Skip to main content
Darkfield
Tools · smart correlation lookup

Paste anything.
We correlate across every source.

Company name, domain, email, wallet, hash or CVE — we detect the type and cross-reference live across the entire Darkfield corpus: ransomware victim disclosures, our blacklist and breach catalogs, and full-text search on the dark-web pages we crawl. Click any card to drill into the full dossier.

Correlation runs as you type · ⏎ for the full dossier

Try one of these

Looking up your own assets?

One-off lookups are free. Add the indicator to your watchlist on Pro to get alerted automatically the next time it surfaces across the corpus.

Pro tools

Investigate further

Targeted investigations run in the background and bill Cyber Tokens. Available to signed-in Pro, Team and Enterprise accounts.

10 Cyber Tokens · ~5-10 min

Deep dark-web scan

Full investigation on a domain: ransomware leak corpus, indexed pages, live Tor search, credential exposure, AI summary.

What we check, every search

  • Ransomware corpus · 38k+ victim disclosures across 470 operators
  • Blocklists · sanctioned, scam-tagged and phishing wallet + domain corpus
  • Breach catalog · public data-breach disclosures with exposed-record counts
  • Telegram channels · last 30 days of public OSINT / threat-intel channels we monitor