VirusTotalvirustotal.com
Scans files, URLs, domains and IPs against 70+ engines. The relations graph shows passive DNS, communicating files, subdomains and historical WHOIS.
file / docurldomainip / asndetails
tools / urlscan
urlscan.io
Sandbox that loads a URL and records the requests, IPs, domains, screenshots and DOM. Its search across millions of past scans is a pivot goldmine.
freemiumacct optionalapiweb
field note
Search existing scans before submitting a new one. Public scans are visible to everyone (including the target), so set visibility to Private or Unlisted for sensitive URLs.
similar tools
AlienVault OTXotx.alienvault.com
LevelBlue (formerly AT&T) Open Threat Exchange. Community threat pulses, passive DNS and indicator lookups for IPs, domains, hashes and URLs.
ip / asndomainfile / docurldetails
gowitnessgithub.com
Headless-Chrome screenshot tool for large lists of URLs, with a local web UI to triage results and track changes.
urldomaindetails
httpxgithub.com
HTTP probing toolkit that checks which hosts are live and grabs titles, status codes, tech stack, TLS details and favicon hashes in bulk.
domainip / asnurldetails
Pulsedivepulsedive.com
Free threat intel platform that enriches IPs, domains and URLs with risk scores, linked threats, feeds and WHOIS/DNS context.
ip / asndomainurldetails
ThreatFoxthreatfox.abuse.ch
abuse.ch database of malware IOCs (C2 IPs, domains, URLs, hashes) tagged by malware family, free to search and export.
ip / asndomainurlfile / docdetails