Parse → retrieve → synthesise over the abuse.ch feeds. Answers cite the record they came from, unknowns are reported as unknown, and confidence is itemised rather than asserted.
Live feeds · Queries hit ThreatFox, URLhaus and MalwareBazaar directly. Note that most indicators in the supplied test set are synthetic or long-since taken down, so they correctly return no records — that is the honest answer, not a failure. Use Load indicators live from feeds to pull indicators that are in the feeds right now and exercise the malicious path.
Paste IPs, domains, URLs, or MD5/SHA-1/SHA-256 hashes — one per line, comma separated, or embedded in prose. Defanged notation is accepted.
Example queries
No run yet. Submit indicators above or pick an example query.