IOC lookup
Check an IP address, domain, URL or file hash against public threat intelligence. Paste it defanged or not.
Runs in your browser. Nothing is sent unless you choose Check reputation, and nothing is stored.
What it checks
Domains, URLs and IPv4 addresses are checked against abuse.ch's URLhaus and ThreatFox, and URLs and domains also against Google Safe Browsing. MD5, SHA-1 and SHA-256 hashes are checked against MalwareBazaar, ThreatFox and URLhaus.
You get one merged verdict plus each source's answer, with links to the full entry. A clean result is shown as "not listed", never "safe": new threats take time to be reported.
Private by default
Detection and refanging run in your browser. The indicator is sent only when you press Check reputation, and it isn't logged. Cached results are stored under a one-way hash.