Bookmarks
A curated list of blue team tools I use and trust — organized by category.
Threat Analysis (Multi-Indicator Active Scan)
VirusTotal
Multi-engine file, URL & hash scanner
GO 
Hybrid Analysis
Free malware sandbox with behavioral report
GO 
ANY.RUN
Interactive malware sandbox
GO 
URLScan.io
Scan & screenshot URLs, DOM analysis
GO External Attack Surface Intelligence (Infra / Exposure / Credentials)
Shodan
Internet-wide port & banner scanner
GO 
Censys
ASN, cert & host exposure search
GO 
Hudson Rock
Compromised credentials lookup from infostealer infections
GO Threat Intelligence (Feeds / IOC / Context)
OTX AlienVault
Open threat exchange, IOC feeds
GO 
IBM X-Force
Threat intel, malware analysis & IOC lookup
GO Indicator Reputation (IP / URL / Hash / Phone / Mail)
AbuseIPDB
IP abuse reports & reputation scoring
GO 
IPQualityScore
IP, URL & email reputation scoring
GO 
PhishTank
Community phishing URL database
GO 
MalwareBazaar
Malware sample repository by abuse.ch
GO Utilities
CyberChef
Data transformation & analysis swiss army knife
GO 
IPInfo Bulk Lookup
Bulk IP geolocation & info lookup
GO 
Browserling
Live browser sandbox for safe URL browsing
GO