SCW TOOLS
IOC Scanner
Paste indicators of compromise — IPs, domains, hashes, URLs, emails — and instantly get lookup links across 15+ threat intelligence platforms. No API keys. No signup. Just paste and investigate.
Bulk-process indicators in seconds. The scanner auto-detects indicator types, deduplicates, defangs for safe sharing, and generates direct links to VirusTotal, AbuseIPDB, Shodan, OTX, MalwareBazaar, and more.
SCAN Paste Indicators
SOURCES Threat Intel Platforms
🦠
VirusTotal
ip, domain, hash, url
🚫
AbuseIPDB
ip
🔍
Shodan
ip
📡
GreyNoise
ip
🌐
IPVoid
ip
🔎
Censys
ip
📸
URLScan
domain, url
🛤️
SecurityTrails
domain
🗺️
DNSDumpster
domain
📋
Whois
domain, ip
🧬
MalwareBazaar
hash
🔬
Hybrid Analysis
hash
👽
AlienVault OTX
ip, domain, hash, url
🦊
ThreatFox
ip, domain, hash
🛡️
Google Safe Browsing
url, domain
🎣
PhishTank
url
💀
Have I Been Pwned
email
📧
EmailRep
email
Built for SOC analysts.
Paste IOCs from alerts, threat reports, or incident tickets. Get instant lookup links. No context switching, no API rate limits.