Search OSINT tools by investigation task.

Automated threat-analysis sandbox

Best for: Use it when a security team needs deeper sandbox reporting for an authorized suspicious sample.

Browser-based data decoding and transformation

Best for: Use it when an analyst needs safe, repeatable transformations of indicators, logs, URLs, encodings, or extracted text.

Malware-URL intelligence reference

Best for: Use it when a URL or domain needs malware-distribution context and conservative threat corroboration.

DNS, email, and blacklist diagnostics

Best for: Use it when a domain or mail server needs quick deliverability, DNS, or blacklist context before deeper infrastructure…

Open-source network mapper for authorized exposure and service discovery

Best for: Authorized network inventory, service discovery, exposure validation, and defensive technical assessment.

Search published fact checks across indexed sources

Best for: Discovering published fact-checks, claim-review articles, repeated rumor variants, and prior reporting around a public claim.

Sanctions, PEP, and watchlist context with source links

Best for: Sanctions, PEP, watchlist, vessel, company, and public-interest screening where structured entity data and source lists matter.

Multi-source reputation context for indicators

Best for: Quick reputation triage for suspicious URLs, domains, IPs, file hashes, and already-public malware or phishing indicators.

Reverse-image search for reuse and chronology checks

Best for: Reverse-image corroboration, earlier-publication checks, image reuse detection, modified-copy discovery, and quick visual-claim triage.