Checks an indicator of compromise — an IP, file hash (MD5/SHA1/SHA256), URL,
or domain — against VirusTotal
and (for IPs) AbuseIPDB
in one request.
Unlike almost every other tool on this site, this one
is not purely client-side — whatever you enter is sent to this site's own
server, which queries VirusTotal/AbuseIPDB on your behalf (their APIs don't allow direct
browser requests, and the API keys can't be exposed client-side). Don't paste anything here
you wouldn't want checked against third-party threat-intel services.
Why not just check both sites separately?
This exists purely as a time-saver for the common case — pasting one IOC once instead of
opening two tabs. It's a thin combination of both services' public APIs, not a replacement
for either: for deep investigation, the full VirusTotal or AbuseIPDB report will always have
more detail than this summary view.