PRO
OSINT Reputation Checker
The Reputation Checker queries multiple threat-intelligence feeds to determine whether an IP, domain or URL is malicious. It aggregates signals from VirusTotal, AbuseIPDB, URLhaus and other sources to give you a fast verdict on an indicator’s risk level.
What it does
- Aggregated reputation score from several feeds.
- Detection of malicious activity and abuse reports.
- Coverage of IPs, domains and URLs.
- Threat-intel signals (malware, C2, spam).
How to use it
- 1Enter the IP, domain or URL to check.
- 2Run the query against the threat feeds.
- 3Interpret the verdict and the supporting sources.
Use cases
- Triage of indicators of compromise (IOCs).
- Validating IPs in logs and SOC alerts.
- Informed blocking of malicious domains and IPs.
Frequently asked questions
Which sources does it query?
It aggregates VirusTotal, AbuseIPDB, URLhaus and other feeds based on configured keys.
Does it work for IPs and domains?
Yes, it accepts IPs, domains and URLs as input indicators.
Does it need API keys?
It improves with IPQS, AbuseIPDB or VirusTotal keys set in Settings.