Check a Domain or URL
Verify any domain name, subdomain, or full URL against our multi-source threat correlation engine. All checks automatically normalize input and enforce independent corroboration.
Enter Target Indicator
Supports raw hostnames (e.g., `bank.ug`), subdomains (`login.bank.ug`), or full URLs (`https://sub.bank.ug/login.php`).
When a URL is submitted, the normalizer extracts the exact `hostname` and the parent `registrable_domain` (`eTLD+1`). Both levels are verified to ensure subdomains hosted on dynamic DNS providers are analyzed accurately without penalizing the entire service host unnecessarily.
To prevent false positives or automated takedown abuse, our engine enforces that a domain is only classified as a High-Confidence Finding when independently corroborated by $\ge 2$ trusted intelligence feeds or verified institutional reports.