🔒

This Feature is Locked

The Threat Intelligence Dashboard is part of Pro ($6/month or $60/year). Use your Pro code from the shop or enter it below.

IOC Cross-Reference Scanner

Paste domains, IPs, URLs, or email addresses (one per line). The scanner checks each against known threat indicators and reputation databases.

🔴 Live Threat Feed — URLhaus (abuse.ch)

Check a URL or domain against the URLhaus malware URL database — a public threat feed maintained by abuse.ch. This checks against known malware distribution URLs reported by security researchers worldwide.

Batch Domain Age Checker

Check how long domains have been registered. Newly registered domains are a massive red flag — most phishing sites are less than 30 days old.

Threat Report Generator

Generate a professional threat intelligence report from your saved cases. Combines all evidence, IOCs, and verdicts into a single exportable document.

Common Phishing Indicators — Quick Reference
🔴 High Risk TLDs

.zip .mov .top .xyz .tk .ml .ga .cf .gq .work .click .loan .buzz

🟡 Suspicious Keywords

verify, secure, update, confirm, login, signin, account, suspend, urgent

🔵 URL Red Flags

IP as host, punycode (xn--), URL shorteners, 4+ subdomains, HTTP (no S)

🟣 Email Red Flags

SPF fail, DKIM fail, Reply-To mismatch, free email for business, urgency