goldmine.

Scans files, URLs, domains and IPs against 70+ engines. The relations graph shows passive DNS, communicating files, subdomains and historical WHOIS.

Browser extension and lookup service that identifies technologies on websites, such as frameworks, CMS, analytics, CDNs and e-commerce platforms.

Shows a YouTube video's or channel's exact upload time, tags, geolocation, licensing and thumbnails, plus links for reverse-searching the thumbnails.

Command-line downloader for video and audio from YouTube and over a thousand other sites. Preserves metadata, subtitles, thumbnails and comments for archiving and evidence.